tips

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

Asimily, backup, CISO, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Dragos, Features, Hexnode, Hot stuff, Insurance, Internet of Things, News, opinion, Risk Management, strategy, supply chain, tips, Waterfall Security Solutions /

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced 2026-07-29 at 08:30 By Mirko Zorz A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets […]

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Read More »

Shadow AI incident response begins with logs that may already be gone

AI, CISO, Compliance, cybersecurity, Don't miss, Features, Hot stuff, LevelBlue, News, opinion, regulation, Shadow Brokers, strategy, tips /

Shadow AI incident response begins with logs that may already be gone 2026-07-28 at 09:00 By Mirko Zorz In this Help Net Security interview, Brandy Wityak, VP of Complex Matters at LevelBlue, explains what happens in the hours after a shadow AI incident. She describes how quickly logs roll over, why firewall records of outbound […]

Shadow AI incident response begins with logs that may already be gone Read More »

Multi-patch vulnerability fixes can leave open source exposed

CVE, Don't miss, Features, Hot stuff, News, open source, patching, research, strategy, tips, vulnerability management /

Multi-patch vulnerability fixes can leave open source exposed 2026-07-23 at 08:00 By Mirko Zorz Vulnerability management runs on a shorthand. A CVE shows a linked patch, someone applies it, and the ticket moves to closed. That shorthand covers most open source fixes. A share work in a different way, arriving as a run of two […]

Multi-patch vulnerability fixes can leave open source exposed Read More »

Building a defense in depth strategy for sensitive data

CISO, cybersecurity, data security, News, strategy, tips, Video /

Building a defense in depth strategy for sensitive data 2026-07-23 at 07:00 By Help Net Security In this Help Net Security video, Venkata Pavan Kumar Gummadi, Professional Software Engineer at Broadridge, explains how to build a defense in depth strategy for protecting sensitive data. He argues that a single control, like encrypting a disk or […]

Building a defense in depth strategy for sensitive data Read More »

The air gap is a myth and other OT security truths

CISO, critical infrastructure, cyber resilience, Don't miss, energy sector, Features, Hot stuff, interoperability, News, opinion, Risk Management, strategy, threat modeling, tips /

The air gap is a myth and other OT security truths 2026-07-21 at 09:00 By Mirko Zorz Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. […]

The air gap is a myth and other OT security truths Read More »

More alerts are making your team slower, and an outcome-based SOC fixes that

CXO, cybersecurity, Don't miss, News, Rapid7, security operations, SOC, strategy, threat detection, tips, Video /

More alerts are making your team slower, and an outcome-based SOC fixes that 2026-07-20 at 08:30 By Help Net Security In this Help Net Security video, Thom Langford, EMEA CTO, Rapid7, explains why piling on more security alerts makes a SOC slower to respond. Attackers log in with stolen credentials and use trusted tools like […]

More alerts are making your team slower, and an outcome-based SOC fixes that Read More »

The five step plan that cuts security budget waste

CISO, cybersecurity, Don't miss, News, security ROI, strategy, tips, Video /

The five step plan that cuts security budget waste 2026-07-17 at 08:00 By Help Net Security In this Help Net Security video, Viktor Bulanek, CTO of Penetrify, explains where security budget waste comes from. Budgets get built around vendor categories, compliance checkboxes, and last year’s headlines. Attackers work along attack paths, and that mismatch is […]

The five step plan that cuts security budget waste Read More »

Reading between the lines of a cyber insurance policy

CISO, cyber insurance, Don't miss, Features, financial industry, Hot stuff, News, opinion, strategy, tips /

Reading between the lines of a cyber insurance policy 2026-07-16 at 09:00 By Mirko Zorz Enterprises in regulated industries often carry cyber insurance policies because contracts require it or boards ask for documented risk transfer. The global market for these policies reached about $16 billion in premiums in 2024. Coverage has become widespread. Payouts have […]

Reading between the lines of a cyber insurance policy Read More »

Turning software supply chain security into a daily habit

cybersecurity, News, strategy, supply chain attacks, Threat Intelligence, tips, Video /

Turning software supply chain security into a daily habit 2026-07-10 at 08:30 By Help Net Security In this Help Net Security video, Anastasia Tikhonova, Global Threat Research Lead at Group-IB, explains how to operationalize software supply chain risk. Instead of filing an SBOM away as a compliance document, she argues teams should use it every […]

Turning software supply chain security into a daily habit Read More »

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure

CISO, cyber risk, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips /

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure 2026-07-08 at 09:00 By Mirko Zorz In this interview with Help Net Security, Miranda Ritchie, CISO at Orbia, talks about protecting industrial systems where software runs water, chemical and manufacturing processes. She explains why a cyber incident in these settings can harm people, equipment and […]

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure Read More »

