News

The hidden dynamics shaping who produces influential cybersecurity research

cybersecurity, Don't miss, Features, Hot stuff, News, research /

The hidden dynamics shaping who produces influential cybersecurity research 2025-12-10 at 08:52 By Mirko Zorz Cybersecurity leaders spend much of their time watching how threats and tools change. A new study asks a different question, how has the research community itself changed over the past two decades. Researchers from the University of Southampton examined two […]

The hidden dynamics shaping who produces influential cybersecurity research Read More »

UTMStack: Open-source unified threat management platform

cybersecurity, Don't miss, GitHub, News, open source, software, Threat Intelligence /

UTMStack: Open-source unified threat management platform 2025-12-10 at 08:52 By Sinisa Markovic UTMStack is an open-source unified threat management platform that brings SIEM and XDR features into one system. The project focuses on real time correlation of log data, threat intelligence, and malware activity patterns gathered from different sources. The goal is to help organizations

UTMStack: Open-source unified threat management platform Read More »

LLMs are everywhere in your stack and every layer brings new risk

Artificial Intelligence, Don't miss, DryRun Security, LLMs, News, OWASP, report /

LLMs are everywhere in your stack and every layer brings new risk 2025-12-10 at 07:52 By Mirko Zorz LLMs are moving deeper into enterprise products and workflows, and that shift is creating new pressure on security leaders. A new guide from DryRun Security outlines how these systems change long standing assumptions about data handling, application

LLMs are everywhere in your stack and every layer brings new risk Read More »

Building SOX compliance through smarter training and stronger password practices

CISO, Compliance, Don't miss, Hot stuff, News, password management, Passwork, SOX /

Building SOX compliance through smarter training and stronger password practices 2025-12-10 at 07:00 By Sinisa Markovic A SOX audit can reveal uncomfortable truths about how a company handles access to financial systems. Even organizations that invest in strong infrastructure often discover that everyday password habits weaken the controls they thought were solid. CISOs know that

Building SOX compliance through smarter training and stronger password practices Read More »

AI-driven threats are heading straight for the factory floor

Artificial Intelligence, attacks, CISO, collaboration, Compliance, critical infrastructure, cybersecurity, Don't miss, Features, Hot stuff, News, penetration testing, Siemens, strategy, threat modeling /

AI-driven threats are heading straight for the factory floor 2025-12-09 at 09:07 By Mirko Zorz In this Help Net Security interview, Natalia Oropeza, Chief Cybersecurity Officer at Siemens, discusses how industrial organizations are adapting to a shift in cyber risk driven by AI. She notes that in-house capability, especially for OT response and recovery, is

AI-driven threats are heading straight for the factory floor Read More »

AI agents break rules in unexpected ways

Artificial Intelligence, Don't miss, Features, Hot stuff, LLMs, News, research /

AI agents break rules in unexpected ways 2025-12-09 at 08:31 By Mirko Zorz AI agents are starting to take on tasks that used to be handled by people. These systems plan steps, call tools, and carry out actions without a person approving every move. This shift is raising questions for security leaders. A new research

AI agents break rules in unexpected ways Read More »

New image signature can survive cropping, stop deepfakes from hijacking trust

authentication, deepfakes, News, research /

New image signature can survive cropping, stop deepfakes from hijacking trust 2025-12-09 at 08:02 By Sinisa Markovic Deepfake images can distort public debate, fuel harassment, or shift a news cycle before anyone checks the source. A new study from researchers at the University of Pisa examines one specific part of this problem. They introduced a

New image signature can survive cropping, stop deepfakes from hijacking trust Read More »

The simple shift that turns threat intel from noise into real insight

Artificial Intelligence, cybersecurity, Don't miss, Incident Response, News, Simbian, threat hunting, Threat Intelligence, Video /

The simple shift that turns threat intel from noise into real insight 2025-12-09 at 08:02 By Help Net Security In this Help Net Security video, Alankrit Chona, CTO at Simbian, explains how security teams can put threat intelligence to work in a way that supports detection, response, and hunting. Chona walks through why many teams

The simple shift that turns threat intel from noise into real insight Read More »

Cybersecurity jobs available right now: December 9, 2025

cybersecurity jobs, News /

Cybersecurity jobs available right now: December 9, 2025 2025-12-09 at 07:06 By Anamarija Pogorelec Associate Analyst, Cyber Threat Intelligence Sony | USA | Remote – View job details As an Associate Analyst, Cyber Threat Intelligence, you will collect and analyze open-source threat data to identify signs of cyber threats. You will prepare analysis reports, threat

Cybersecurity jobs available right now: December 9, 2025 Read More »

Download: Evaluating Password Monitoring Vendors

Don't miss, Enzoic, Hot stuff, News, Whitepapers and webinars /

Download: Evaluating Password Monitoring Vendors 2025-12-08 at 16:10 By Help Net Security Organizations using Active Directory must update their password policies to block and detect compromised passwords. However, comparing vendors in this area can be challenging. By asking the right questions, you can identify the right partner and avoid introducing new technical, security, and compliance

