How to use NIST and ISO frameworks to govern AI agents

Security leaders no longer need convincing that AI agents introduce risk. What’s missing is how to govern them once they move into production and begin operating autonomously across enterprise environments. AI agents already read sensitive documents, i… Continue reading How to use NIST and ISO frameworks to govern AI agents

Product showcase: Staying ahead of the threat horizon with Aunoo

Aunoo is an open strategic intelligence platform that uses AI agents to monitor intelligence sources, including for cybersecurity, to compile a daily briefing and alert on defined criteria. Each source is checked for credibility and quality before it i… Continue reading Product showcase: Staying ahead of the threat horizon with Aunoo

Cyber resilience metrics that drive action

In this Help Net Security video, Pete Bowers, COO at NormCyber, explains how organizations can build a cyber resilience metrics program that supports better decisions. He questions common ways of measuring resilience, such as risk registers, tool score… Continue reading Cyber resilience metrics that drive action

The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

The advent of AI-assisted vulnerability discovery and autonomous exploit development has brought about a new age in cybersecurity—one in which we can no longer rely on patching as a primary defense mechanism. Patching is, by definition, a reactive appr… Continue reading The architecture of subtraction: Why it’s time to erase the roads, not just map the traffic

When attacks spread too far: Lessons from real cyber attack case studies

In this Help Net Security video, Michael Adjei, Director, Systems Engineering at Illumio, explains three real world cyber attacks and what went wrong during detection. Adjei walks through a collaboration tool scam that copied Microsoft Teams, an identi… Continue reading When attacks spread too far: Lessons from real cyber attack case studies

Photos: Infosecurity Europe 2026

Infosecurity Europe 2026 is a cybersecurity event that took place from June 2 to 4 in London. Help Net Security was on-site and here’s a closer look at the conference. The featured vendors are: Microsoft, JupiterOne, Menlo Security, Cato Networks… Continue reading Photos: Infosecurity Europe 2026

June 2026 Patch Tuesday forecast: Where are the CVEs?

My forecast from last month was only partly right. After the Anthropic Mythos announcements and the deluge of newly discovered vulnerabilities from vendors like Mozilla, Microsoft’s updates were standard fare, 65 CVEs reported in Windows 11 and 58 in W… Continue reading June 2026 Patch Tuesday forecast: Where are the CVEs?

AI agent governance gets harder when agents outnumber your people

In this Help Net Security video, Amit Gautam, CTO at Abluva, explains the security risks that autonomous AI agents bring into enterprise environments. He opens with a real case: a reconciliation agent at a financial services firm had legitimate access … Continue reading AI agent governance gets harder when agents outnumber your people

The modern-day business can learn a lot about risk from this year’s mega events

Every year brings its share of global events, but 2026 is proving to be a banner year for mega-scale entertainment. The year got off to a roaring start with the Winter Olympics, and now anticipation is building for the fast-approaching FIFA World Cup. … Continue reading The modern-day business can learn a lot about risk from this year’s mega events