Metis: Open-source, AI-driven tool for deep security code review 2025-11-19 at 08:06 By Anamarija Pogorelec Metis is an open source tool that uses AI to help engineers run deep security reviews on code. Arm’s product security team built Metis to spot subtle flaws that are often buried in large or aging codebases where traditional tools […]
Metis: Open-source, AI-driven tool for deep security code review Read More »
How to cut security tool sprawl without losing control 2025-11-19 at 07:58 By Help Net Security In this Help Net Security video, Jon Taylor, Director and Principal of Security at Versa Networks, talks about how organizations can deal with security tool sprawl. He explains why many teams end up with too many tools, especially as […]
How to cut security tool sprawl without losing control Read More »
Product showcase: Proton Pass, a password manager with identity protection 2025-11-19 at 07:02 By Help Net Security Managing passwords can be a real headache, and it’s still common to fall back on reusing them or storing them in a browser without much protection. Proton Pass, built by the Swiss company Proton AG (the team behind […]
Product showcase: Proton Pass, a password manager with identity protection Read More »
Internet slowly recovers after far-reaching Cloudflare outage 2025-11-18 at 17:16 By Zeljka Zorz A currently undisclosed issue has crippled Cloudflare’s network and has rendered a large swathe of internet’s most popular sites and services temporily inaccessible today. Some of the sites and services affected by the Cloudflare outage (Source: Down Detector) What happened? Cloudflare is […]
Internet slowly recovers after far-reaching Cloudflare outage Read More »
Google patches yet another exploited Chrome zero-day (CVE-2025-13223) 2025-11-18 at 14:13 By Zeljka Zorz Google has shipped an emergency fix for a Chrome vulnerability (CVE-2025-13223) reported as actively exploited in the wild by its Threat Analysis Group (TAG). About CVE-2025-13223 CVE-2025-13223 is a type confusion vulnerability in V8, the JavaScript and WebAssembly engine used by […]
Google patches yet another exploited Chrome zero-day (CVE-2025-13223) Read More »
What security pros should know about insurance coverage for AI chatbot wiretapping claims 2025-11-18 at 08:44 By Mirko Zorz AI-powered chatbots raise profound concerns under federal and state wiretapping and eavesdropping statutes that is being tested by recent litigation, creating greater exposure to the companies and developers that use this technology. Security professionals that integrate […]
How attackers use patience to push past AI guardrails 2025-11-18 at 08:44 By Anamarija Pogorelec Most CISOs already assume that prompt injection is a known risk. What may come as a surprise is how quickly those risks grow once an attacker is allowed to stay in the conversation. A new study from Cisco AI Defense […]
How attackers use patience to push past AI guardrails Read More »
Agentic AI puts defenders on a tighter timeline to adapt 2025-11-18 at 08:44 By Anamarija Pogorelec Security teams know that attackers rarely wait for defenders to be ready. The latest AI Maturity in Cybersecurity Report from Arkose Labs shows how quickly the threat landscape is shifting and how slowly organizations can respond in comparison. Attackers […]
Agentic AI puts defenders on a tighter timeline to adapt Read More »
Cybersecurity jobs available right now: November 18, 2025 2025-11-18 at 08:43 By Anamarija Pogorelec Application Security Engineer Vim | Israel | Hybrid – View job details As an Application Security Engineer, you will conduct internal penetration testing against Vim’s applications and APIs. Design, build, and implement the Secure SDLC process, integrating security into all stages […]
Cybersecurity jobs available right now: November 18, 2025 Read More »
The privacy panic around machine learning is overblown 2025-11-18 at 08:43 By Sinisa Markovic We often hear warnings about how machine learning (ML) models may expose sensitive information tied to their training data. The concern is understandable. If a model was trained on personal records, it may seem reasonable to assume that releasing it could […]
The privacy panic around machine learning is overblown Read More »
Logitech confirms data breach 2025-11-18 at 00:20 By Zeljka Zorz Logitech, the Swiss multinational electronics and technology company best known for marketing computer peripherals and hardware, has suffered a data breach. “While the investigation is ongoing, at this time Logitech believes that the unauthorized third party used a zero-day vulnerability in a third-party software platform […]
Logitech confirms data breach Read More »
Strix: Open-source AI agents for penetration testing 2025-11-17 at 16:32 By Sinisa Markovic Security teams know that application flaws tend to show up at the worst time. Strix presents itself as an open source way to catch them earlier by using autonomous agents that behave like human attackers. These agents run code, explore an application, […]
Strix: Open-source AI agents for penetration testing Read More »
The tech that turns supply chains from brittle to unbreakable 2025-11-17 at 16:32 By Mirko Zorz In this Help Net Security interview, Sev Kelian, CISO and VP of Security at Tecsys, discusses how organizations can strengthen supply chain resilience through a more unified and forward-looking strategy. Kelian also shares how new technologies and a blended […]
The tech that turns supply chains from brittle to unbreakable Read More »
Five men admit helping North Korean IT workers infiltrate US companies 2025-11-17 at 14:59 By Zeljka Zorz US federal prosecutors have secured guilty pleas from five men who helped North Korean IT workers get hired by companies in the United States. This group of domestic facilitators helped a sanctioned government move money, slip past hiring […]
Five men admit helping North Korean IT workers infiltrate US companies Read More »
The internet isn’t free: Shutdowns, surveillance and algorithmic risks 2025-11-17 at 14:47 By Anamarija Pogorelec Global internet freedom has declined for the 15th straight year, according to the latest Freedom House report. Out of 72 countries evaluated, 28 recorded declines and 17 saw improvements. Shutdowns hit high-stakes zones The report documents large-scale infrastructure used to […]
The internet isn’t free: Shutdowns, surveillance and algorithmic risks Read More »
The year ahead in cyber: What’s next for cybersecurity in 2026 2025-11-17 at 07:31 By Help Net Security In this Help Net Security video, Dick O’Brien, Principal Intelligence Analyst at Symantec, outlines the major cyber risks expected in 2026. He explains that attackers are often breaching networks by targeting people instead of exploiting software flaws. […]
The year ahead in cyber: What’s next for cybersecurity in 2026 Read More »
The next tech divide is written in AI diffusion 2025-11-17 at 07:05 By Anamarija Pogorelec AI is spreading faster than any major technology in history, according to a Microsoft report. More than 1.2 billion people have used an AI tool within three years of the first mainstream releases. The growth is fast, but it puts […]
The next tech divide is written in AI diffusion Read More »
Week in review: Windows kernel flaw patched, suspected Fortinet FortiWeb zero-day exploited 2025-11-16 at 11:10 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Adopting a counterintelligence mindset in luxury logistics In this Help Net Security interview, Andrea Succi, Group CISO at Ferrari Group, discusses […]
Chinese cyber spies used Claude AI to automate 90% of their attack campaign, Anthropic claims 2025-11-14 at 17:03 By Zeljka Zorz Anthropic threat researchers believe that they’ve uncovered and disrupted the first documented case of a cyberattack executed with the help of its agentic AI and minimal human intervention. “The threat actor manipulated [Anthropic’s large […]
Art and Science: Cyber and Physical Security Convergence Deficiencies in the Louvre Heist 2025-11-14 at 15:06 By William Evers and Anthony Abell Cyber meets physical security: Weak passwords and outdated systems may have opened the door to the thieves. A warning for all industries: The Louvre incident shows why converging cybersecurity and physical security is […]