Download: Evaluating Password Monitoring Vendors Read More »

December 2025 Patch Tuesday forecast: And it’s a wrap

Adobe, apple, Don't miss, Expert analysis, Google, Hot stuff, Ivanti, Microsoft, Mozilla, News, Patch Tuesday /

December 2025 Patch Tuesday forecast: And it’s a wrap 2025-12-08 at 09:56 By Help Net Security It’s hard to believe that we’re in December of 2025 already and the end of the year is fast approaching. Looking back on the year, there are two major items that really stand out in my mind. First, there

December 2025 Patch Tuesday forecast: And it’s a wrap Read More »

NVIDIA research shows how agentic AI fails under attack

Artificial Intelligence, cyber risk, Don't miss, Features, framework, Hot stuff, Lakera, LLMs, News, NVIDIA, red team, research, Risk Management /

NVIDIA research shows how agentic AI fails under attack 2025-12-08 at 09:56 By Sinisa Markovic Enterprises are rushing to deploy agentic systems that plan, use tools, and make decisions with less human guidance than earlier AI models. This new class of systems also brings new kinds of risk that appear in the interactions between models,

NVIDIA research shows how agentic AI fails under attack Read More »

The Bastion: Open-source access control for complex infrastructure

Don't miss, GitHub, News, open source, OVHcloud, software /

The Bastion: Open-source access control for complex infrastructure 2025-12-08 at 09:56 By Anamarija Pogorelec Operational teams know that access sprawl grows fast. Servers, virtual machines and network gear all need hands-on work and each new system adds more identities to manage. A bastion host tries to bring order to this problem. It acts as a

The Bastion: Open-source access control for complex infrastructure Read More »

How to tell if your password manager meets HIPAA expectations

Compliance, Don't miss, healthcare, HIPAA, Hot stuff, News, password manager, Passwork /

How to tell if your password manager meets HIPAA expectations 2025-12-08 at 08:03 By Sinisa Markovic Most healthcare organizations focus on encryption, network monitoring, and phishing prevention, although one simple source of risk still slips through the cracks. Password management continues to open doors for attackers more often than leaders expect. Weak, reused, or shared

How to tell if your password manager meets HIPAA expectations Read More »

CISOs are spending big and still losing ground

Artificial Intelligence, automation, CISO, cloud security, Compliance, cybersecurity, News, report, Wiz /

CISOs are spending big and still losing ground 2025-12-08 at 07:31 By Anamarija Pogorelec Security leaders are entering another budget cycle with more money to work with, but many still feel no safer. A new benchmark study from Wiz shows a widening gap between investment and impact. Budgets keep rising, cloud programs keep expanding, and

CISOs are spending big and still losing ground Read More »

Invisible IT is becoming the next workplace priority

CIO, Lenovo, News, report /

Invisible IT is becoming the next workplace priority 2025-12-08 at 07:31 By Anamarija Pogorelec IT leaders want their employees to work without running into digital hurdles, but many still struggle with fragmented systems that slow teams down. A new report from Lenovo sheds light on how widespread the problem has become and what organizations can

Invisible IT is becoming the next workplace priority Read More »

Week in review: React, Node.js flaw patched, ransomware intrusion exposes espionage foothold

News, Week in review /

Week in review: React, Node.js flaw patched, ransomware intrusion exposes espionage foothold 2025-12-07 at 11:38 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Creative cybersecurity strategies for resource-constrained institutions In this Help Net Security interview, Dennis Pickett, CISO at RTI International, talks about how

Week in review: React, Node.js flaw patched, ransomware intrusion exposes espionage foothold Read More »

Building the missing layers for an internet of agents

Cisco, cybersecurity, Don't miss, Features, network, News, research, traffic monitoring /

Building the missing layers for an internet of agents 2025-12-05 at 08:59 By Anamarija Pogorelec Cybersecurity teams are starting to think about how large language model agents might interact at scale. A new paper from Cisco Research argues that the current network stack is not prepared for this shift. The work proposes two extra layers

Building the missing layers for an internet of agents Read More »

Data brokers are exposing medical professionals, and turning their personal lives into open files

cybersecurity, Data Protection, healthcare, Incogni, News, report /

Data brokers are exposing medical professionals, and turning their personal lives into open files 2025-12-05 at 08:59 By Anamarija Pogorelec Large amounts of personal information about medical professionals are available on people search sites. A new analysis by Incogni’s researchers shows how much data about doctors appears online and how easily it can be found.

Data brokers are exposing medical professionals, and turning their personal lives into open files Read More »

What security leaders should watch for when companies buy or sell a business

access management, Artificial Intelligence, Compliance, Concentric AI, cybersecurity, data security, Don't miss, News, risk, Video /

What security leaders should watch for when companies buy or sell a business 2025-12-05 at 08:59 By Help Net Security In this Help Net Security video, Lane Sullivan SVP, CISO and Strategy Officer at Concentric AI, explains what security leaders should think about during mergers, acquisitions, and divestitures. Sullivan talks about the types of risk

What security leaders should watch for when companies buy or sell a business Read More »

Scroll to Top