tips

Testing reveals Claude Mythos’s offensive capabilities and limits

AI, Anthropic, Artificial Intelligence, Cloud Security Alliance, cybersecurity, Don't miss, enterprise, Hot stuff, News, security testing, SMBs, tips /

Testing reveals Claude Mythos’s offensive capabilities and limits 2026-04-14 at 18:15 By Zeljka Zorz Could Claude Mythos Preview, Anthropic’s latest large language model, be leveraged for fully automated cyber attacks? The UK government’s AI Security Institute (AISI) tested its capability to successfully engage in capture-the-flag (CTF) challenges and multi-step attack scenarios, and found that that […]

Testing reveals Claude Mythos’s offensive capabilities and limits Read More »

Zero trust at year two: What nobody planned for

CISO, cybersecurity, News, Oleria, strategy, tips, Video, zero trust /

Zero trust at year two: What nobody planned for 2026-04-14 at 08:11 By Help Net Security In this Help Net Security video, Jim Alkove, CEO of Oleria, walks through where zero trust programs typically stand one to two years in. Most organizations have made gains in endpoint security and network segmentation, but identity remains the […]

Zero trust at year two: What nobody planned for Read More »

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches

certificates, Microsoft, News, tips, Windows /

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches 2026-04-03 at 14:57 By Anamarija Pogorelec Microsoft’s Secure Boot certificates, issued in 2011, are approaching expiration in 2026. To help IT administrators track whether devices have received replacement certificates, Microsoft has added new status indicators to the Windows Security app, under Device […]

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches Read More »

The art of making technical risk make sense to executives

boardroom, CISO, cybersecurity, how-to, News, Paessler, strategy, tips, Video /

The art of making technical risk make sense to executives 2026-03-31 at 11:21 By Help Net Security In this Help Net Security video, Jay Miller, CISO at Paessler, explains how security leaders can communicate technical risk to executives and board members in terms they understand. The focus is on business impact: financial loss, compliance fines, […]

The art of making technical risk make sense to executives Read More »

Why your phishing simulations aren’t building a security culture

cyber resilience, cyber risk, cybersecurity, Don't miss, Immersive, News, phishing, Risk Management, security culture, skill development, strategy, tips, Video /

Why your phishing simulations aren’t building a security culture 2026-03-25 at 08:07 By Help Net Security Security culture isn’t built by phishing simulations. In this Help Net Security video, Dan Potter, VP of Cyber Resilience at Immersive, argues that annual training videos and quarterly phishing tests happen in calm, controlled settings that tell us nothing […]

Why your phishing simulations aren’t building a security culture Read More »

What to do in the first 24 hours of a breach

CISO, Compliance, cybersecurity, CYGNVS, data breach, Don't miss, Incident Response, News, strategy, tips, Video /

What to do in the first 24 hours of a breach 2026-03-17 at 07:59 By Help Net Security In this Help Net Security video, Arvind Parthasarathi, CEO of CYGNVS, walks through a 10-step process for handling a cybersecurity breach. The first five steps cover preparation: setting up an out-of-band communication platform, identifying internal stakeholders, selecting […]

What to do in the first 24 hours of a breach Read More »

Passwords, MFA, and why neither is enough

authentication, Don't miss, FIDO Alliance, MFA, News, passwords, Portnox, strategy, tips, Video /

Passwords, MFA, and why neither is enough 2026-03-13 at 07:37 By Help Net Security Passwords weren’t enough, so we added MFA. Now MFA isn’t enough either. In this Help Net Security video, Karlo Zatylny, CTO/CISO at Portnox, walks through why each layer of identity security has failed and what comes next. SMS codes can be […]

Passwords, MFA, and why neither is enough Read More »

Zero trust, zero buzzwords: Here’s what it means

cybersecurity, Don't miss, News, strategy, tips, Video, VPN, Zenarmor, zero trust /

Zero trust, zero buzzwords: Here’s what it means 2026-03-11 at 09:21 By Help Net Security In this Help Net Security video, Murat Balaban, CEO of Zenarmor, breaks down zero trust and zero trust network access (ZTNA) without the buzzwords. The video covers why this approach matters, including the risk of lateral movement after a breach […]

Zero trust, zero buzzwords: Here’s what it means Read More »

Decoding silence: How deaf and hard-of-hearing pros are breaking into cybersecurity

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, resilience, strategy, ThriveDX, tips /

Decoding silence: How deaf and hard-of-hearing pros are breaking into cybersecurity 2026-03-09 at 09:01 By Mirko Zorz Stu Hirst was already a CISO when he started to go deaf. It was 2023, and the hearing loss crept in over months, enough for him to adapt, to lean on hearing aids and captions, to quietly reorganize […]

Decoding silence: How deaf and hard-of-hearing pros are breaking into cybersecurity Read More »

Why phishing still works today

attacks, cybersecurity, Don't miss, News, opinion, phishing, Terra Security, tips, Video /

Why phishing still works today 2026-03-06 at 08:30 By Help Net Security In this Help Net Security video, Gal Livschitz, Senior Penetration Tester at Terra Security, explains how phishing has evolved and why employees still fall for it. He outlines how phishing now uses HTTPS, branded pages, and lookalike domains, making attacks harder to spot. […]

Why phishing still works today Read More »

