opinion

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

agentic AI, CISO, cybersecurity, data security, Don't miss, Features, Hot stuff, Immuta, News, opinion, strategy, tips /

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

Patching and preventing issues: What are the lessons you can learn?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, patching, Qualys, strategy, tips /

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Be a good AI ancestor: Cybersecurity already gave us the playbook

AI, automation, cybersecurity, Don't miss, Expert analysis, opinion, strategy /

Be a good AI ancestor: Cybersecurity already gave us the playbook 2026-10-13 at 08:30 By Help Net Security AI has brought us to a familiar inflection point in the story of privacy, cybersecurity, and online safety. We have an opportunity to apply decades of cybersecurity experience before the next generation of technology creates consequences we […]

Be a good AI ancestor: Cybersecurity already gave us the playbook Read More »

Geopolitics and the cyber resilience gap belong in your threat model

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, threat modeling, tips, World Economic Forum /

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

What the BPFDoor backdoor tells us about attacks on the network edge

backdoor, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, Linux, Malware, News, opinion, Rapid7, Threat Intelligence /

What the BPFDoor backdoor tells us about attacks on the network edge 2026-10-09 at 09:00 By Mirko Zorz A backdoor that makes no noise is hard to catch, and that’s the point of BPFDoor. The Linux malware waits for a special “magic packet” before it acts. In this interview with Help Net Security, Christiaan Beek, […]

What the BPFDoor backdoor tells us about attacks on the network edge Read More »

How AI can fix cybersecurity compliance: From dashboards to continuous execution

AI, Compliance, cybersecurity, Don't miss, Hot stuff, News, opinion /

How AI can fix cybersecurity compliance: From dashboards to continuous execution 2026-10-08 at 08:00 By Help Net Security Most compliance work goes into proving security, not improving it. That isn’t because the rules are unreasonable. Regulators, customers, and cyber insurers are right to expect organizations to implement hundreds of technical and administrative controls, monitor their […]

How AI can fix cybersecurity compliance: From dashboards to continuous execution Read More »

AI endpoint management: Visibility, compliance, and remediation

AI, automation, cybersecurity, Don't miss, endpoint management, Hot stuff, News, opinion, patching /

AI endpoint management: Visibility, compliance, and remediation 2026-10-07 at 08:00 By Help Net Security Endpoint estates are growing faster than the teams that look after them. Hybrid work, cloud adoption, contractor laptops, a steady stream of new CVEs, and rising compliance pressure mean security teams manage more devices, more software, and more exceptions than a […]

AI endpoint management: Visibility, compliance, and remediation Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

Banks, CISO, cyber risk, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, opinion, Risk Management, strategy, tips /

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Three questions a hospital CISO should ask a healthcare fintech vendor

CISO, Compliance, CXO, cybersecurity, Don't miss, Features, HIPAA, Hot stuff, News, opinion, regulation, Risk Management, strategy, tips /

Three questions a hospital CISO should ask a healthcare fintech vendor 2026-10-05 at 08:30 By Mirko Zorz In this Help Net Security video, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is scheduled into every sprint, and issues touching patient data or funds disbursement come first. He covers […]

Three questions a hospital CISO should ask a healthcare fintech vendor Read More »

A single market worth protecting: Getting the MiCA review right

opinion /

A single market worth protecting: Getting the MiCA review right 2026-09-30 at 14:00 By Cointelegraph by Simon Schneider As the European Commission’s MiCA review consultation closes, Europe must decide whether its crypto rulebook is protecting the market without making it too costly to build in. This article is an excerpt from Cointelegraph.com News View Original […]

A single market worth protecting: Getting the MiCA review right Read More »

EU Cyber Resilience Act requirements for containers and Kubernetes

cloud security, Compliance, containers, Don't miss, Hot stuff, Kubernetes, News, opinion /

EU Cyber Resilience Act requirements for containers and Kubernetes 2026-09-30 at 08:00 By Help Net Security Starting in full force on Dec. 10, 2024, the EU Cyber Resilience Act (CRA) is a regulation (EU 2024/2847) that defines mandatory cybersecurity requirements for all products with digital elements sold in EU markets. Reporting obligations will begin on Sept. 11, 2026, […]

