Help Net Security

78% of organizations were hit by an email breach in the past 12 months, according to the Email Security Breach Report 2025 by Barracuda. Phishing, impersonation, and account takeover continue to drive incidents that often lead to ransomware and data loss. Breaches are widespread and interconnected Phishing and spear phishing were the most common breach types, followed by business email compromise and account takeover. These attacks often overlap. A single phishing email can expose credentials … More →

The post Email breaches are the silent killers of business growth appeared first on Help Net Security.

SUSE has released SUSE Linux Enterprise Server (SLES) 16, calling it AI-ready and built for long-term use. The release marks the first major update in the Enterprise Server line in more than five years and signals a new direction for how Linux might integrate with AI tools in the future. A Linux built for the next decade SLES 16 is the company’s first release built on its new Adaptable Linux Platform. It’s designed for the … More →

The post SUSE Linux Enterprise Server 16 puts AI in the operating system appeared first on Help Net Security.

ZEST Security announced its free remediation risk assessment. The industry is overflowing with tools to identify vulnerabilities, but these tools all fail to provide context that has real operational impact. ZEST is bridging that gap by offering curated remediation pathways for security teams to address the most critical issues. ZEST’s remediation assessment leverages AI to analyze vulnerabilities in organizations’ environments. Rather than just providing a list of vulnerabilities, the assessment generates a full, comprehensive report. … More →

The post ZEST Security launches free AI-based remediation risk assessment for security teams appeared first on Help Net Security.

OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come in two sizes: gpt-oss-safeguard-120b and gpt-oss-safeguard-20b. Both are fine-tuned versions of the gpt-oss open models and available under the Apache 2.0 license, allowing anyone to use, modify, and deploy them freely. OpenAI developed the models in collaboration with Discord, SafetyKit, and Robust Open Online Safety Tools (ROOST). What these models do gpt-oss-safeguard uses reasoning to … More →

The post OpenAI’s gpt-oss-safeguard enables developers to build safer AI appeared first on Help Net Security.

Sanctions are one of the tools Western governments use when they want to hit back at state-sponsored cyber threat actors. But do they actually work? That’s the question a group of current and former cybersecurity officials, analysts, and researchers tackled at the Royal United Services Institute (RUSI), a London-based think tank focused on defense and security. Their findings suggest that while sanctions won’t stop cyberattacks altogether, they can make them slower, riskier, and more expensive … More →

The post Sanctions won’t stop cyberattacks, but they can still “bite” appeared first on Help Net Security.

Fortra announced the launch of its new Data Security Posture Management (DSPM) solution to enable organizations to discover, classify, and protect sensitive data across their hybrid cloud. Fortra DSPM strengthens the company’s security portfolio by helping enterprises maintain visibility and control over their data. As organizations embrace hybrid cloud architectures, sensitive data continues to proliferate across countless shadow repositories, applications, and environments. The threat landscape demands that businesses not only know where their critical data … More →

The post Fortra DSPM helps organizations protect sensitive data across hybrid cloud appeared first on Help Net Security.

Commvault introduced Data Rooms, a secure environment that enables enterprises to safely connect their trusted backup data to the AI platforms they rely on, or to their own AI initiatives, such as internal data lakes. By combining governed, self-service access with built-in classification and compliance controls, Data Rooms bridges the gap between data protection and data activation, helping organizations transform backup data into AI-ready assets without adding new risk or complexity. As enterprises accelerate AI … More →

The post Commvault introduces Data Rooms to securely connect backup data with AI platforms appeared first on Help Net Security.

Sweet Security announced an extension of its Runtime CNAPP sensor to include Windows environments. With this launch, organizations can secure Windows workloads and applications in the cloud. The new capability brings the same visibility, real-time detection, risk prioritization, and automated investigation that power Sweet’s Runtime CNAPP for Linux to one of the most complex and widely used operating systems in the enterprise cloud. Protecting cloud workloads running on the Windows operating system has long been … More →

The post Sweet Security brings Runtime CNAPP visibility and protection to Windows environments appeared first on Help Net Security.

Rapid7 announced AI-generated risk intelligence as part of the Rapid7 Command Platform. Delivered through Remediation Hub, the new capability accelerates remediation by giving security teams a contextual, and actionable view of each exposure, transforming vulnerability data into risk intelligence informed decisions that help teams to prioritize remediation, and communicate and collaborate with internal teams to drive measurable risk reduction. In addition, Rapid7 added new vulnerability intelligence capabilities to Intelligence Hub, the company’s integrated threat intelligence … More →

The post Rapid7 strengthens security with AI-powered risk and vulnerability insights appeared first on Help Net Security.

Trellix announced Trellix Helix is now integrated with Trellix Hyperautomation, a no-code, drag-and-drop workflow builder that automates security processes. Trellix Helix provides customers with AI-powered context across all threat vectors and security tools in their environment for increased visibility, faster threat response, and faster remediation. The integration between Helix and Hyperautomation enables SOC teams to automate investigation and response workflows, driving operational efficiency for security teams. The increasing adoption of AI by threat actors is … More →

The post Trellix unveils Helix integration with Hyperautomation to streamline SOC operations appeared first on Help Net Security.

