News

Bluetooth 6.1 released, enhances privacy and power efficiency

Bluetooth, networking, News /

Bluetooth 6.1 released, enhances privacy and power efficiency 2025-05-12 at 10:01 By Help Net Security The Bluetooth Special Interest Group has released Bluetooth 6.1, and one of the most important new features is an update to how devices manage privacy and power. The update, called Bluetooth Randomized RPA (resolvable private address) Updates, helps protect users […]

Bluetooth 6.1 released, enhances privacy and power efficiency Read More »

Why security teams cannot rely solely on AI guardrails

Artificial Intelligence, CISO, CXO, cybersecurity, data security, LLMs, News, opinion /

Why security teams cannot rely solely on AI guardrails 2025-05-12 at 09:19 By Mirko Zorz In this Help Net Security interview, Dr. Peter Garraghan, CEO of Mindgard, discusses their research around vulnerabilities in the guardrails used to protect large AI models. The findings highlight how even billion-dollar LLMs can be bypassed using surprisingly simple techniques,

Why security teams cannot rely solely on AI guardrails Read More »

How to give better cybersecurity presentations (without sounding like a robot)

CISO, conferences, CXO, Don't miss, Features, Hot stuff, how-to, News, skill development, strategy, tips /

How to give better cybersecurity presentations (without sounding like a robot) 2025-05-12 at 08:35 By Mirko Zorz Most people think great presenters are born with natural talent. Luka Krejci, a presentation expert, disagrees. “They are called presentation skills. Skills, not talent,” he says. “Any skill, be it dancing, football, or presenting, can be developed only

How to give better cybersecurity presentations (without sounding like a robot) Read More »

SPIRE: Toolchain of APIs for establishing trust between software systems

GitHub, News, open source, software /

SPIRE: Toolchain of APIs for establishing trust between software systems 2025-05-12 at 08:00 By Help Net Security SPIRE is a graduated project of the Cloud Native Computing Foundation (CNCF). It’s a production-ready implementation of the SPIFFE APIs that handles node and workload attestation to securely issue SVIDs to workloads and verify the SVIDs of other

SPIRE: Toolchain of APIs for establishing trust between software systems Read More »

Layoffs pose a cybersecurity risk: Here’s why offboarding matters

cyber risk, cybersecurity, Don't miss, Insider Threat, JumpCloud, News, Video /

Layoffs pose a cybersecurity risk: Here’s why offboarding matters 2025-05-12 at 07:39 By Help Net Security In this Help Net Security video, Chase Doelling, Principal Strategist at JumpCloud, discusses the overlooked security risks associated with improper offboarding. Though many organizations focus on securely onboarding new employees, they often overlook the security risks associated with properly

Layoffs pose a cybersecurity risk: Here’s why offboarding matters Read More »

Despite drop in cyber claims, BEC keeps going strong

Coalition, News, Ransomware, report, survey /

Despite drop in cyber claims, BEC keeps going strong 2025-05-12 at 07:01 By Help Net Security Ransomware claims stabilized in 2024 despite remaining the most costly and disruptive type of cyberattack, according to Coalition. 60% of 2024 claims originated from BEC and funds transfer fraud (FTF) incidents, with 29% of BEC events resulting in FTF.

Despite drop in cyber claims, BEC keeps going strong Read More »

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast

News, Week in review /

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast 2025-05-11 at 11:06 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: What a future without CVEs means for cyber defense For many cybersecurity professionals, the CVE program is the

Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecast Read More »

Fake AI platforms deliver malware diguised as video content

Artificial Intelligence, cybercrime, Don't miss, Hot stuff, Malware, Morphisec, News, scams, SMBs, social engineering /

Fake AI platforms deliver malware diguised as video content 2025-05-09 at 16:53 By Zeljka Zorz A clever malware campaign delivering the novel Noodlophile malware is targeting creators and small businesses looking to enhance their productivity with AI tools. But, in an unusual twist, the threat actors are not disguising the malware as legitimate software, but

Fake AI platforms deliver malware diguised as video content Read More »

Why Offensive Security Is Crucial for Retail Resilience

data breach, Database Protection, DFIR, News /

Why Offensive Security Is Crucial for Retail Resilience 2025-05-09 at 16:12 By Retail Cyberattacks: How recent incidents highlight the need for proactive security. Offensive Security Tactics: Key strategies to identify and mitigate retail vulnerabilities. DFIR Best Practices: Responding to cyber incidents with speed and precision. The three high-profile UK retailers struck with cyberattacks in the last few weeks

Why Offensive Security Is Crucial for Retail Resilience Read More »

LockBit hacked: What does the leaked data show?

cybercrime, Data leak, Don't miss, Hot stuff, News, Ransomware, Rapid7, Searchlight Cyber /

LockBit hacked: What does the leaked data show? 2025-05-09 at 14:33 By Zeljka Zorz The affiliate panel of the infamous LockBit Ransomware-as-a-Service (RaaS) group has been hacked and defaced, showing a link to a MySQL database dump ostensibly containing leaked data relating to the group’s operations: The defaced dark web affiliate panel (Source: Help Net

