strategy

What Mozilla learned running an AI security bug hunting pipeline on Firefox

AI, Anthropic, BH Consulting, Brian Honan, code analysis, Don't miss, Firefox, Hot stuff, Mozilla, News, strategy, tips /

What Mozilla learned running an AI security bug hunting pipeline on Firefox 2026-05-08 at 01:14 By Mirko Zorz Over the past several months, Mozilla ran an agentic harness powered by Claude Mythos Preview across Firefox’s source code, identifying 271 security bugs that were fixed in Firefox 150, with additional fixes shipped in versions 149.0.2 and […]

What Mozilla learned running an AI security bug hunting pipeline on Firefox Read More »

Spotting third-party cyber risk before attackers do

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, News, opinion, Risk Management, strategy, tips, Video /

Spotting third-party cyber risk before attackers do 2026-05-04 at 09:46 By Help Net Security In this Help Net Security video, Jeffrey Wheatman, SVP and Cyber Strategist at Black Kite, discusses how organizations can identify and manage third-party cyber exposures before attackers exploit them. He argues that businesses should move beyond a data-loss mindset toward one […]

Spotting third-party cyber risk before attackers do Read More »

AI is speeding up nation-state cyber programs

CISO, cyber risk, cybersecurity, Don't miss, Features, Government, Hot stuff, Microsoft, NATO, News, North Korea, opinion, strategy /

AI is speeding up nation-state cyber programs 2026-04-24 at 08:40 By Mirko Zorz Im this Help Net Security interview, Kaja Ciglic, Senior Director, Cybersecurity Policy and Diplomacy at Microsoft, discusses how nation-state cyber programs have changed over three years. Cyber has become a core instrument of state power, integrated with military, economic, and diplomatic tools. […]

AI is speeding up nation-state cyber programs Read More »

A year in, Zoom’s CISO reflects on balancing security and business

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, tips, Zoom /

A year in, Zoom’s CISO reflects on balancing security and business 2026-04-23 at 09:47 By Mirko Zorz In this Help Net Security interview, Sandra McLeod, CISO at Zoom, reflects on her first year in the role. She talks about moving from reactive firefighting to business strategy, and what she heard from engineers, the board, and […]

A year in, Zoom’s CISO reflects on balancing security and business Read More »

What the EU AI Act requires for AI agent logging

Artificial Intelligence, Compliance, Don't miss, EU, Europe, Expert analysis, Expert corner, Hot stuff, logging, opinion, regulation, strategy /

What the EU AI Act requires for AI agent logging 2026-04-16 at 09:02 By Help Net Security The EU AI Act is 144 pages long. The logging requirements that matter for AI agent developers sit across four articles that keep referencing each other. Here’s what they say, when the deadlines hit, and where the gaps […]

What the EU AI Act requires for AI agent logging Read More »

Wi-Fi roaming security practices for access network providers and identity providers

cybersecurity, networking, News, report, strategy, tips, wireless, Wireless Broadband Alliance /

Wi-Fi roaming security practices for access network providers and identity providers 2026-04-16 at 07:47 By Anamarija Pogorelec Public Wi-Fi roaming networks carry authentication credentials across multiple administrative boundaries, and the protocols governing that process vary widely in their security properties. The Wireless Broadband Alliance published a set of guidelines that specifies which authentication, encryption, and […]

Wi-Fi roaming security practices for access network providers and identity providers Read More »

The exploit gap is closing, and your patch cycle wasn’t built for this

Anthropic, Artificial Intelligence, CISO, Cloud Security Alliance, cyber risk, cybersecurity, Don't miss, Hot stuff, how-to, News, opinion, report, Risk Management, strategy, tips /

The exploit gap is closing, and your patch cycle wasn’t built for this 2026-04-15 at 10:02 By Mirko Zorz The Cloud Security Alliance has published a briefing on what it calls a turning point in the threat landscape: the time between a vulnerability being discovered and a working exploit is shrinking fast. The briefing centers […]

The exploit gap is closing, and your patch cycle wasn’t built for this Read More »

Zero trust at year two: What nobody planned for

CISO, cybersecurity, News, Oleria, strategy, tips, Video, zero trust /

Zero trust at year two: What nobody planned for 2026-04-14 at 08:11 By Help Net Security In this Help Net Security video, Jim Alkove, CEO of Oleria, walks through where zero trust programs typically stand one to two years in. Most organizations have made gains in endpoint security and network segmentation, but identity remains the […]

Zero trust at year two: What nobody planned for Read More »

What managing partners should ask AI vendors before signing any contract

Artificial Intelligence, CISO, cyber risk, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, News, opinion, privileged identity, Risk Management, security controls, strategy, Threat Intelligence /

What managing partners should ask AI vendors before signing any contract 2026-04-08 at 09:28 By Mirko Zorz In this Help Net Security interview, Kumar Ravi is the Chief Security & Resilience Officer at TMF Group, argues that over-privileged access and weak workflow controls pose more danger than ransomware attacks, precisely because they accumulate quietly and […]

What managing partners should ask AI vendors before signing any contract Read More »

Trust, friction, and ROI: A CISO’s take on making security work for the business

CISO, Compliance, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, security ROI, strategy /

Trust, friction, and ROI: A CISO’s take on making security work for the business 2026-04-02 at 08:42 By Mirko Zorz In this Help Net Security interview, John O’Rourke, CISO at PPG, talks about what it means for security to drive business value. He explains how mature security programs reduce friction in sales cycles and M&A […]