Zscaler unveiled new Zscaler Digital Experience (ZDX) innovations that help enterprises monitor and fix performance issues faster, achieving real-time insights across the internet and endpoint, cutting issue detection by 98%, and resolving issues in minutes to strengthen SLAs and minimize downtime. These enhancements deliver visibility that helps to ensure a seamless zero trust experience and optimal productivity for users everywhere. Troubleshooting user issues is complex; isolating the device, network, or application is challenging. Siloed teams … More →

The post New Zscaler ZDX features strengthen zero trust and streamline performance monitoring appeared first on Help Net Security.

Acronis announced the launch of Acronis Cyber Protect Local, a solution that delivers natively integrated cyber resilience for on-premises, sovereign private cloud, and air-gapped IT and OT environments. Designed for organizations where cloud deployment is not an option, the solution combines backup, recovery, cybersecurity, and endpoint management in a single platform, enabling agile, resilient, and compliant IT and OT operations while reducing costs and operational complexity. Acronis Cyber Protect Local keeps the data securely within … More →

The post Acronis Cyber Protect Local brings unified cyber protection to cloud-restricted environments appeared first on Help Net Security.

The Python Software Foundation (PSF) has rejected a $1.5 million government grant due to restrictive conditions that would force the foundation to betray its mission and its community, the programming non-profit announced on Monday. “In January 2025, the PSF submitted a proposal to the US government National Science Foundation [NSF] under the Safety, Security, and Privacy of Open Source Ecosystems program to address structural vulnerabilities in Python and PyPI,” Loren Crary, PSF’s deputy executive director … More →

The post Python Foundation rejects US government grant earmarked for security improvements appeared first on Help Net Security.

Socure unveiled an expanded RiskOS AI Suite of solutions featuring six breakthrough AI agents and assistants that substantially elevate the speed, intelligence, and precision of enterprise identity, compliance, and authentication operations. The investments Socure is making in AI position RiskOS as the new benchmark and standard for identity and risk decisioning. Arriving less than eight months after Socure’s acquisition of Effectiv and the General Availability release of RiskOS, the new RiskOS AI Suite signifies the … More →

The post Socure enhances RiskOS AI Suite with AI agents to transform identity, compliance, and risk decisioning appeared first on Help Net Security.

Arctera announced new AI-powered features in Arctera InfoScale that enable organizations to identify and respond to ransomware indicators in real time. By learning behavioral patterns across applications, storage and infrastructure, Arctera InfoScale is now able to instantly recognize the traits of a successful ransomware breach as soon as it happens, automatically triggering responses to contain the impact of an attack. “For many organizations today, anomaly detection has been limited. Focusing only on protection data will … More →

The post Arctera InfoScale gains AI capabilities to identify and contain ransomware attacks appeared first on Help Net Security.

Palo Alto Networks announced Prisma AIRS 2.0, a major platform upgrade that completes the native integration of recently acquired Protect AI to deliver a comprehensive AI security platform. This release directly confronts a critical enterprise challenge: 78% of organizations are transforming with AI, but only a staggering 6% have the guardrails to do so securely. Prisma AIRS 2.0 meets this demand by providing customers with end-to-end protection across the entire AI application lifecycle, securing everything … More →

The post Palo Alto Networks launches Prisma AIRS 2.0 to deliver end-to-end security across the AI lifecycle appeared first on Help Net Security.

Privado.ai released several new capabilities to automate privacy assessments and data maps for privacy teams amid growing privacy enforcement for non-compliant personal data sharing. Leveraging AI agents to reason and take action, Privado.ai’s new Agentic Assessment solution populates 100% of privacy assessments by analyzing documentation. “Privacy teams typically must wait weeks for stakeholders to complete privacy assessment questionnaires, causing project delays or privacy reviews to be skipped altogether. With Agentic Assessments, stakeholders can populate entire … More →

The post Privado.ai introduces AI agents to automate privacy assessments and real-time data mapping appeared first on Help Net Security.

Trulioo announced product enhancements designed to build trust at every stage of the digital journey, from initial verification and payment processing to ongoing compliance monitoring and risk assessment. The latest innovations, delivered across the Trulioo identity platform, provide transparency, fraud defenses and streamlined experiences for businesses and people. Trulioo is expanding its role as the global standard for digital trust with enhanced biometric authentication and dynamic Know Your Business (KYB) intelligence. Advanced document verification Advanced … More →

The post Trulioo expands identity platform to strengthen fraud prevention and streamline compliance appeared first on Help Net Security.

When a company deploys an AI agent that can search the web and access internal documents, most teams assume the agent is simply working as intended. New research shows how that same setup can be used to quietly pull sensitive data out of an organization. The attack does not require direct manipulation of the model. Instead, it takes advantage of what the model is allowed to see during an ordinary task. The research comes from … More →

The post AI agents can leak company data through simple web searches appeared first on Help Net Security.

In this Help Net Security interview, Carl Scaffidi, CISO at VyStar Credit Union, discusses how credit unions are adapting to an evolving fraud landscape and strengthening payment security. As cybercriminals leverage social engineering and AI-driven tactics, Scaffidi explains how innovation in authentication, real-time monitoring, and member education can enhance security without sacrificing the member experience. Which fraud schemes, such as account takeover, card-not-present fraud, or synthetic identity fraud, are posing the biggest challenges for credit … More →

The post Early reporting helps credit unions stop fraudulent transfers faster appeared first on Help Net Security.