LockBit hacked: What does the leaked data show? Read More »

What your browser knows about you, from contacts to card numbers

Bing, Brave, browser, Chrome, cybersecurity, DuckDuckGo, Edge, News, Opera, Privacy, report, Safari, Surfshark, Tor /

What your browser knows about you, from contacts to card numbers 2025-05-09 at 13:06 By Anamarija Pogorelec Chrome and Safari are the most popular browser apps, accounting for 90% of the mobile browsers market share, according to Surfshark. They also collect the most data. Chrome: the most data-hungry browser (Source: Surfshark) The most data-hungry browsers

What your browser knows about you, from contacts to card numbers Read More »

May 2025 Patch Tuesday forecast: Panic, change, and hope

Adobe, apple, CVE, cybersecurity, Don't miss, Expert analysis, Google, Hot stuff, Ivanti, Microsoft, Mozilla, News, Patch Tuesday /

May 2025 Patch Tuesday forecast: Panic, change, and hope 2025-05-09 at 09:11 By Help Net Security April was an event-filled month for cybersecurity. Patch Tuesday came to us quickly on April 8 – the earliest first Tuesday possible in a given month. We again saw large numbers of CVEs addressed with 84 in Windows 11

May 2025 Patch Tuesday forecast: Panic, change, and hope Read More »

Analyze resource-based policy dependencies across your AWS Organizations accounts

Amazon, AWS, cloud security, GitHub, News, open source, software /

Analyze resource-based policy dependencies across your AWS Organizations accounts 2025-05-09 at 08:02 By Help Net Security Managing multiple AWS accounts in an organization can get complicated, especially when trying to understand how services and permissions are connected. The Account Assessment for AWS Organizations open-source tool helps simplify this process by giving you a central place

Analyze resource-based policy dependencies across your AWS Organizations accounts Read More »

Wi-Fi 7 trials show big performance gains for enterprise networks

AT&T, networking, News, wireless, Wireless Broadband Alliance /

Wi-Fi 7 trials show big performance gains for enterprise networks 2025-05-09 at 07:35 By Help Net Security The next generation of wireless technology is getting a real-world test, and the results are promising. Recent trials led by the Wireless Broadband Alliance (WBA), in partnership with AT&T, Intel, and CommScope, show that Wi-Fi 7 delivers a

Wi-Fi 7 trials show big performance gains for enterprise networks Read More »

New infosec products of the week: May 9, 2025

News, ProcessUnity, Searchlight Cyber, ServiceNow, Verosint /

New infosec products of the week: May 9, 2025 2025-05-09 at 07:12 By Sinisa Markovic Here’s a look at the most interesting products from the past week, featuring releases from ProcessUnity, Searchlight Cyber, ServiceNow, and Verosint. ServiceNow unveils AI agents to accelerate enterprise self-defense The new AI agents, available within ServiceNow’s Security and Risk solutions,

New infosec products of the week: May 9, 2025 Read More »

The many variants of the ClickFix social engineering tactic

Datadog, Don't miss, Google, Hot stuff, Malware, News, phishing, Proofpoint, Sekoia.io, social engineering /

The many variants of the ClickFix social engineering tactic 2025-05-08 at 18:50 By Zeljka Zorz As new malware delivery campaigns using the ClickFix social engineering tactic are spotted nearly every month, it’s interesting to see how the various attackers are trying to refine the two main elements: the lure and the “instruction” page. In the

The many variants of the ClickFix social engineering tactic Read More »

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819)

Don't miss, Hot stuff, News, Rapid7, security update, SMBs, SonicWall, VPN, vulnerability /

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819) 2025-05-08 at 15:38 By Zeljka Zorz SonicWall has fixed multiple vulnerabilities affecting its SMA100 Series devices, one of which (CVE-2025-32819) appears to be a patch bypass for an arbitrary file delete vulnerability that was exploited in zero-day attacks in early 2021, and may have also

Yet another SonicWall SMA100 vulnerability exploited in the wild (CVE-2025-32819) Read More »

Cisco’s new chip wants to scale quantum computing faster

chip, Cisco, hardware, News, quantum computing /

Cisco’s new chip wants to scale quantum computing faster 2025-05-08 at 11:17 By Mirko Zorz Cisco is making significant strides in quantum computing by focusing on quantum networking, aiming to bring practical applications closer to reality. The company recently introduced a prototype of its Quantum Network Entanglement Chip and inaugurated the Cisco Quantum Lab in

Cisco’s new chip wants to scale quantum computing faster Read More »

How agentic AI and non-human identities are transforming cybersecurity

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, machine learning, News, Non Human Identities, One Identity, opinion /

How agentic AI and non-human identities are transforming cybersecurity 2025-05-08 at 09:03 By Help Net Security Within the average enterprise, non-human identities (NHIs) now outnumber employees, contractors, and customers by anything between 10-to-1 and 92-to-1. Add to this the fragmentation of human identity management resulting from authorizing a single person’s access to multiple on-premises, cloud

How agentic AI and non-human identities are transforming cybersecurity Read More »

Scroll to Top