Help Net Security
November 2026 Patch Tuesday forecast: Old software continues to bite
How did you enjoy October 2026 Patch Tuesday? Were there enough CVEs reported to keep you busy for the rest of the year or are you finished and ready for another round next …
Live Q&A: CISSP exam prep with ISC2 experts
Join ISC2 on November 6, 2026 at 7:00pm CET for a live Q&A about the CISSP exam. A panel of experts will answer your questions, explain what it takes to earn the …
Secure your containers without breaking what works
Container security has a familiar problem. Teams identify vulnerabilities, but turning those findings into lower risk is much harder. A standard container image may include …
Novee puts forgotten internet-facing assets through penetration testing
Novee’s External Surface Testing is a new capability in its AI penetration testing platform that helps security teams discover internet-facing assets and validate exploitable …
Opal’s agent.ID virtual event: Top security leaders on governing Al agents
Opal Security will host agent.ID, a free virtual event focused on adapting identity and access management (IAM) to AI agents, on November 5, 2026. The event will bring …
Product showcase: Sweet Virtual Patching stops HTTP2Shell while fixes catch up
HTTP2Shell (CVE-2026-111497), the critical Brotli bug first known as Node2Shell, is a remote code execution flaw in the compression library inside Node.js, Bun, Envoy, Python …
Week in review: Binance hit by $6.3 billion theft, impact of Brotli vulnerability
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: r/opensource bans AI projects, and solo devs go down with them Moderators of …
What exactly is ISOC? And what does it mean for you?
Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly …
I underestimated how fast security teams would trust AI to act in the SOC
For most of my career, I have watched new security platforms work through enterprise programs at a slow pace, so when AI began showing up in security operations tools, I …
LLM agent security needs more than guardrails
Madhu Shashanka, Chief Scientist at Concentric AI, explains why securing LLM tools and agents depends more on your data than on the model. Controls on model behavior, such as …
Product showcase: Stellar Cyber’s ISOC platform provides full-cycle architecture
An AI SOC that starts with somebody else’s alert is already too late. Stellar Cyber collects and normalizes telemetry, detects suspicious activity, correlates evidence, …
Week in review: PHP vulnerabilities patched, exploited Palo Alto GlobalProtect VPN flaw
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: A critical PHP security release is coming today, so get ready to update! The …
Featured news
Resources
Don't miss
- OpenSSH flaw exploited in the wild just hours after disclosure (CVE-2026-123158)
- Residential proxy traffic caught leaving the White House network
- US agencies warn attackers are targeting refrigeration systems that protect food and medicine
- November 2026 Patch Tuesday forecast: Old software continues to bite
- 87% say their AI controls need to work better