strategy

AI agent detection signals that still work when agents look human

AI agent detection signals that still work when agents look human 2026-11-05 at 08:45 By Mirko Zorz Bots follow a script. AI agents work toward a goal and choose their own steps, which makes them harder to catch. In this Help Net Security interview, Zohaib Ahmed, CEO of Resemble AI explains how agents arrive as […]

AI agent detection signals that still work when agents look human Read More »

What AI-generated malware looks like under the microscope

What AI-generated malware looks like under the microscope 2026-11-04 at 09:00 By Mirko Zorz In this Help Net Security interview, Lindsay Kaye, VP of Threat Intelligence at HUMAN Security, talks about what AI-generated malware looks like on the bench. She points to tidy comments, uniform logging messages, and emojis as signs a script came from […]

What AI-generated malware looks like under the microscope Read More »

Companies going all in on AI could see their strategy backfire

Companies going all in on AI could see their strategy backfire 2026-11-04 at 07:30 By Anamarija Pogorelec Four of the five highest-ranked enterprise risks in Gartner’s Quarterly Emerging Risk Report were AI-related. AI strategy miscalculation and AI-driven competitive displacement debuted at No. 3 and No. 4, respectively. The AI workforce preparedness gap held fifth place. […]

Companies going all in on AI could see their strategy backfire Read More »

What human hackers still do better than AI, according to HackerOne’s CEO

What human hackers still do better than AI, according to HackerOne’s CEO 2026-11-03 at 08:30 By Mirko Zorz AI can find vulnerabilities in minutes, but people still hold the edge in judging what a flaw means for a business. In this Help Net Security interview, Kara Sprague, CEO of HackerOne, talks about business logic bugs, […]

What human hackers still do better than AI, according to HackerOne’s CEO Read More »

The first ten lines of a command policy for AI coding agents

The first ten lines of a command policy for AI coding agents 2026-11-02 at 08:30 By Mirko Zorz In this Help Net Security interview, Vinay Thakker, CTO of KloudStax, explains how to set identity, credentials, and network limits for AI agents. He argues that agents should run under their own identity, with the person’s identity […]

The first ten lines of a command policy for AI coding agents Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

Bellini Capital CISO on AI security governance and the limits of patching faster

Bellini Capital CISO on AI security governance and the limits of patching faster 2026-10-28 at 08:30 By Mirko Zorz In this Help Net Security interview, Brian Blakley, CISO at Bellini Capital, explains why AI makes finding vulnerabilities faster while fixing them still takes time. He argues that “patch faster” is not enough and that teams […]

Bellini Capital CISO on AI security governance and the limits of patching faster Read More »

CISA lays out plan to push cyber adversaries out of US critical infrastructure

CISA lays out plan to push cyber adversaries out of US critical infrastructure 2026-10-27 at 14:14 By Anamarija Pogorelec The Cybersecurity and Infrastructure Security Agency (CISA) has released CISA 2030: Defend, Harden, Prevail, a strategy to strengthen national security and the resilience of critical infrastructure. It addresses intersecting cyber, physical, and geopolitical threats that can […]

CISA lays out plan to push cyber adversaries out of US critical infrastructure Read More »

Several AI security market categories are headed for bigger platforms

Several AI security market categories are headed for bigger platforms 2026-10-27 at 08:30 By Mirko Zorz In this interview with Help Net Security, Jonathan Care, Lead Analyst and Practice Lead AI at KuppingerCole Analysts, compares AI security startups to the early fraud market he helped define at Gartner. He explains which categories will survive as […]

Several AI security market categories are headed for bigger platforms Read More »

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question 2026-10-22 at 10:02 By Mirko Zorz In this interview with Help Net Security, Roger Halbheer, Customer Security Officer at Microsoft, argues that digital sovereignty is a security question first. He explains why organizations underestimate speed, the time it takes to detect and stop […]

Sovereignty vs. security: Microsoft’s Roger Halbheer says you’re asking the wrong question Read More »

