opinion

Why workforce identity is still a vulnerability, and what to do about it

1Kosmos, auditing, authentication, cybersecurity, Don't miss, Hot stuff, identity management, identity verification, News, opinion /

Why workforce identity is still a vulnerability, and what to do about it 2026-03-04 at 07:43 By Help Net Security Most organizations believe they have workforce identity under control. New hires are verified. Accounts are provisioned. Multi-factor authentication is enforced. Audits are passed. Then a breach happens, often through an account that was “properly secured.” […]

Why workforce identity is still a vulnerability, and what to do about it Read More »

When cyber threats start thinking for themselves

agentic AI, Artificial Intelligence, Don't miss, News, opinion, SimSpace, tips, Video /

When cyber threats start thinking for themselves 2026-03-02 at 07:30 By Help Net Security In this Help Net Security video, Jason Rivera, Field CISO & Head of Solution Engineering at SimSpace, discusses how autonomous AI agents are changing cyber threats. Drawing on experience in the US Army, NSA, Deloitte, and CrowdStrike, he describes how security […]

When cyber threats start thinking for themselves Read More »

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities

Application Security, Artificial Intelligence, attacks, Compliance, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, security testing, software development, StackHawk /

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities 2026-02-26 at 07:35 By Mirko Zorz In this Help Net Security interview, Joni Klippert, CEO at StackHawk, discusses what defines DAST coverage in 2026 and why scan completion does not equal security. She explains how AI-driven DAST testing automates attack surface discovery, supports business-logic testing in […]

AI-driven DAST reduces manual setup and surfaces exploitable vulnerabilities Read More »

United Airlines CISO on building resilience when disruption is inevitable

CISO, critical infrastructure, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, travel industry, United Airlines /

United Airlines CISO on building resilience when disruption is inevitable 2026-02-09 at 09:09 By Mirko Zorz Aviation runs on complex digital systems built for stability, safety, and long lifecycles. That reality creates a unique cybersecurity challenge for airlines, where disruption can quickly become an operational and public trust crisis. In this Help Net Security interview, […]

United Airlines CISO on building resilience when disruption is inevitable Read More »

Why boards must prioritize non-human identity governance

boardroom, CISO, cyber risk, cybersecurity, Don't miss, GitGuardian, Hot stuff, identity management, News, Non Human Identities, opinion /

Why boards must prioritize non-human identity governance 2026-02-03 at 08:36 By Help Net Security Boards of Directors (BoDs) do three things exceptionally well when cyber is framed correctly. They set risk appetite, they allocate capital, and they demand evidence that the business can withstand disruption without losing momentum. Why cyber keeps becoming a board topic […]

Why boards must prioritize non-human identity governance Read More »

Open-source AI pentesting tools are getting uncomfortably good

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, GitHub, Hot stuff, IBS Software, News, open source, opinion, penetration testing, software /

Open-source AI pentesting tools are getting uncomfortably good 2026-02-02 at 09:10 By Help Net Security AI has come a long way in the pentesting world. We are now seeing open-source tools that can genuinely mimic how a human tester works, not just fire off scans. I dug into three of them, BugTrace-AI, Shannon, and CAI, […]

Open-source AI pentesting tools are getting uncomfortably good Read More »

When open science meets real-world cybersecurity

CISO, collaboration, critical infrastructure, cybersecurity, Don't miss, Features, News, opinion, strategy /

When open science meets real-world cybersecurity 2026-01-27 at 09:44 By Mirko Zorz Scientific research environments are built for openness and collaboration, often prioritizing long-term discovery over traditional enterprise security. In this Help Net Security interview, Matthew Kwiatkowski, CISO at Fermilab, America’s particle physics and accelerator laboratory, discusses where cybersecurity blind spots emerge, why availability can […]

When open science meets real-world cybersecurity Read More »

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, penetration testing, PlexTrac, remediation, vulnerability management /

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever 2026-01-21 at 07:34 By Help Net Security Penetration testing has evolved significantly over the past several years. While uncovering exploitable vulnerabilities remains the core goal, the real differentiator today is how findings are handled after the testing concludes. The method of reporting, […]

The 2026 State of Pentesting: Why delivery and follow-through matter more than ever Read More »

How AI agents are turning security inside-out

Application Security, Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, Nokod Security, opinion /

How AI agents are turning security inside-out 2026-01-09 at 09:30 By Help Net Security AppSec teams have spent the last decade hardening externally facing applications, API security, software supply chain risk, CI/CD controls, and cloud-native attack paths. But a growing class of security threats is emerging from a largely underestimated and undefended source: internally built […]

How AI agents are turning security inside-out Read More »

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring

BEC scams, cybersecurity, Don't miss, Email, Expert analysis, Expert corner, Fortra, News, opinion, phishing /

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring 2025-12-18 at 16:12 By Help Net Security Between June 2024 and December 2025, Fortra analysts tracked a persistent business email compromise (BEC) operation that we have now classified as Scripted Sparrow. The group carries out well-crafted highly targeted phishing campaigns that masquerade as professional services firms […]

Clipping Scripted Sparrow’s wings: Tracking a global phishing ring Read More »