EU Cyber Resilience Act requirements for containers and Kubernetes Read More »

If you do one security check this quarter, make it agent memory

agentic AI, CISO, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

If you do one security check this quarter, make it agent memory 2026-09-28 at 09:00 By Mirko Zorz In this interview with Help Net Security, Chris Latimer, CEO of Vectorize, talks about the security risks hiding in AI agent memory. He found coding agents storing API keys, credentials, and sensitive documents in plain text on […]

If you do one security check this quarter, make it agent memory Read More »

Stop watching what AI agents say and start watching what they do

agentic AI, AI, CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, security telemetry, strategy, tips /

Stop watching what AI agents say and start watching what they do 2026-09-25 at 08:30 By Mirko Zorz In this interview with Help Net Security, Ariel Assaraf, CEO of Coralogix, explains why a system prompt can describe a boundary for an AI agent but cannot enforce one. Assaraf covers how his team builds AI agent […]

Stop watching what AI agents say and start watching what they do Read More »

What to do first when you get 90 days to secure AI agent data

agentic AI, cybersecurity, data, Don't miss, Features, Hot stuff, News, opinion, strategy, tips /

What to do first when you get 90 days to secure AI agent data 2026-09-24 at 08:00 By Mirko Zorz In this interview with Help Net Security, Kelly Herrell, CEO at Nol8, explains where AI agents create exposure inside organizations. The first thing to examine is the data path: what an agent can reach, what […]

What to do first when you get 90 days to secure AI agent data Read More »

Americans’ views on data centers have turned more negative

data center, News, opinion, survey, USA /

Americans’ views on data centers have turned more negative 2026-09-24 at 01:15 By Anamarija Pogorelec American attitudes toward data centers have turned noticeably more negative over the course of 2026, according to a new Pew Research Center survey. 54% of U.S. adults now say data centers are mostly bad for the environment, up from 39% […]

Americans’ views on data centers have turned more negative Read More »

Know what was tested before your SAP ECC migration goes live

CXO, digital transformation, Don't miss, Features, News, opinion, SAP, strategy, tips /

Know what was tested before your SAP ECC migration goes live 2026-09-21 at 09:00 By Mirko Zorz In this Help Net Security interview, Guilherme Joventino, COO of MIGNOW, explains why some large companies plan to stay on ECC past the 2027 deadline and pay SAP for extended support until 2030. The interview covers what that […]

Know what was tested before your SAP ECC migration goes live Read More »

What happens when AI agent governance is missing at scale

agentic AI, automation, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips /

What happens when AI agent governance is missing at scale 2026-09-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what an agent does, since […]

What happens when AI agent governance is missing at scale Read More »

The modern attack chain: Rethinking Google Workspace security in the age of AI

AI, attack, cybersecurity, Don't miss, Google Workspace, Hot stuff, Material Security, News, opinion /

The modern attack chain: Rethinking Google Workspace security in the age of AI 2026-09-16 at 08:00 By Help Net Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same […]

The modern attack chain: Rethinking Google Workspace security in the age of AI Read More »

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results

agentic AI, AI, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, Prophet Security, SOC /

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results 2026-09-09 at 08:00 By Help Net Security In the Gartner report Validate the Promises of AI SOC Agents With These Key Questions, analysts Craig Lawson and Andrew Davies posit that “By 2028, 70% of large SOCs will pilot AI agents to augment […]

Gartner: 70% of SOCs will pilot AI agents. Only 15% will see results Read More »

What breach and attack simulation needs to become in the AI era

AI, cybersecurity, Don't miss, Expert analysis, Hot stuff, News, opinion, Picus Security, supply chain /

What breach and attack simulation needs to become in the AI era 2026-09-09 at 07:30 By Help Net Security Breach and attack simulation (BAS) has always had a supply chain. Somebody has to read the threat report, pull out the techniques, and turn them into something that will actually run against your controls. That somebody […]

What breach and attack simulation needs to become in the AI era Read More »

Scroll to Top