Your company already adopted AI and nobody is governing access

AI, cybersecurity, Don't miss, News, opinion, strategy, tips, Video /

Your company already adopted AI and nobody is governing access 2026-07-07 at 08:30 By Help Net Security In this Help Net Security video, Antoine Berton, CTO at Elba Security, breaks down the AI attack surface. Your company already adopted AI, and every adoption creates access that nobody governs. A quick click on a Friday afternoon […]

Your company already adopted AI and nobody is governing access Read More »

Securing the inbox: Where identity, brand and security meet

CISO, cybersecurity, DMARC, Don't miss, email security, Features, GlobalSign, Hot stuff, News, opinion, Red Sift, strategy, tips /

Securing the inbox: Where identity, brand and security meet 2026-07-06 at 09:00 By Mirko Zorz Getting a verified logo to appear next to your email has traditionally meant having to work with two separate entities. You have to work with a DMARC partner for setting up DMARC and BIMI, then use a trusted Certificate Authority […]

Securing the inbox: Where identity, brand and security meet Read More »

The uptime questions every engineering leader should ask this week

CXO, Don't miss, Features, Hot stuff, News, strategy, tips /

The uptime questions every engineering leader should ask this week 2026-06-25 at 09:30 By Mirko Zorz In this interview with Help Net Security, Mattias Geniar, CTO at Oh Dear, explains why most outages start quietly, as creeping latency or a slow rise in errors. He argues teams alert on the wrong things: absolute numbers instead […]

The uptime questions every engineering leader should ask this week Read More »

LLM security advice looks solid until you check the hard cases

Don't miss, Google, how-to, LLMs, News, Reddit, research, tips /

LLM security advice looks solid until you check the hard cases 2026-06-25 at 09:00 By Anamarija Pogorelec Plenty of people now type their security worries straight into a chatbot. A hacked account, a suspicious email, a stalker who might be tracking a phone, all of it lands in the same window someone would use to […]

LLM security advice looks solid until you check the hard cases Read More »

Best practices for AI in open-source work

Claude Code, generative AI, LLMs, News, open source, tips /

Best practices for AI in open-source work 2026-06-25 at 08:00 By Anamarija Pogorelec Free and open source software developers us AI coding assistants such as Claude Code, Copilot CLI, Antigravity, and OpenCode in their daily work. The Software Freedom Conservancy responded to that trend with a set of recommendations for contributors who use these tools, […]

Best practices for AI in open-source work Read More »

What your next cyber insurance renewal will demand

cyber insurance, how-to, News, strategy, tips, Video /

What your next cyber insurance renewal will demand 2026-06-25 at 07:30 By Help Net Security In this Help Net Security video, Michael Loewy, co-founder, Tide Foundation, explains how cyber insurance is rewriting security programs at renewal time. Insurers want more questionnaires, more evidence, and more attestations, because the market is moving from trusting your answers […]

What your next cyber insurance renewal will demand Read More »

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure

Compliance, Data Protection, News, regulation, strategy, tips, Video /

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure 2026-06-17 at 07:30 By Help Net Security In this Help Net Security video, Rick Goud, Global Field CTO at Kiteworks, discusses how to handle SEC, NIS2, and DORA disclosure timelines during a security incident. He opens with a 3.47 a.m. call: the team cannot confirm […]

Navigating SEC, NIS2, and DORA incident disclosure timelines under pressure Read More »

Reachability makes AI threat modeling worth the trust

CXO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, opinion, scanning, threat modeling, tips /

Reachability makes AI threat modeling worth the trust 2026-06-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Oscar Andersson, CTO at Oplane, explains why most scanning tools fail. They cry wolf, flagging threats that cannot run in real code. The argument centers on reachability. A finding counts only when someone walks […]

Reachability makes AI threat modeling worth the trust Read More »

EU Cybersecurity Act 2.0: When good regulation goes bad

BH Consulting, Brian Honan, Compliance, Data Protection, Don't miss, enterprise, EU, Europe, Expert analysis, Expert corner, Hot stuff, News, opinion, regulation, strategy, tips /

EU Cybersecurity Act 2.0: When good regulation goes bad 2026-06-16 at 08:30 By Help Net Security Over recent years we’ve witnessed the EU becoming increasingly serious about cybersecurity. After years of watching high profile breaches, many resulting from supply chain attacks targeting our critical infrastructure, that seriousness is welcome. But good intentions and good policy […]

EU Cybersecurity Act 2.0: When good regulation goes bad Read More »

Cyber resilience metrics that drive action

CISO, cyber resilience, cybersecurity, News, NormCyber, security metrics, strategy, tips, Video /

Cyber resilience metrics that drive action 2026-06-10 at 09:55 By Help Net Security In this Help Net Security video, Pete Bowers, COO at NormCyber, explains how organizations can build a cyber resilience metrics program that supports better decisions. He questions common ways of measuring resilience, such as risk registers, tool scores, and annual tests, and […]

Cyber resilience metrics that drive action Read More »

Scroll to Top