Identifying risky candidates: Practical steps for security leaders

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity verification, Insider Threat, News, Nisos, opinion, strategy /

Identifying risky candidates: Practical steps for security leaders 2025-10-16 at 08:32 By Help Net Security Effective insider threat defense begins with candidate vetting. Background checks and reference calls can confirm elements of an applicant’s history, but they rarely surface the deeper risks that can turn into costly problems down the line. Identity verification, credential validation, […]

Identifying risky candidates: Practical steps for security leaders Read More »

Securing agentic AI with intent-based permissions

access management, agentic AI, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity management, News, opinion, Token Security, zero trust /

Securing agentic AI with intent-based permissions 2025-10-10 at 08:31 By Help Net Security When seatbelts were first introduced, cars were relatively slow and a seatbelt was enough to keep drivers safe in most accidents. But as vehicles became more powerful, automakers had to add airbags, crumple zones, and (eventually) adaptive driver assistance systems that anticipate […]

Securing agentic AI with intent-based permissions Read More »

4 ways to use time to level up your security monitoring

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Incident Response, InfluxData, monitoring, News, opinion, SaaS, security telemetry, SIEM /

4 ways to use time to level up your security monitoring 2025-10-03 at 09:09 By Help Net Security SIEMs excel at correlating events and firing alerts, but their ingest pipelines can get overwhelmed when scaled. And because most SIEMs rely on general-purpose log storage platforms, even with lower-cost archive tiers, long-term retention at full fidelity […]

4 ways to use time to level up your security monitoring Read More »

GPT needs to be rewired for security

Artificial Intelligence, automation, cybersecurity, Don't miss, Exaforce, Expert analysis, Expert corner, Hot stuff, LLMs, News, opinion, SOC /

GPT needs to be rewired for security 2025-10-02 at 09:18 By Help Net Security LLMs and agentic systems already shine at everyday productivity, including transcribing and summarizing meetings, extracting action items, prioritizing critical emails, and even planning travel. But in the SOC (where mistakes have real cost), today’s models stumble on work that demands high […]

GPT needs to be rewired for security Read More »

How attackers poison AI tools and defenses

Artificial Intelligence, Barracuda Networks, cyberattacks, cybersecurity, Don't miss, email security, Expert analysis, Expert corner, Hot stuff, News, opinion, resilience /

How attackers poison AI tools and defenses 2025-09-29 at 09:06 By Help Net Security Cyberattackers are using generative AI to draft polished spam, create malicious code and write persuasive phishing lures. They are also learning how to turn AI systems themselves into points of compromise. Recent findings highlight this shift. Researchers from Columbia University and […]

How attackers poison AI tools and defenses Read More »

Perspective: Why Politics in the Workplace is a Cybersecurity Risk

Government, Management & Strategy, opinion /

Perspective: Why Politics in the Workplace is a Cybersecurity Risk 2025-09-25 at 15:33 By Joshua Goldfarb Bringing politics into professional spaces undermines decision-making, collaboration, and ultimately weakens security teams. The post Perspective: Why Politics in the Workplace is a Cybersecurity Risk appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Perspective: Why Politics in the Workplace is a Cybersecurity Risk Read More »

Behind the scenes of cURL with its founder: Releases, updates, and security

code, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, open source, opinion, patching, software, software development, strategy, tips, vulnerability management /

Behind the scenes of cURL with its founder: Releases, updates, and security 2025-09-18 at 09:01 By Mirko Zorz In this Help Net Security interview, Daniel Stenberg, lead developer od cURL, discusses how the widely used tool remains secure across billions of devices, from cloud services to IoT. He shares insights into cURL’s decades-long journey of […]

Behind the scenes of cURL with its founder: Releases, updates, and security Read More »

What could a secure 6G network look like?

Artificial Intelligence, attacks, cybersecurity, Don't miss, ETSI, Expert analysis, Expert corner, Hot stuff, network, News, opinion, security standard, telecommunications, wireless /

What could a secure 6G network look like? 2025-09-15 at 08:47 By Help Net Security The official standards for 6G are set to be announced by the end of 2029. While the industry is moving towards consensus around how the 6G network will be built, it also needs to anticipate how it will be compromised […]

What could a secure 6G network look like? Read More »

Cyber defense cannot be democratized

Artificial Intelligence, attacks, cyber resilience, cybersecurity, DevOps, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, SkyHawk Security /

Cyber defense cannot be democratized 2025-09-08 at 08:14 By Help Net Security The democratization of AI has fundamentally lowered the barrier for threat actors, creating a bigger pool of people who can carry out sophisticated attacks. The so-called democratization of security, on the other hand, has resulted in chaos. The problem In an earnest attempt […]

Cyber defense cannot be democratized Read More »

Finding connection and resilience as a CISO

CISO, collaboration, cybersecurity, Don't miss, Features, News, opinion, strategy, Trellix /

Finding connection and resilience as a CISO 2025-08-29 at 10:03 By Mirko Zorz With sensitive information to protect and reputational risk always in the background, it isn’t easy for security leaders to have open conversations about what’s working and what isn’t. Yet strong peer networks and candid exchanges are critical for resilience, both organizationally and […]

Finding connection and resilience as a CISO Read More »

Scroll to Top