Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!

Please turn on your JavaScript for this page to function normally.

Cybersecurity news

Google Chrome
AI takes on a bigger role in finding Chrome vulnerabilities
Microsoft Exchange
Laundry Bear’s new Microsoft Exchange attack triggers on email open (CVE-2026-42897)
Microsoft 365 phishing
Attackers are using Microsoft’s legitimate login system to camouflage phishing attacks
CISA
CISA sets a new SBOM baseline
Cisco
Cisco FMC static credentials exploited by attackers (CVE-2026-20316)
water critical infrastructure
Coordinated cyberattack hits more than 30 Minnesota water utilities
cost data breach
Data breach cost 2026 averaged $4.99 million, AI attacks ran higher
Ryan Dewhurst
200 new CVEs a day and no realistic way to patch them all
Top companies to visit at Black Hat USA 2026
Top companies to visit at Black Hat USA 2026
Impersonation protection: How to protect your executives when the truth isn’t clear
Product showcase: Dashlane Password Manager is more security toolkit than password vault
Exposed credentials are giving attackers a head start many organizations don’t see

Focus spotlight

critical infrastructure
The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

RESOURCES

Expert corner

Shadow AI is becoming enterprise security’s biggest blind spot
Dan Clarke President, Truyo
Shadow AI is becoming enterprise security’s biggest blind spot
The MDR renewal question: What changes when AI can handle the alerts
Augusto Barros Principal Product Manager, Prophet Security
The MDR renewal question: What changes when AI can handle the alerts
Why SBOMs, signing, and provenance still don’t tell you if software is safe
Ken Ammon CEO, CodeHunter
Why SBOMs, signing, and provenance still don’t tell you if software is safe
How to implement a continuous offensive security testing program
Sıla Özeren Hacıoğlu Security Research Engineer, Picus Security
How to implement a continuous offensive security testing program
How to prioritize AI agent security by business impact
Gal Nakash CPO, Reco.ai
How to prioritize AI agent security by business impact

Videos

Impersonation protection: How to protect your executives when the truth isn’t clear
Impersonation protection: How to protect your executives when the truth isn’t clear
What the identity attack surface looks like when trust becomes the target
What the identity attack surface looks like when trust becomes the target
More alerts are making your team slower, and an outcome-based SOC fixes that
More alerts are making your team slower, and an outcome-based SOC fixes that
The five step plan that cuts security budget waste
The five step plan that cuts security budget waste
Your vendor’s vendor might be the real breach risk
Your vendor’s vendor might be the real breach risk

Industry news

CISO focus

Latest resources
Cybersecurity news
Daily newsletter sent Monday-Friday
Weekly newsletter sent on Mondays
Editor's choice newsletter sent twice a month
Periodical newsletter released for important security events and breaking news
Weekly newsletter listing new cybersecurity job positions
Monthly newsletter focusing on open source cybersecurity tools