Don’t miss

Ransomware is up, zero-days are booming, and your IP camera might be next

attacks, cyber resilience, cyber risk, cybercrime, cybersecurity, Don't miss, Forescout, News, Ransomware, report, threats /

Ransomware is up, zero-days are booming, and your IP camera might be next 2025-08-06 at 08:47 By Help Net Security Cyber attackers are finding new ways in through the overlooked and unconventional network corners. Forescout’s 2025H1 Threat Review reveals a surge in advanced tactics, with zero-day exploits up 46 percent and ransomware attacks averaging 20 […]

Ransomware is up, zero-days are booming, and your IP camera might be next Read More »

AI in the SOC: Game-changer or more noise?

Artificial Intelligence, cybersecurity, Don't miss, Hot stuff, Immersive, News, security operations, SOC, Video /

AI in the SOC: Game-changer or more noise? 2025-08-06 at 08:02 By Help Net Security In this Help Net Security video, Kev Marriott, Senior Manager of Cyber at Immersive Labs, explores the challenges and opportunities of integrating AI into Security Operations Centers (SOCs). While AI can boost productivity by automating manual tasks and reducing alert

AI in the SOC: Game-changer or more noise? Read More »

CISOs say they’re prepared, their data says otherwise

Artificial Intelligence, automation, Axonius, cybersecurity, data security, Don't miss, News, report, vulnerability management /

CISOs say they’re prepared, their data says otherwise 2025-08-06 at 08:02 By Sinisa Markovic Most security teams believe they can act quickly when a threat emerges. But many don’t trust the very data they rely on to do so, and that’s holding them back. A new Axonius report, based on a survey of 500 U.S.-based

CISOs say they’re prepared, their data says otherwise Read More »

Millions of Dell laptops could be persistently backdoored in ReVault attacks

Broadcom, Cisco, Dell, Don't miss, Endpoint Security, firmware, hardware, Hot stuff, News, vulnerability /

Millions of Dell laptops could be persistently backdoored in ReVault attacks 2025-08-05 at 21:19 By Zeljka Zorz A set of firmware vulnerabilities affecting 100+ Dell laptop models widely used in government settings and by the cybersecurity industry could allow attackers to achieve persistent access even across Windows reinstalls, Cisco Talos researchers have discovered. About the

Millions of Dell laptops could be persistently backdoored in ReVault attacks Read More »

Project Ire: Microsoft’s autonomous malware detection AI agent

AI, automation, Don't miss, Hot stuff, LLM, malware detection, Microsoft, Microsoft Defender, News, reverse engineering /

Project Ire: Microsoft’s autonomous malware detection AI agent 2025-08-05 at 19:45 By Zeljka Zorz Microsoft is working on a AI agent whose main goal is autonomous malware detection and the prototype – dubbed Project Ire – is showing great potential, the company has announced on Tuesday. Tested on a dataset of known malicious and benign

Project Ire: Microsoft’s autonomous malware detection AI agent Read More »

Security tooling pitfalls for small teams: Cost, complexity, and low ROI

CISO, cloud security, Compliance, cybersecurity, Don't miss, Features, generative AI, GRC, Hot stuff, News, opinion, Risk Management, Scrut Automation, SMBs, strategy, tips /

Security tooling pitfalls for small teams: Cost, complexity, and low ROI 2025-08-05 at 10:11 By Mirko Zorz In this Help Net Security interview, Aayush Choudhury, CEO at Scrut Automation, discusses why many security tools built for large enterprises don’t work well for leaner, cloud-native teams. He explains how simplicity, integration, and automation are key for

Security tooling pitfalls for small teams: Cost, complexity, and low ROI Read More »

BloodHound 8.0 debuts with major upgrades in attack path management

Black Hat USA 2025, Don't miss, Duo Security, GitHub, Microsoft Entra ID, News, open source, software, SpecterOps /

BloodHound 8.0 debuts with major upgrades in attack path management 2025-08-05 at 10:11 By Help Net Security SpecterOps has released BloodHound 8.0, the latest iteration of its open-source attack path management platform, featuring major enhancements and expanded capabilities. BloodHound OpenGraph The release introduces BloodHound OpenGraph, a major advancement in identity attack path management that uncovers

BloodHound 8.0 debuts with major upgrades in attack path management Read More »

Back to basics webinar: The ecosystem of CIS Security best practices

Center for Internet Security, Don't miss, Hot stuff, News, Whitepapers and webinars /

Back to basics webinar: The ecosystem of CIS Security best practices 2025-08-05 at 08:17 By Help Net Security Generative AI models, multi-cloud strategies, Internet of Things devices, third-party suppliers, and a growing list of regulatory compliance obligations all require the same security response: come together as a community to prioritize the basics. Watch this on-demand

Back to basics webinar: The ecosystem of CIS Security best practices Read More »

SonicWall firewalls targeted in ransomware attacks, possibly via zero-day

Arctic Wolf Networks, Don't miss, firewall, Hot stuff, News, Ransomware, SonicWall /

SonicWall firewalls targeted in ransomware attacks, possibly via zero-day 2025-08-04 at 14:34 By Zeljka Zorz Attackers wielding the Akira ransomware and possibly a zero-day exploit have been spotted targeting SonicWall firewalls since July 15, 2025. “In the intrusions reviewed, multiple pre-ransomware intrusions were observed within a short period of time, each involving VPN access through

SonicWall firewalls targeted in ransomware attacks, possibly via zero-day Read More »

AIBOMs are the new SBOMs: The missing link in AI risk management

Artificial Intelligence, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, Manifest Cyber, News, opinion, risk, strategy, supply chain, tips /

