News

Why boards must prioritize non-human identity governance

boardroom, CISO, cyber risk, cybersecurity, Don't miss, GitGuardian, Hot stuff, identity management, News, Non Human Identities, opinion /

Why boards must prioritize non-human identity governance 2026-02-03 at 08:36 By Help Net Security Boards of Directors (BoDs) do three things exceptionally well when cyber is framed correctly. They set risk appetite, they allocate capital, and they demand evidence that the business can withstand disruption without losing momentum. Why cyber keeps becoming a board topic […]

Why boards must prioritize non-human identity governance Read More »

Open-source attacks move through normal development workflows

attacks, Don't miss, News, open source, report, ReversingLabs, supply chain, supply chain attacks, vulnerability management /

Open-source attacks move through normal development workflows 2026-02-03 at 08:18 By Anamarija Pogorelec Software development relies on a steady flow of third-party code, automated updates, and fast release cycles. That environment has made the software supply chain a routine point of entry for attackers, with malicious activity blending into normal build and deployment processes. A […]

Open-source attacks move through normal development workflows Read More »

Product showcase: 2FAS Auth – Free, open-source 2FA for iOS

2FAS, authentication, cybersecurity, Don't miss, identity management, identity protection, iOS, News, open source, Product showcase, software /

Product showcase: 2FAS Auth – Free, open-source 2FA for iOS 2026-02-03 at 07:47 By Anamarija Pogorelec Online accounts usually rely on a password, but passwords alone can be weak if they’re reused, easily guessed, or stolen. Two-factor authentication (2FA) adds a second layer of verification, usually a six-digit code generated by an app on your […]

Product showcase: 2FAS Auth – Free, open-source 2FA for iOS Read More »

Cybersecurity jobs available right now: February 3, 2026

cybersecurity jobs, News /

Cybersecurity jobs available right now: February 3, 2026 2026-02-03 at 07:11 By Anamarija Pogorelec Application Security Engineer Liebherr Group | Germany | Hybrid – View job details As an Application Security Engineer, you will As an Application Security Engineer, you will implement and automate application security testing, perform vulnerability assessments and penetration testing, and work […]

Cybersecurity jobs available right now: February 3, 2026 Read More »

ShinyHunters flip the script on MFA in new data theft attacks

data theft, Don't miss, extortion, Google Cloud, Hot stuff, Mandiant, News, Silent Push, social engineering, SSO, tips, vishing /

ShinyHunters flip the script on MFA in new data theft attacks 2026-02-02 at 18:50 By Zeljka Zorz Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in […]

ShinyHunters flip the script on MFA in new data theft attacks Read More »

How state-sponsored attackers hijacked Notepad++ updates

Asia, Don't miss, financial industry, government-backed attacks, Hot stuff, News, supply chain compromise, telecommunications /

How state-sponsored attackers hijacked Notepad++ updates 2026-02-02 at 15:38 By Zeljka Zorz Suspected Chinese state-sponsored attackers hijacked the Notepad++ update mechanism by compromising the software project’s shared hosting server and intercepting and redirecting update traffic destined for notepad-plus-plus.org, the software’s maintainer Don Ho confirmed on Monday. The attack timeline In early December 2025, security researcher […]

How state-sponsored attackers hijacked Notepad++ updates Read More »

Microsoft sets a path to switch off NTLM across Windows

authentication, cybersecurity, Microsoft, News, Windows /

Microsoft sets a path to switch off NTLM across Windows 2026-02-02 at 13:13 By Sinisa Markovic Windows is shifting to a more secure authentication approach, moving away from New Technology LAN Manager (NTLM) and toward stronger, Kerberos-based options. NTLM has been part of Windows for decades and continues to appear in some environments, particularly where […]

Microsoft sets a path to switch off NTLM across Windows Read More »

Where NSA zero trust guidance aligns with enterprise reality

AppOmni, CISO, cybersecurity, Government, how-to, News, NSA, strategy, tips, zero trust /

Where NSA zero trust guidance aligns with enterprise reality 2026-02-02 at 09:10 By Sinisa Markovic The NSA has published Phase One and Phase Two of its Zero Trust Implementation Guidelines, providing structured guidance for organizations working to implement zero trust cybersecurity practices. The documents are part of a larger series designed to support adoption of […]

Where NSA zero trust guidance aligns with enterprise reality Read More »

Open-source AI pentesting tools are getting uncomfortably good

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, GitHub, Hot stuff, IBS Software, News, open source, opinion, penetration testing, software /

Open-source AI pentesting tools are getting uncomfortably good 2026-02-02 at 09:10 By Help Net Security AI has come a long way in the pentesting world. We are now seeing open-source tools that can genuinely mimic how a human tester works, not just fire off scans. I dug into three of them, BugTrace-AI, Shannon, and CAI, […]

Open-source AI pentesting tools are getting uncomfortably good Read More »

What boards need to hear about cyber risk, and what they don’t

access controls, automation, boardroom, CIO, cyber risk, cybersecurity, Don't miss, Entrust, News, Risk Management, Video /

