Rubrik has announced cyber recovery capabilities for DevOps platforms Microsoft Azure DevOps and GitHub. With built-in anomaly detection, blast radius…
Category: Help Net Security
Microsoft researchers demonstrate hidden backdoor technique for AI agents
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command…
Ubuntu certificate revocation checks arrive in curl, OpenSSL is next
Ubuntu 26.10 ships curl with certificate revocation checking built in. The check comes from upki, a project from the rustls developers. Ubuntu’s…
Red Hat OpenShift 5 brings autonomous troubleshooting to hybrid clouds
Red Hat has announced the general availability of Red Hat OpenShift 5, bringing built-in operational intelligence, zero trust security and a longer,…
Fingerprint trains specialized models to detect distinct fraud types
Fingerprint has launched Fraud Score, a predictive fraud signal trained directly on customers’ own fraud outcomes and powered by Fingerprint’s device…
Orca Security adds visibility into AI-generated code and agent risks
Orca Security has announced new capabilities to help organizations discover and secure AI-generated applications and autonomous agents across their cloud…
Druva helps restore AI agents without rolling back entire environments
Druva has announced Druva Agent Recovery, a new set of AI Resilience capabilities that keep the business running by quickly restoring AI agents when they…
Obsidian expands AI agent security with runtime policy enforcement
Obsidian Security has announced its Runtime Policy Decision Engine, giving security teams centralized control over AI agent actions before they run.…
The Cyber Resilience Act clock doesn’t stop for weekends
In this Help Net Security interview, Aurimas Bakas, CEO of Copla, talks about what the EU Cyber Resilience Act‘s reporting duties mean for manufacturers.…
A CISO’s guide to trimming waste from a flat security budget
In this Help Net Security video, Ken Leeser, CISO at Y Meadows, explains how security leaders can get more protection out of a flat budget. He argues a…
EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch
Forty-five percent of surveyed IT service management providers in the EU took more than three months to apply critical patches to critical systems,…
Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed
Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them,…
Google Fi super network leans on encryption to keep hotspot traffic private
Google Fi now moves customers’ phones onto Wi-Fi hotspots and between two 5G networks without the user going into settings or logging in. Google calls the…
An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones
Criminals are using leaked exploit kits to break into vulnerable iPhones, according to iVerify’s 2026 Advanced Mobile Threat Report. Attacks delivered…
Firefox free VPN drops its 50GB launch cap until January 31
Mozilla has removed the data limit on the free VPN built into Firefox. Firefox users in supported regions get unlimited browsing on desktop and Android…
X.Org patches eight server vulnerabilities a month after fixing 12 others
X.Org has fixed eight vulnerabilities in the X.Org X server and Xwayland, including one in the Xorg server that lets a malicious monitor corrupt its…
AI reverse engineering let researchers add a new feature to Slack
Intezer researchers used AI agents to rebuild source code for Slack, Apple’s Finder and a TinyTurla-NG sample, from a backdoor family Cisco Talos…
Dreeze raises $33 million to automate recovery of entire cloud applications
Dreeze emerged from stealth with $33 million in seed funding and announced the general availability of its Application Revival platform for Amazon Web…
CISA tweaks cyber incident form to spot attacks that might be linked
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has updated its online incident reporting form to help analysts spot when attacks on…
IRISSCON 2026 puts preparedness for cyberattacks and hybrid threats in focus
Ireland risks being dangerously unprepared for increasingly sophisticated cyberattacks and hybrid threats unless the Government acts urgently to…