Don’t miss

How to tell if your password manager meets HIPAA expectations

Compliance, Don't miss, healthcare, HIPAA, Hot stuff, News, password manager, Passwork /

How to tell if your password manager meets HIPAA expectations 2025-12-08 at 08:03 By Sinisa Markovic Most healthcare organizations focus on encryption, network monitoring, and phishing prevention, although one simple source of risk still slips through the cracks. Password management continues to open doors for attackers more often than leaders expect. Weak, reused, or shared […]

How to tell if your password manager meets HIPAA expectations Read More »

Building the missing layers for an internet of agents

Cisco, cybersecurity, Don't miss, Features, network, News, research, traffic monitoring /

Building the missing layers for an internet of agents 2025-12-05 at 08:59 By Anamarija Pogorelec Cybersecurity teams are starting to think about how large language model agents might interact at scale. A new paper from Cisco Research argues that the current network stack is not prepared for this shift. The work proposes two extra layers

Building the missing layers for an internet of agents Read More »

What security leaders should watch for when companies buy or sell a business

access management, Artificial Intelligence, Compliance, Concentric AI, cybersecurity, data security, Don't miss, News, risk, Video /

What security leaders should watch for when companies buy or sell a business 2025-12-05 at 08:59 By Help Net Security In this Help Net Security video, Lane Sullivan SVP, CISO and Strategy Officer at Concentric AI, explains what security leaders should think about during mergers, acquisitions, and divestitures. Sullivan talks about the types of risk

What security leaders should watch for when companies buy or sell a business Read More »

Malicious Rust packages targeted Web3 developers

blockchain, Crate.io, Cryptocurrency, Don't miss, Ethereum, Hot stuff, News, software development /

Malicious Rust packages targeted Web3 developers 2025-12-04 at 17:06 By Zeljka Zorz A malicious Rust crate (package) named evm-units, aimed at stealing cryptocurrency from unsuspecting developers, has been pulled from the official public package registry for the Rust programming language, but not before having been downloaded 7257 times. Another package (uniswap-utils) by the same author

Malicious Rust packages targeted Web3 developers Read More »

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182)

Cloudflare, Don't miss, Google Cloud, Hot stuff, JavaScript, Meta, mobile apps, News, Node.js, React, security update, vulnerability, web application, Wiz /

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182) 2025-12-04 at 14:32 By Zeljka Zorz A critical vulnerability (CVE-2025-55182) in React Server Components (RSC) may allow unauthenticated attackers to achieve remote code exection on the application server, the React development team warned on Wednesday. The maximum-severity vulnerability was privately reported by Lachlan Davidson and has

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182) Read More »

Smart grids are trying to modernize and attackers are treating it like an invitation

access control, Analog Devices, critical infrastructure, cybersecurity, Don't miss, energy sector, Features, firmware, hardware, Hot stuff, News, strategy, supply chain, threats /

Smart grids are trying to modernize and attackers are treating it like an invitation 2025-12-04 at 09:05 By Mirko Zorz In this Help Net Security interview, Sonia Kumar, Senior Director Cyber Security at Analog Devices, discusses how securing decentralized smart grids demands a shift in defensive strategy. Millions of distributed devices are reshaping the attack

Smart grids are trying to modernize and attackers are treating it like an invitation Read More »

A day in the life of the internet tells a bigger story

cybersecurity, DNS, Don't miss, Features, Hot stuff, network, News, research, traffic monitoring /

A day in the life of the internet tells a bigger story 2025-12-04 at 08:43 By Sinisa Markovic On any given day, the internet carries countless signals that hint at how networks behave behind the scenes. Researchers from RIPE NCC and several universities found a way to capture a detailed snapshot of that activity by

A day in the life of the internet tells a bigger story Read More »

AI vs. you: Who’s better at permission decisions?

Android, Artificial Intelligence, Data Protection, Don't miss, LLMs, News, Privacy, research, smartphones /

AI vs. you: Who’s better at permission decisions? 2025-12-04 at 08:04 By Sinisa Markovic A single tap on a permission prompt can decide how far an app reaches into a user’s personal data. Most of these calls happen during installation. The number of prompts keeps climbing, and that growing pressure often pushes people into rushed

AI vs. you: Who’s better at permission decisions? Read More »

Portmaster: Open-source application firewall

Don't miss, EU, firewall, GitHub, Hot stuff, News, open source, Privacy, software /

Portmaster: Open-source application firewall 2025-12-03 at 08:11 By Anamarija Pogorelec Portmaster is a free and open source application firewall built to monitor and control network activity on Windows and Linux. The project is developed in the EU and is designed to give users stronger privacy without asking them to manage every rule by hand. A

Portmaster: Open-source application firewall Read More »

Google fixes Android vulnerabilities “under targeted exploitation” (CVE-2025-48633, CVE-2025-48572)

0-day, Android, Don't miss, Google, Hot stuff, Motorola Solutions, News, Samsung /

Google fixes Android vulnerabilities “under targeted exploitation” (CVE-2025-48633, CVE-2025-48572) 2025-12-02 at 16:48 By Zeljka Zorz Google has shipped patches for 51 Android vulnerabilities, including two high-severity flaws (CVE-2025-48633, CVE-2025-48572) that “may be under limited, targeted exploitation”. According to the December Android security bulletin, both vulnerabilities affect the Android Framework, which is a collection of core

