security controls

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser

AI, browser, cybersecurity, Firefox, Mozilla, News, Privacy, regulation, security controls /

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser 2026-10-13 at 14:21 By Anamarija Pogorelec Mozilla’s Firefox Enterprise is a paid platform that lets organizations control how sensitive data is shared, check device security, and manage employee access to web applications. The platform pairs the browser with a management dashboard hosted on an […]

Mozilla’s Firefox Enterprise lets companies block shadow AI in the browser Read More »

PCI SSC calls for human approval of AI agent actions involving cardholder data

AI, Encryption, guidelines, News, passwords, PCI SSC, security controls /

PCI SSC calls for human approval of AI agent actions involving cardholder data 2026-10-09 at 08:00 By Anamarija Pogorelec The PCI Security Standards Council (PCI SSC) has published Security Considerations for AI Systems, guidance covering the protection of data supplied to AI systems in payment environments and defenses against AI-assisted attacks. Developed with industry stakeholders, […]

PCI SSC calls for human approval of AI agent actions involving cardholder data Read More »

Anthropic loosens Claude’s cyber restrictions for verified defenders

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News, security controls /

Anthropic loosens Claude’s cyber restrictions for verified defenders 2026-10-07 at 12:00 By Anamarija Pogorelec Anthropic expanded its Cyber Verification Program (CVP), giving approved security professionals access to advanced Claude capabilities with fewer automated blocks on work such as malware analysis and vulnerability testing. Three tiers for cybersecurity work The program now has three tiers based […]

Anthropic loosens Claude’s cyber restrictions for verified defenders Read More »

Apple tightens macOS disk access as AI agents become more powerful

agentic AI, AI, apple, Data Protection, macOS, News, Privacy, security controls, software development /

Apple tightens macOS disk access as AI agents become more powerful 2026-10-05 at 11:11 By Anamarija Pogorelec Apple plans to introduce additional controls for Full Disk Access in macOS, citing growing privacy risks as AI agents become more capable and autonomous. Users will need to take explicit action to grant apps this permission. The company […]

Apple tightens macOS disk access as AI agents become more powerful Read More »

Criminal recruiters want people on your payroll

cybercriminals, cybersecurity, fraud, Insider Threat, Intel 471, News, report, security controls /

Criminal recruiters want people on your payroll 2026-10-02 at 09:00 By Anamarija Pogorelec Legitimate employee access can let criminals circumvent security controls that would be difficult to overcome from outside an organization. Routine actions such as information lookups, account resets, transaction approvals and shipment changes can become services sold to criminal customers, according to Intel […]

Criminal recruiters want people on your payroll Read More »

AI agents keep access to company data after their work is done

agentic AI, AI, credentials, Delinea, identity protection, News, policy, report, security controls /

AI agents keep access to company data after their work is done 2026-10-02 at 07:30 By Anamarija Pogorelec IT teams responsible for identity security are concerned about AI agents’ ongoing access to company systems and the actions they take on users’ behalf, according to a Delinea’s 2026 Identity Security Report: The AI Enforcement Gap. “Written […]

AI agents keep access to company data after their work is done Read More »

NVIDIA wants AI agent safety enforced in silicon, not left to the agent

agentic AI, AI, cybersecurity, GitHub, News, NVIDIA, security controls /

NVIDIA wants AI agent safety enforced in silicon, not left to the agent 2026-09-28 at 18:22 By Anamarija Pogorelec NVIDIA has introduced an open software platform and a hardware-based reference design intended to keep AI agents within the limits set by the organizations that use them. The Open Agent Safety Platform includes OpenShell, software that […]

NVIDIA wants AI agent safety enforced in silicon, not left to the agent Read More »

NIST and CISA finalize playbook to stop token theft and forgery

access management, CISA, cloud security, cybersecurity, guidelines, identity management, News, NIST, security controls, SSO /

NIST and CISA finalize playbook to stop token theft and forgery 2026-09-16 at 10:40 By Anamarija Pogorelec NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR […]

NIST and CISA finalize playbook to stop token theft and forgery Read More »

National Life Group CISO expects more vulnerabilities in six months than in thirty years

agentic AI, AI, CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, LLMs, News, patching, risk assessment, security controls, security operations, SOC, strategy, tips, vulnerability disclosure /

National Life Group CISO expects more vulnerabilities in six months than in thirty years 2026-09-02 at 09:00 By Mirko Zorz In this Help Net Security interview, Becky Palmer is VP and CISO at National Life Group, answers five questions about defending against AI-driven attacks. The discussion covers why patch cycles built for human speed cannot […]

National Life Group CISO expects more vulnerabilities in six months than in thirty years Read More »

AWS makes it easier to spot firewall rules that have gone quiet

AWS, Compliance, cybersecurity, firewall, network, News, security controls /

AWS makes it easier to spot firewall rules that have gone quiet 2026-08-24 at 07:00 By Anamarija Pogorelec AWS Network Firewall’s rule hit count capability gives security teams visibility into which stateful firewall rules are matching traffic, helping them identify unused or redundant rules and validate whether security controls are working as intended. The capability […]

AWS makes it easier to spot firewall rules that have gone quiet Read More »