What boards need to hear about cyber risk, and what they don’t 2026-02-02 at 09:10 By Help Net Security In this Help Net Security video, Rishi Kaushal, CIO at Entrust, explains how security leaders should talk to the board about cyber risk. He focuses on what matters to board members and what does not. He […]

What boards need to hear about cyber risk, and what they don’t Read More »

Pompelmi: Open-source secure file upload scanning for Node.js

GitHub, News, Node.js, open source, scanner, scanning, software /

Pompelmi: Open-source secure file upload scanning for Node.js 2026-02-02 at 09:10 By Sinisa Markovic Software teams building services in JavaScript are adding more layers of defense to handle untrusted file uploads. An open-source project called Pompelmi aims to insert malware scanning and policy checks directly into Node.js applications before files reach storage or business logic. […]

Pompelmi: Open-source secure file upload scanning for Node.js Read More »

AI is flooding IAM systems with new identities

Artificial Intelligence, Cloud Security Alliance, credentials, cybersecurity, identity management, News, Non Human Identities, report /

AI is flooding IAM systems with new identities 2026-02-02 at 07:20 By Anamarija Pogorelec Most organizations view AI identities through the same lens used for other non-human identities, such as service accounts, API keys, and chatbots, according to The State of Non-Human Identity and AI Security report by the Cloud Security Alliance. AI identities inherit […]

AI is flooding IAM systems with new identities Read More »

Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw

News, Week in review /

Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw 2026-02-01 at 11:37 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: When open science meets real-world cybersecurity In this Help Net Security interview, Matthew Kwiatkowski, CISO at Fermilab, America’s particle physics […]

Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flaw Read More »

Microsoft sets new timeline for Sentinel transition to Defender portal

Microsoft, News, update /

Microsoft sets new timeline for Sentinel transition to Defender portal 2026-01-30 at 14:37 By Sinisa Markovic Microsoft has updated the timeline for transitioning the Microsoft Sentinel experience from the Azure portal to the Microsoft Defender portal from July 1, 2026 to March 31, 2027. The updated schedule extends access by nearly nine months. Microsoft said […]

Microsoft sets new timeline for Sentinel transition to Defender portal Read More »

Ex-Google engineer found guilty of stealing AI secrets

China, cyber espionage, cybercrime, FBI, Google, Government, News, US DoJ, USA /

Ex-Google engineer found guilty of stealing AI secrets 2026-01-30 at 12:40 By Sinisa Markovic A federal jury in California convicted former Google software engineer Linwei Ding, also known as Leon Ding, on seven counts of economic espionage and seven counts of theft of trade secrets tied to AI technology. Ding faces a maximum sentence of […]

Ex-Google engineer found guilty of stealing AI secrets Read More »

Apple’s new privacy feature limits how precisely carriers track your location

apple, iOS, iPad, iPhone, location tracking, News, Privacy /

Apple’s new privacy feature limits how precisely carriers track your location 2026-01-30 at 10:33 By Anamarija Pogorelec Apple users are already accustomed to managing app-level location permissions, and a new privacy feature in iOS 26.3 extends that control to cellular networks. Called Limit Precise Location, it reduces the amount of fine-grained location data that iPhones […]

Apple’s new privacy feature limits how precisely carriers track your location Read More »

EFF calls out major tech companies on encryption promises

EFF, Encryption, News, Privacy /

EFF calls out major tech companies on encryption promises 2026-01-30 at 10:33 By Sinisa Markovic The Electronic Frontier Foundation (EFF) has introduced a new campaign called Encrypt It Already, focused on expanding the use of end-to-end encryption in consumer technology products and services. The effort examines public security commitments and the current availability of encryption […]

EFF calls out major tech companies on encryption promises Read More »

Security work keeps expanding, even with AI in the mix

Artificial Intelligence, cybersecurity, Don't miss, News, report, survey, Tines /

Security work keeps expanding, even with AI in the mix 2026-01-30 at 08:07 By Sinisa Markovic Board attention continues to rise, and security groups now operate closer to executive decision making than in prior years, a pattern reflected the Voice of Security 2026 report by Tines. Within that environment, large numbers of teams already rely […]

Security work keeps expanding, even with AI in the mix Read More »

Security teams are carrying more tools with less confidence

cybersecurity, News, report, security operations, SIEM, Sumo Logic, survey /

Security teams are carrying more tools with less confidence 2026-01-30 at 07:31 By Anamarija Pogorelec Enterprise environments now span multiple clouds, on-premises systems, and a steady flow of new applications. Hybrid and multi-cloud setups are common across large organizations, and they bring a constant stream of logs, alerts, and operational data. That environment already exists […]

Security teams are carrying more tools with less confidence Read More »

Wearable tech adoption continues as privacy worries grow

Clutch, data collection, data security, mobile devices, News, Privacy, survey, wearable tech /

Wearable tech adoption continues as privacy worries grow 2026-01-30 at 07:09 By Sinisa Markovic Over 1 billion users wear devices for tracking steps, sleep, heart rate, and other personal metrics. These devices collect a continuous stream of sensitive data, often tied to detailed user profiles and companion apps. New Clutch survey data show that as […]

Wearable tech adoption continues as privacy worries grow Read More »

Scroll to Top