company
Help Net Security is an online trade publication covering cybersecurity news, research, product releases, and expert commentary for IT security professionals.
No evidence-backed relationships are recorded.
Huntress found legitimate remote management software abused in 45% of the endpoint incidents it logged in the first quarter of 2026. A rogue copy can behave like IT's approved one, so defenders have to know which tools are sanctioned and how each install arrived.
Reality
Sophos made CISO Advantage generally available, an agentic AI service that turns a security assessment into a ranked, costed fix list for leadership to fund. The pitch puts a vendor-ranked spending plan in front of boards, either directly or through MSPs that already act as a customer's stand-in security chief.
Reality
EU Cyber Resilience Act rules have required 24-hour ENISA warnings on exploited flaws in commercial container images since Sept. 11, 2026. Vendors of supported Kubernetes operators and Helm charts are on the same clock, well before the rest of the law is enforced in December 2027.
Reality
Detectify found 86% to 97% of open critical and high flaws on 1,293 customers' internet-facing systems had been exposed for more than 90 days. Its scanner confirmed each with a working attack request, so these are known, reachable flaws left to age.
Reality
Authorizer, a self-hosted open-source auth server, drops files a user may not see before an AI assistant's vector search scores them. Teams can run that check inside their own login server, though its limits on AI agents rest on the maintainers' word.
Reality
TASK#STOMP, a Windows backdoor researchers dissected, uploads a victim's business documents and then stays to copy each new or edited one. Loss from a single infection keeps growing until someone finds and removes it.
Reality
Eight bank CISOs asked who holds the keys and who is ever allowed to look. Anthropic's answer keeps misuse-detection data in the buyer's own storage account, which also makes triaging frontier-model abuse the buyer's payroll problem.
Reality
Job lures arrive by email, romance by social media, tech support by phone, across three months of one vendor's telemetry. The counts measure delivery; conversion, where the training math gets harder, isn't part of what's tracked.
Reality
Docker's new Cloud Sandboxes run AI agents unattended for hours in microVMs on Docker-hosted compute that scales from 1 to 16 vCPUs. Teams that adopt it move agent secrets and policy enforcement into Docker's cloud, on isolation claims that so far come only from Docker.
Reality
Sophos's Counter Threat Unit found the advertisement on August 24. The cheapest tier answered a direct request for a Python remote access trojan with source code, and the service runs on a local model no provider can patch.
Reality
Malwarebytes says the fake Avast renewal page it found aimed at Belgian users was noticeably more polished than most scam sites, with clean French copy, an Active status badge and a form that asks only for a name, an email address and a phone number.
Reality
Malwarebytes found no malware and no fake login form across the network, so the sites pass every check a user is trained to run, and the companies selling the annual plans stay anonymous.
Reality
Private AI Compute has erased all context at the end of each task. Google plans to keep per-user context in encrypted cloud storage instead, with the decryption keys held only on the user's own devices.
Reality
Canonical is merging two update cycles so that an Ubuntu kernel ships every week. Getting a CVE fix faster than that means running release candidates its certification testing has not yet cleared.
Reality
Honeywell asked 603 critical infrastructure leaders what they actually watch. The chillers, elevators and badge readers that keep the controllers alive mostly sit outside continuous view, and teams with thinner inventories reported longer outages.
Reality
Pew surveyed 10,548 adults from July 20 to Aug 9 and found the move against data centers in rural, urban and suburban areas alike and among both parties, while Texas issued a statewide moratorium in August.
Reality
Huntress found the same one-megabyte PIF in two customer environments, pulled down by a link that promised a PNG. Everything after it is the 2024 DarkMe chain, down to the rundll32 /sta GUID from that campaign.
Reality
Malwarebytes found a page promising 10,000 free months of Claude Max that skips the card and collects Google logins through a fake browser window loaded from a rented, actively maintained widget.
Reality
OpenAI's own benchmarks put GPT-6 Sol and Luna at half the list price and a fraction of a rival's cost per finished task. For defenders, the thing getting cheaper is autonomous tool calls into business systems.
Reality
The open-source layer from PrismorSec sits between Claude Code, Codex or Cursor and the shell, returning allow, warn or block on each call. Its own scoring puts the everyday preset at 31 percent coverage.
Reality
Security · September 22, 2026 · 1 publisher
Security · September 21, 2026 · 1 publisher
Security · September 21, 2026 · 1 publisher
Security · September 20, 2026 · 1 publisher
Security · September 20, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 16, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Security · September 13, 2026 · 1 publisher
Build · September 12, 2026 · 1 publisher
Security · September 11, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 9, 2026 · 1 publisher
Security · September 4, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 2, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 31, 2026 · 1 publisher
Security · August 29, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 26, 2026 · 1 publisher
Security · August 25, 2026 · 1 publisher
Security · August 25, 2026 · 1 publisher
Security · August 24, 2026 · 1 publisher
Security · August 24, 2026 · 1 publisher
Security · August 21, 2026 · 1 publisher