Features

What AI-generated malware looks like under the microscope

What AI-generated malware looks like under the microscope 2026-11-04 at 09:00 By Mirko Zorz In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from […]

What AI-generated malware looks like under the microscope Read More »

What human hackers still do better than AI, according to HackerOne’s CEO

What human hackers still do better than AI, according to HackerOne’s CEO 2026-11-03 at 08:30 By Mirko Zorz AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, […]

What human hackers still do better than AI, according to HackerOne’s CEO Read More »

The first ten lines of a command policy for AI coding agents

The first ten lines of a command policy for AI coding agents 2026-11-02 at 08:30 By Mirko Zorz In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity […]

The first ten lines of a command policy for AI coding agents Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

Bellini Capital CISO on AI security governance and the limits of patching faster

Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]

Bellini Capital CISO on AI security governance and the limits of patching faster Read More »

Several AI security market categories are headed for bigger platforms

Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]

Several AI security market categories are headed for bigger platforms Read More »

Drone program compliance: What a CTO says most agencies get wrong

Drone program compliance: What a CTO says most agencies get wrong 2026-10-23 at 08:30 By Mirko Zorz In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety drone program, and where most programs fall short. He covers chain of custody […]

Drone program compliance: What a CTO says most agencies get wrong Read More »

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question Read More »

AI agent permissions are outrunning security

AI agent permissions are outrunning security 2026-10-22 at 09:02 By Mirko Zorz Most organizations have handed AI agents work that used to need a person’s sign-off. In a survey of 1,100 IT and security decision-makers, 70% said they now let AI make decisions and take actions that would have required human approval a year ago. […]

AI agent permissions are outrunning security Read More »

Privacy-preserving AI can protect your heart data, the bill is the problem

Privacy-preserving AI can protect your heart data, the bill is the problem 2026-10-21 at 10:02 By Mirko Zorz A heart monitor used to be a box beside a hospital bed. Electrodes fed a cable, the cable fed a screen, and a nurse watched the screen. The threat model fit on a sticky note. Cardiac care […]

Privacy-preserving AI can protect your heart data, the bill is the problem Read More »

Why Active Directory weaknesses stay open for years in teams with one or two admins

Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]

Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »

The cyber talent shortage? Job postings just hit a four-year low

The cyber talent shortage? Job postings just hit a four-year low 2026-10-16 at 08:30 By Mirko Zorz US employers posted 235,786 cybersecurity jobs from January through September 2026. That is the lowest total for those months in the four years that staffing and workforce intelligence firm CyberSN has tracked. They pulled the listings from job […]

The cyber talent shortage? Job postings just hit a four-year low Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

Patching and preventing issues: What are the lessons you can learn?

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Geopolitics and the cyber resilience gap belong in your threat model

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

Pricing your bad days and how to build an economic model for security decisions

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

Who watches the AI watching your street?

Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]

Who watches the AI watching your street? Read More »

Automation, AI agents or people? Sorting out who handles each security finding

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

Scroll to Top