When cyber threats start thinking for themselves

agentic AI, Artificial Intelligence, Don't miss, News, opinion, SimSpace, tips, Video /

When cyber threats start thinking for themselves 2026-03-02 at 07:30 By Help Net Security In this Help Net Security video, Jason Rivera, Field CISO & Head of Solution Engineering at SimSpace, discusses how autonomous AI agents are changing cyber threats. Drawing on experience in the US Army, NSA, Deloitte, and CrowdStrike, he describes how security […]

When cyber threats start thinking for themselves Read More »

Scattered Lapsus$ Hunters seeks women for vishing attacks

cybercriminals, Dataminr, Don't miss, Hot stuff, News, social engineering, tips, vishing /

Scattered Lapsus$ Hunters seeks women for vishing attacks 2026-02-26 at 14:55 By Zeljka Zorz The Scattered Lapsus$ Hunters (SLH) hacking collective has launched a recruitment push aimed specifically at women, offering cash payments for participating in voice-phishing (vishing) attacks. A few days ago, threat intelligence firm Dataminr detected posts on a public Telegram channel advertising […]

Scattered Lapsus$ Hunters seeks women for vishing attacks Read More »

The hidden cost of putting off security decisions

CISO, cyber risk, cybersecurity, Don't miss, Geordie AI, News, shadow IT, tips, Video, vulnerability management /

The hidden cost of putting off security decisions 2026-02-06 at 08:01 By Help Net Security In this Help Net Security video, Hanah Darley, Chief AI Officer, Geordie AI, talks about how putting off security risk decisions creates long-term costs that often stay hidden. Drawing on her work with CISOs and security leaders, she shows how […]

The hidden cost of putting off security decisions Read More »

Cybersecurity planning keeps moving toward whole-of-society models

CISO, cyber risk, Don't miss, Government, how-to, News, Risk Management, strategy, tips /

Cybersecurity planning keeps moving toward whole-of-society models 2026-02-05 at 09:11 By Sinisa Markovic National governments already run cybersecurity through a mix of ministries, regulators, law enforcement, and private operators that own most critical systems. In that environment, guidance circulating among policymakers outlines how national cybersecurity strategies increasingly tie together risk management, workforce planning, technology standards, […]

Cybersecurity planning keeps moving toward whole-of-society models Read More »

Why incident response breaks down when it matters most

breach, cybersecurity, Don't miss, Incident Response, News, NR Labs, tips, Video /

Why incident response breaks down when it matters most 2026-02-04 at 07:45 By Help Net Security In this Help Net Security video, Jon David, Managing Director, NR Labs, discusses why incident response often breaks down during a breach. Drawing on years of experience watching real attackers operate across many industries, he walks through what tends […]

Why incident response breaks down when it matters most Read More »

ShinyHunters flip the script on MFA in new data theft attacks

data theft, Don't miss, extortion, Google Cloud, Hot stuff, Mandiant, News, Silent Push, social engineering, SSO, tips, vishing /

ShinyHunters flip the script on MFA in new data theft attacks 2026-02-02 at 18:50 By Zeljka Zorz Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in […]

ShinyHunters flip the script on MFA in new data theft attacks Read More »

Where NSA zero trust guidance aligns with enterprise reality

AppOmni, CISO, cybersecurity, Government, how-to, News, NSA, strategy, tips, zero trust /

Where NSA zero trust guidance aligns with enterprise reality 2026-02-02 at 09:10 By Sinisa Markovic The NSA has published Phase One and Phase Two of its Zero Trust Implementation Guidelines, providing structured guidance for organizations working to implement zero trust cybersecurity practices. The documents are part of a larger series designed to support adoption of […]

Where NSA zero trust guidance aligns with enterprise reality Read More »

A practical take on cyber resilience for CISOs

CISO, cyber resilience, cyber risk, cybersecurity, Don't miss, News, strategy, tips, Video /

A practical take on cyber resilience for CISOs 2026-01-29 at 08:06 By Help Net Security In this Help Net Security video, Shebani Baweja, CISO for Consumer, Private, Wealth & Business Banking at Standard Chartered, explains how security leaders should think about cyber resilience. She outlines why preparation for extreme events matters as much as day […]

A practical take on cyber resilience for CISOs Read More »

A new framework helps banks sort urgent post-quantum crypto work from the rest

CISO, Encryption, EU, Europe, Europol, finance, financial industry, News, Post-Quantum, quantum computing, Risk Management, strategy, tips /

A new framework helps banks sort urgent post-quantum crypto work from the rest 2026-01-22 at 04:57 By Sinisa Markovic Financial institutions now have a concrete method for deciding where post-quantum cryptography belongs on their security roadmaps. New research coordinated by Europol sets out a scoring framework that helps banks rank systems and business use cases […]

A new framework helps banks sort urgent post-quantum crypto work from the rest Read More »

The NSA lays out the first steps for zero trust adoption

CISO, Don't miss, Government, how-to, News, NSA, strategy, tips, USA, zero trust /

The NSA lays out the first steps for zero trust adoption 2026-01-15 at 07:28 By Anamarija Pogorelec Security pros often say that zero trust sounds straightforward until they try to apply it across real systems, real users, and real data. Many organizations are still sorting out what they own, how access works, and where authority […]

The NSA lays out the first steps for zero trust adoption Read More »

Scroll to Top