Google fixes Android vulnerabilities “under targeted exploitation” (CVE-2025-48633, CVE-2025-48572) Read More »

How a noisy ransomware intrusion exposed a long-term espionage foothold

APT, cyber espionage, cybercriminals, Don't miss, Hot stuff, News, Positive Technologies, Ransomware, threat detection /

How a noisy ransomware intrusion exposed a long-term espionage foothold 2025-12-02 at 15:15 By Zeljka Zorz Getting breached by two separate and likely unconnected cyber attack groups is a nightmare scenario for any organization, but can result in an unexpected silver lining: the noisier intrusion can draw attention to a far stealthier threat that might

How a noisy ransomware intrusion exposed a long-term espionage foothold Read More »

Creative cybersecurity strategies for resource-constrained institutions

collaboration, Compliance, cyber resilience, cybersecurity, Don't miss, Features, Hot stuff, Innovation, News, RTI International, security controls, strategy /

Creative cybersecurity strategies for resource-constrained institutions 2025-12-02 at 09:33 By Mirko Zorz In this Help Net Security interview, Dennis Pickett, CISO at RTI International, talks about how research institutions can approach cybersecurity with limited resources and still build resilience. He discusses the tension between open research and the need to protect sensitive information, noting that

Creative cybersecurity strategies for resource-constrained institutions Read More »

Product showcase: UserLock IAM for Active Directory

Don't miss, Hot stuff, identity management, IS Decisions, News, Product showcase /

Product showcase: UserLock IAM for Active Directory 2025-12-02 at 08:34 By Help Net Security UserLock brings modern identity and access management (IAM) to Active Directory, adding granular multi-factor authentication (MFA), contextual access controls, single sign-on (SSO) and real-time session management. It helps AD-first teams secure logons and govern access to network and SaaS resources without

Product showcase: UserLock IAM for Active Directory Read More »

Cryptomixer crypto laundering service taken down by law enforcement

Cryptocurrency, cybercrime, Don't miss, EU, Eurojust, Europol, Germany, Hot stuff, News, Switzerland /

Cryptomixer crypto laundering service taken down by law enforcement 2025-12-01 at 16:57 By Zeljka Zorz German and Swiss law enforcement agencies have taken down Cryptomixer, an illegal cryptocurrency mixer service, and have confiscated over 25 million euros (approximately $29 million) in Bitcoin. The Cryptomixer seizure banner As part of Operation Olympia, and with support from

Cryptomixer crypto laundering service taken down by law enforcement Read More »

Treating MCP like an API creates security blind spots

API security, Artificial Intelligence, Compliance, cybersecurity, Don't miss, Features, Hot stuff, identity management, MCP Manager, News, security controls, servers /

Treating MCP like an API creates security blind spots 2025-12-01 at 09:06 By Mirko Zorz In this Help Net Security interview, Michael Yaroshefsky, CEO at MCP Manager, discusses how Model Context Protocol’s (MCP) trust model creates security gaps that many teams overlook and why MCP must not be treated like a standard API. He explains how

Treating MCP like an API creates security blind spots Read More »

Offensive cyber power is spreading fast and changing global security

China, CISO, cyber risk, cybersecurity, Don't miss, Hot stuff, NATO, News, report, research, Risk Management, Russian Federation, strategy, threats /

Offensive cyber power is spreading fast and changing global security 2025-12-01 at 08:36 By Sinisa Markovic Offensive cyber activity has moved far beyond a handful of major powers. More governments now rely on digital operations to project influence during geopolitical tension, which raises new risks for organizations caught in the middle. A new policy brief

Offensive cyber power is spreading fast and changing global security Read More »

Enterprise password audits made practical for busy security teams

auditing, Don't miss, enterprise, Hot stuff, News, password management, Passwork /

Enterprise password audits made practical for busy security teams 2025-12-01 at 08:36 By Sinisa Markovic Security teams carry a heavy load, and password risk is one of the most overlooked parts of that workload. Every year new systems, cloud tools, and shared services add more credentials into the mix. Some sit in proper vaults, others

Enterprise password audits made practical for busy security teams Read More »

What zero trust looks like when you build it step by step

access control, authentication, cybersecurity, Don't miss, identity management, KeyData Cyber, News, security metrics, Video, zero trust /

What zero trust looks like when you build it step by step 2025-12-01 at 08:36 By Help Net Security In this Help Net Security video, Jonathan Edwards, Managing Director at KeyData Cyber, walks us through what practical zero trust adoption looks like in stages. He explains why he dislikes the term itself, then shifts to

What zero trust looks like when you build it step by step Read More »

Social data puts user passwords at risk in unexpected ways

authentication, cyber risk, Don't miss, Facebook, Hot stuff, Instagram, LinkedIn, LLMs, News, passwords, Privacy, research, social media, tips /

Social data puts user passwords at risk in unexpected ways 2025-11-28 at 09:08 By Anamarija Pogorelec Many CISOs already assume that social media creates new openings for password guessing, but new research helps show what that risk looks like in practice. The findings reveal how much information can be reconstructed from public profiles and how

Social data puts user passwords at risk in unexpected ways Read More »

Scroll to Top