Bringing AI into the SOC means watching for shadow AI and loose permissions

Bringing AI into the SOC means watching for shadow AI and loose permissions 2026-10-21 at 07:30 By Help Net Security In this Help Net Security video, Vince Stoffer, Field CTO at Corelight, talks about how AI is changing work in the SOC and how attackers are using the same tools. He explains how LLMs help […]

Bringing AI into the SOC means watching for shadow AI and loose permissions Read More »

RPO and RTO explained with a real disaster recovery example

RPO and RTO explained with a real disaster recovery example 2026-10-19 at 08:00 By Help Net Security In this Help Net Security video, Matthew Burden, CEO of BlackBox Hosting, explains RPO and RTO and how they differ in practice. RPO, the recovery point objective, is the most data you can lose, measured in time. RTO, […]

RPO and RTO explained with a real disaster recovery example Read More »

Why Active Directory weaknesses stay open for years in teams with one or two admins

Why Active Directory weaknesses stay open for years in teams with one or two admins 2026-10-16 at 09:00 By Mirko Zorz David Fuhr, CTO at intcube, talks about a security cohort for public administration, where 27 municipalities hardened Windows Server and Active Directory together over 12 weeks. This Help Net Security interview covers how a […]

Why Active Directory weaknesses stay open for years in teams with one or two admins Read More »

Immuta CISO predicts critical AI incidents at major enterprises within 18 months

Immuta CISO predicts critical AI incidents at major enterprises within 18 months 2026-10-15 at 08:30 By Mirko Zorz In this Help Net Security interview, Michael Scott, CISO at Immuta, talks about how organizations should handle permissions for AI agents. He argues agents should be treated as lower-trust identities that don’t inherit everything their user can […]

Immuta CISO predicts critical AI incidents at major enterprises within 18 months Read More »

Patching and preventing issues: What are the lessons you can learn?

Patching and preventing issues: What are the lessons you can learn? 2026-10-14 at 08:30 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes […]

Patching and preventing issues: What are the lessons you can learn? Read More »

Be a good AI ancestor: Cybersecurity already gave us the playbook

Be a good AI ancestor: Cybersecurity already gave us the playbook 2026-10-13 at 08:30 By Help Net Security AI has brought us to a familiar inflection point in the story of privacy, cybersecurity, and online safety. We have an opportunity to apply decades of cybersecurity experience before the next generation of technology creates consequences we […]

Be a good AI ancestor: Cybersecurity already gave us the playbook Read More »

Geopolitics and the cyber resilience gap belong in your threat model

Geopolitics and the cyber resilience gap belong in your threat model 2026-10-12 at 09:00 By Mirko Zorz In this Help Net Security interview, Akshay Joshi, Head of the Centre for Cybersecurity at the World Economic Forum, talks about how AI, geopolitics and industrialized fraud are changing cyber risk. He discusses findings from the Global Cybersecurity […]

Geopolitics and the cyber resilience gap belong in your threat model Read More »

Pricing your bad days and how to build an economic model for security decisions

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

Automation, AI agents or people? Sorting out who handles each security finding

Automation, AI agents or people? Sorting out who handles each security finding 2026-10-07 at 07:30 By Mirko Zorz Just over half of the 200 senior security and technology leaders polled for ArmorCode say their organizations will struggle to simplify their software security programs if they keep working the way they do today. The respondents are […]

Automation, AI agents or people? Sorting out who handles each security finding Read More »

U.S. Bank CISO says the security role keeps growing and no one can own all of it

U.S. Bank CISO says the security role keeps growing and no one can own all of it 2026-10-06 at 09:00 By Mirko Zorz In this interview with Help Net Security, Ann Barron-DiCamillo, EVP, CISO at U.S. Bank, talks about how the CISO role has grown to cover fraud, resilience, third-party risk, and AI governance. She […]

U.S. Bank CISO says the security role keeps growing and no one can own all of it Read More »

Scroll to Top