AIBOMs are the new SBOMs: The missing link in AI risk management 2025-08-04 at 09:11 By Mirko Zorz In this Help Net Security interview, Marc Frankel, CEO at Manifest Cyber, discusses how overlooked AI-specific risks, like poisoned training data and shadow AI, can lead to security issues that conventional tools fail to detect. He explains

AIBOMs are the new SBOMs: The missing link in AI risk management Read More »

Average global data breach cost now $4.44 million

Artificial Intelligence, CISO, cybersecurity, data breach, Don't miss, Hot stuff, IBM, News, report, survey /

Average global data breach cost now $4.44 million 2025-08-04 at 08:37 By Anamarija Pogorelec IBM released its Cost of a Data Breach Report, which revealed AI adoption is greatly outpacing AI security and governance. While the overall number of organizations experiencing an AI-related breach is a small representation of the researched population, this is the

Average global data breach cost now $4.44 million Read More »

Open-source password recovery utility Hashcat 7.0.0 released

Don't miss, GitHub, News, open source, passwords, penetration testing, red team, software /

Open-source password recovery utility Hashcat 7.0.0 released 2025-08-04 at 08:10 By Anamarija Pogorelec Hashcat is an open-source password recovery tool that supports five attack modes and more than 300 highly optimized hashing algorithms. It runs on CPUs, GPUs, and other hardware accelerators across Linux, Windows, and macOS, and includes features for distributed password cracking at

Open-source password recovery utility Hashcat 7.0.0 released Read More »

Smart steps to keep your AI future-ready

Artificial Intelligence, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, PwC, regulation, strategy /

Smart steps to keep your AI future-ready 2025-08-01 at 09:36 By Mirko Zorz In this Help Net Security interview, Rohan Sen, Principal, Cyber, Data, and Tech Risk, PwC US, discusses how organizations can design autonomous AI agents with strong governance from day one. As AI becomes more embedded in business ecosystems, overlooking agent-level security can

Smart steps to keep your AI future-ready Read More »

What attackers know about your company thanks to AI

Artificial Intelligence, cybersecurity, deepfakes, Don't miss, generative AI, GetReal Security, Hot stuff, LLMs, News, scams, threats, Video /

What attackers know about your company thanks to AI 2025-08-01 at 08:48 By Help Net Security In this Help Net Security video, Tom Cross, Head of Threat Research at GetReal Security, explores how generative AI is empowering threat actors. He breaks down three key areas: how GenAI lowers the technical barrier for attackers, enables highly

What attackers know about your company thanks to AI Read More »

Review: CISA Certified Information Systems Auditor Practice Tests

books, certification, Don't miss, News, Review, Reviews, skill development /

Review: CISA Certified Information Systems Auditor Practice Tests 2025-08-01 at 08:02 By Mirko Zorz CISA Certified Information Systems Auditor Practice Tests offers practical, domain-by-domain prep for the CISA exam, with hundreds of questions covering key objectives and real-world systems audit skills. About the authors Peter H. Gregory is a best-selling cybersecurity author, educator, keynote speaker,

Review: CISA Certified Information Systems Auditor Practice Tests Read More »

Why stolen credentials remain cybercriminals’ tool of choice

credentials, cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, N-able, News, opinion, passwords /

Why stolen credentials remain cybercriminals’ tool of choice 2025-07-31 at 09:26 By Help Net Security It’s often the case that the simplest tools have the longest staying power, because they ultimately get the job done. Take duct tape, for example: it’s a sturdy household classic that wasn’t invented to be elegant or high tech. It

Why stolen credentials remain cybercriminals’ tool of choice Read More »

New AI model offers faster, greener way for vulnerability detection

Artificial Intelligence, cybersecurity, Don't miss, Features, Hot stuff, LLMs, News, research, vulnerability assessment /

New AI model offers faster, greener way for vulnerability detection 2025-07-31 at 08:33 By Mirko Zorz A team of researchers has developed a new AI model, called White-Basilisk, that detects software vulnerabilities more efficiently than much larger systems. The model’s release comes at a time when developers and security teams face mounting pressure to secure

New AI model offers faster, greener way for vulnerability detection Read More »

AI is changing the vCISO game

CISO, cybersecurity, Cynomi, Don't miss, News, report, risk assessment, SMBs, strategy, survey /

AI is changing the vCISO game 2025-07-31 at 08:02 By Anamarija Pogorelec Virtual CISO (vCISO) services have moved from niche to mainstream, with vCISO services adoption 2025 data showing a more than threefold increase in just one year. According to Cynomi’s 2025 State of the Virtual CISO report, 67% of MSPs and MSSPs now offer

AI is changing the vCISO game Read More »

Artemis: Open-source modular vulnerability scanner

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, scanner, scanning, software, vulnerability assessment /

Artemis: Open-source modular vulnerability scanner 2025-07-30 at 09:00 By Mirko Zorz Artemis is an open-source modular vulnerability scanner that checks different aspects of a website’s security and translates the results into easy-to-understand messages that can be shared with the organizations being scanned. “The most important feature of the tool is report generation. Besides scanning, it

Artemis: Open-source modular vulnerability scanner Read More »

The food supply chain has a cybersecurity problem

CISO, critical infrastructure, CXO, cyber risk, cybersecurity, Don't miss, Features, Government, News, regulation, strategy, tips /

The food supply chain has a cybersecurity problem 2025-07-30 at 08:30 By Sinisa Markovic It’s unsettling to think that our food supply chain could be targeted or that the safety of our food could be compromised. But this is exactly the challenge the agri-food sector is dealing with right now. Despite agriculture’s importance, cybersecurity in

The food supply chain has a cybersecurity problem Read More »

Scroll to Top