Features

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

Thousands of wind and solar park systems sit exposed on the internet across Europe

CISO, critical infrastructure, cybersecurity, Don't miss, EU, Europe, Features, hardware, Hot stuff, ICS/SCADA, News, research, vulnerability assessment /

Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]

Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »

Pricing your bad days and how to build an economic model for security decisions

boardroom, CISO, CXO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, News, Risk Management, strategy, tips /

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

Who watches the AI watching your street?

AI, CCTV, Don't miss, Features, Hot stuff, News, Privacy, research, security cameras, surveillance /

Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]

Who watches the AI watching your street? Read More »

Automation, AI agents or people? Sorting out who handles each security finding

ArmorCode, automation, boardroom, cybersecurity, Don't miss, Features, Hot stuff, News, report, strategy, survey, tips, vulnerability management /

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

NIS2 compliance: 7 low-cost steps to secure credentials

access controls, Compliance, credentials, Don't miss, Features, Hot stuff, MFA, News, Passwork /

NIS2 compliance: 7 low-cost steps to secure credentials 2026-10-06 at 08:00 By Help Net Security Security budgets rarely stretch to cover a full NIS2 programme in one pass. Credential controls are where a constrained team can start, because they make access visible, revocable, and reviewable without new infrastructure. NIS2 compliance rests on risk-management measures that […]

NIS2 compliance: 7 low-cost steps to secure credentials Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

If you do one security check this quarter, make it agent memory

agentic AI, CISO, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]

If you do one security check this quarter, make it agent memory Read More »

Stop watching what AI agents say and start watching what they do

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, security telemetry, strategy, tips /

Stop watching what AI agents say and start watching what they do 2026-09-25 at 08:30 By Mirko Zorz In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent […]

Stop watching what AI agents say and start watching what they do Read More »

What to do first when you get 90 days to secure AI agent data

agentic AI, cybersecurity, data, Don't miss, Features, Hot stuff, News, opinion, strategy, tips /

What to do first when you get 90 days to secure AI agent data 2026-09-24 at 08:00 By Mirko Zorz In this interview with Help Net Security, Kelly Herrell, CEO at Nol8, explains where AI agents create exposure inside organizations. The first thing to examine is the data path: what an agent can reach, what […]

What to do first when you get 90 days to secure AI agent data Read More »

Know what was tested before your SAP ECC migration goes live

CXO, digital transformation, Don't miss, Features, News, opinion, SAP, strategy, tips /

Know what was tested before your SAP ECC migration goes live 2026-09-21 at 09:00 By Mirko Zorz In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the 2027 deadline and pay SAP for extended support until 2030. The interview covers what that […]

Know what was tested before your SAP ECC migration goes live Read More »

The AI security question leaders should be asking instead

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Gremlin, Hot stuff, News, Risk Management, strategy, tips /

The AI security question leaders should be asking instead 2026-09-17 at 08:30 By Mirko Zorz In this Help Net Security interview, Frederic Bull, Security Officer at Gremlin, talks about what AI means for security teams. The conversation covers why asking what data a model was trained on is only part of the picture, and why […]

The AI security question leaders should be asking instead Read More »

What happens when AI agent governance is missing at scale

agentic AI, automation, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

What happens when AI agent governance is missing at scale 2026-09-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what an agent does, since […]

What happens when AI agent governance is missing at scale Read More »

Getting a stranger’s phone kicked off the cellular network costs a few dollars

Don't miss, Features, GSMA, Hot stuff, mobile, News, research, Samsung, tracking /

Getting a stranger’s phone kicked off the cellular network costs a few dollars 2026-09-11 at 09:00 By Mirko Zorz Researchers at Michigan State University and three partner schools bought a Samsung Galaxy Z Fold 7, copied the identification number printed on the sealed box, and reported the phone to its carrier as lost. Then they […]

Getting a stranger’s phone kicked off the cellular network costs a few dollars Read More »

When AI quietly breaks things, who pays?

AI, CISO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, how-to, News, Risk Management, strategy, tips /

When AI quietly breaks things, who pays? 2026-09-03 at 08:00 By Mirko Zorz David Halbreich, an insurance recovery partner at Reed Smith, breaks down how AI companies should handle coverage gaps that come up as the industry grows. He covers straddle claims that fall between tail and go-forward D&O policies after a merger, how governance […]

When AI quietly breaks things, who pays? Read More »

A battery storage cyberattack would look exactly like a badly tuned controller

critical infrastructure, Don't miss, Europe, Features, Hot stuff, News, research, Risk Management, smart grid, storage, UK /

A battery storage cyberattack would look exactly like a badly tuned controller 2026-09-02 at 12:00 By Mirko Zorz Batteries connected to the grid make money by reacting to frequency, pushing power out when it sags and soaking it up when it rises. A few hundred of them moving together, on command from someone who should […]

A battery storage cyberattack would look exactly like a badly tuned controller Read More »

Scroll to Top