OpenAI puts major frontier AI training run on hold over cyber risks

agentic AI, AI, cybersecurity, framework, News, OpenAI, security controls /

OpenAI puts major frontier AI training run on hold over cyber risks 2026-08-19 at 11:48 By Anamarija Pogorelec OpenAI temporarily paused reinforcement learning (RL) training on its latest models intended for deployment for two weeks while it hardened and red-teamed research environments and expanded monitoring. “Our largest planned frontier RL run remains on hold while […]

OpenAI puts major frontier AI training run on hold over cyber risks Read More »

Google’s $10,000 refund test shows why AI agents need zero trust

agentic AI, AI, cybersecurity, Google, News, security controls, software development, zero trust /

Google’s $10,000 refund test shows why AI agents need zero trust 2026-08-18 at 14:49 By Anamarija Pogorelec Google’s open-source autonomous Customer Support & Returns Agent, built using the Agent Development Kit (ADK) and Gemini, demonstrates how developers can apply zero-trust security principles to AI agents that interact with sensitive systems and take real-world actions. The […]

Google’s $10,000 refund test shows why AI agents need zero trust Read More »

99.9% of fixable AI vulnerabilities remain unpatched

agentic AI, AI, Cloud, cyber hygiene, cybersecurity, News, Orca Security, report, security controls /

99.9% of fixable AI vulnerabilities remain unpatched 2026-07-13 at 07:30 By Anamarija Pogorelec Organizations build, deploy, and operate AI in the cloud, but basic cybersecurity hygiene is often sacrificed for speed, according to Orca Security’s 2026 State of AI Security Report. Building AI without security Fifty-six percent of AI adopters have deployed agent frameworks into […]

99.9% of fixable AI vulnerabilities remain unpatched Read More »

Spotless compliance evidence can still hide a broken control

auditing, CISO, CMMC Accreditation Body, Compliance, cyber risk, cybersecurity, Don't miss, Features, framework, Hot stuff, News, NIST, opinion, Risk Management, Secureframe, security assessment, security controls, strategy /

Spotless compliance evidence can still hide a broken control 2026-06-04 at 09:26 By Mirko Zorz In this interview with Help Net Security, Marc Rubbinaccio, Head of Cybersecurity and Compliance at Secureframe, explains where security teams go wrong when preparing for CMMC and FedRAMP 20x. The conversation covers how organizations check the 110 requirements but miss […]

Spotless compliance evidence can still hide a broken control Read More »

Only 11% of production agents pass the AI agent security bar

agentic AI, AI, cyber risk, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, research, security controls /

Only 11% of production agents pass the AI agent security bar 2026-06-03 at 14:00 By Mirko Zorz Enterprise teams are running AI agents that write code, drive browsers, answer customer calls, manage cloud infrastructure, and query data warehouses with standing credentials. A new independent assessment of 100 production agents finds that nearly all of them […]

Only 11% of production agents pass the AI agent security bar Read More »

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook

Banks, CISO, cybersecurity, data, Filigran, finance, fraud, News, report, security controls /

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook 2026-04-22 at 10:09 By Anamarija Pogorelec Financially motivated attacks continued to drive the bulk of cyber incidents against banks, insurers, and payment processors in 2025. Approximately 90% of breaches affecting financial institutions carried a financial motive, with data breaches accounting for […]

Shadow AI, deepfakes, and supply chain compromise are rewriting the financial sector threat playbook Read More »

What managing partners should ask AI vendors before signing any contract

Artificial Intelligence, CISO, cyber risk, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, privileged identity, Risk Management, security controls, strategy, Threat Intelligence /

What managing partners should ask AI vendors before signing any contract 2026-04-08 at 09:28 By Mirko Zorz In this Help Net Security interview, Kumar Ravi is the Chief Security & Resilience Officer at TMF Group, argues that over-privileged access and weak workflow controls pose more danger than ransomware attacks, precisely because they accumulate quietly and […]

What managing partners should ask AI vendors before signing any contract Read More »

The internet’s oldest trust mechanism is still one of its weakest links

Artificial Intelligence, authentication, CSC, cybersecurity, DNS, News, report, security controls /

The internet’s oldest trust mechanism is still one of its weakest links 2026-01-22 at 07:23 By Anamarija Pogorelec Attackers continue to rely on domain names as an entry point into enterprise systems. A CSC domain security study finds that large organizations leave this part of their attack surface underprotected, even as attacks become more frequent. […]

The internet’s oldest trust mechanism is still one of its weakest links Read More »

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience

Artificial Intelligence, backup, cybersecurity, Don't miss, Encryption, Features, Hot stuff, Incident Response, messaging, News, Rakuten Viber, security controls, social engineering /

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience 2026-01-13 at 09:01 By Mirko Zorz In this Help Net Security interview, Liad Shnell, CISO and CTO at Rakuten Viber, discusses how messaging platforms have become critical infrastructure during crises and conflicts. He explains how it influences cybersecurity priorities, from encryption and abuse prevention […]

Rakuten Viber CISO/CTO on balancing encryption, abuse prevention, and platform resilience Read More »

Gen AI data violations more than double

Artificial Intelligence, cloud security, cybersecurity, Don't miss, generative AI, Netskope, News, report, risk assessment, security controls, survey /

Gen AI data violations more than double 2026-01-07 at 08:32 By Sinisa Markovic Security teams track activity that moves well beyond traditional SaaS platforms, with employees interacting daily with generative AI tools, personal cloud services, and automated systems that exchange data without direct human input. These patterns shape how sensitive information moves across corporate environments […]

Gen AI data violations more than double Read More »

Scroll to Top