Trust, friction, and ROI: A CISO’s take on making security work for the business Read More »

Why I’m done calling humans the weakest link

BH Consulting, Brian Honan, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, human error, News, opinion, security awareness, strategy, user behavior /

Why I’m done calling humans the weakest link 2026-03-31 at 11:22 By Help Net Security Cybersecurity has long suffered from a people problem, but not in the way we often hear about. As industry that is based on enabling communication across the globe via the internet and many types of devices, many of us practitioners […]

Why I’m done calling humans the weakest link Read More »

The art of making technical risk make sense to executives

boardroom, CISO, cybersecurity, how-to, News, Paessler, strategy, tips, Video /

The art of making technical risk make sense to executives 2026-03-31 at 11:21 By Help Net Security In this Help Net Security video, Jay Miller, CISO at Paessler, explains how security leaders can communicate technical risk to executives and board members in terms they understand. The focus is on business impact: financial loss, compliance fines, […]

The art of making technical risk make sense to executives Read More »

Why risk alone doesn’t get you to yes

CISO, cyber risk, cybersecurity, Don't miss, Expert analysis, Expert corner, News, opinion, Risk Management, strategy /

Why risk alone doesn’t get you to yes 2026-03-30 at 09:29 By Help Net Security I have been in security rooms for years, from military operations centers to corporate boardrooms. In all those years I can tell you that the hardest mission that most security leaders will face is not identifying a threat, but getting […]

Why risk alone doesn’t get you to yes Read More »

AI SOC vendors are selling a future that production deployments haven’t reached yet

agentic AI, Artificial Intelligence, Aunoo AI, automation, CISO, Claude Code, code analysis, Cybanetix, Don't miss, Features, Gartner, generative AI, Hot stuff, LLMs, News, opinion, Reddit, report, security operations, SOC, strategy, Threat Intelligence /

AI SOC vendors are selling a future that production deployments haven’t reached yet 2026-03-26 at 12:32 By Mirko Zorz Vendors selling AI-powered security operations platforms have built their pitches around a consistent set of promises: autonomous threat investigation, dramatic reductions in analyst workload, and an accelerating path toward humanless operations. Practitioners buying and deploying those […]

AI SOC vendors are selling a future that production deployments haven’t reached yet Read More »

Why your phishing simulations aren’t building a security culture

cyber resilience, cyber risk, cybersecurity, Don't miss, Immersive, News, phishing, Risk Management, security culture, skill development, strategy, tips, Video /

Why your phishing simulations aren’t building a security culture 2026-03-25 at 08:07 By Help Net Security Security culture isn’t built by phishing simulations. In this Help Net Security video, Dan Potter, VP of Cyber Resilience at Immersive, argues that annual training videos and quarterly phishing tests happen in calm, controlled settings that tell us nothing […]

Why your phishing simulations aren’t building a security culture Read More »

The AI safety conversation is focused on the wrong layer

agentic AI, Artificial Intelligence, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, RSAC 2026, strategy, Teleport /

The AI safety conversation is focused on the wrong layer 2026-03-24 at 16:30 By Mirko Zorz Organizations have spent years accumulating fragmented identity systems: too many roles, too many credentials, too many disconnected tools. For a workforce of humans, that fragmentation was manageable. Humans log in, log out, and make decisions slowly enough that gaps […]

The AI safety conversation is focused on the wrong layer Read More »

Quantum threats are already active and the defense response remains fragmented

CISO, cybersecurity, Don't miss, Encryption, Features, Hot stuff, News, pQCee, quantum computing, RSAC 2026, strategy /

Quantum threats are already active and the defense response remains fragmented 2026-03-23 at 17:17 By Mirko Zorz Enterprises are moving toward post-quantum security at uneven speeds, and the gap between organizations that have built crypto-agility into their infrastructure and those that have adopted the label without the underlying capability is widening. Dr. Tan Teik Guan, […]

Quantum threats are already active and the defense response remains fragmented Read More »

Your AI agents are moving sensitive data. Do you know where?

agentic AI, Artificial Intelligence, Bonfy.AI, CISO, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, RSAC 2026, strategy, threat modeling /

Your AI agents are moving sensitive data. Do you know where? 2026-03-23 at 09:18 By Mirko Zorz In this Help Net Security interview, Gidi Cohen, CEO at Bonfy.AI, addresses what he sees as the most pressing gap in AI agent security: data-layer risk. While the industry focuses on prompt injection and model behavior, Cohen argues […]

Your AI agents are moving sensitive data. Do you know where? Read More »

AI got it wrong with high confidence. Now what?

Artificial Intelligence, Don't miss, Features, Hot stuff, LLMs, machine learning, News, opinion, SPRYFOX, strategy /

AI got it wrong with high confidence. Now what? 2026-03-19 at 09:02 By Mirko Zorz In this Help Net Security interview, Christian Debes, Head of Data Analytics & AI at SPRYFOX, talks about the growing gap between what AI models do and what their operators can explain. He argues this gap is already a liability, […]

AI got it wrong with high confidence. Now what? Read More »

Stop building security goals around controls

CISO, cyber risk, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, security metrics, security ROI, strategy /

Stop building security goals around controls 2026-03-18 at 09:27 By Mirko Zorz In this Help Net Security interview, Devin Rudnicki, CISO at Fitch Group, argues that security strategy fails when it loses its connection to business outcomes. Rudnicki walks through how to align security goals with corporate priorities, why CISOs must present risk in terms […]

Stop building security goals around controls Read More »

Scroll to Top