Help Net Security newsletters: Daily and weekly news, cybersecurity jobs, open source projects, breaking news – subscribe here!

Please turn on your JavaScript for this page to function normally.

Cybersecurity news

Cisco
Cisco IMC auth bypass vulnerability allows attackers to alter user passwords (CVE-2026-20093)
Windows
Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches
malware
Claude Code source leak exploited to spread malware
EU
Trivy supply chain attack enabled European Commission cloud breach
Microsoft Agent Governance Toolkit
Microsoft releases open-source toolkit to govern autonomous AI agents
mobile device
Which messaging app takes the most limited approach to permissions on Android?
send money
Click, wait, repeat: Digital trust erodes one login at a time
cloud
AWS, Wasabi, Cloudflare, and Backblaze go head-to-head in new cloud storage test
Infosec products of the month
New infosec products of the month: March 2026
Software supply chain hacks trigger wave of intrusions, data theft
DarkSword exploit forces Apple to loosen its patching policy
TrueConf zero-day vulnerability exploited to target government networks

Focus spotlight

identity
Why I’m done calling humans the weakest link

RESOURCES

Expert corner

Why I’m done calling humans the weakest link
Brian Honan CEO, BH Consulting
Why I’m done calling humans the weakest link
Why risk alone doesn’t get you to yes
Chuck Randolph Chief Strategy Officer, 360 Privacy
Why risk alone doesn’t get you to yes
Why workforce identity is still a vulnerability, and what to do about it
Mike Engle Chief Strategy Officer, 1Kosmos
Why workforce identity is still a vulnerability, and what to do about it
Why SOCs are moving toward autonomous security operations in 2026
Subo Guha SVP of Product Management, Stellar Cyber
Why SOCs are moving toward autonomous security operations in 2026
How AI is reshaping attack path analysis
Dan DeCloss Chief Customer & Brand Officer, PlexTrac
How AI is reshaping attack path analysis

Videos

Your customer passed authentication. So why are they sending money to a scammer?
Your customer passed authentication. So why are they sending money to a scammer?
The art of making technical risk make sense to executives
The art of making technical risk make sense to executives
Why your phishing simulations aren’t building a security culture
Why your phishing simulations aren’t building a security culture
Cloud misconfiguration has evolved and your controls haven’t
Cloud misconfiguration has evolved and your controls haven’t
What to do in the first 24 hours of a breach
What to do in the first 24 hours of a breach

Industry news

Latest resources

RSAC 2026
Cybersecurity news
Daily newsletter sent Monday-Friday
Weekly newsletter sent on Mondays
Editor's choice newsletter sent twice a month
Periodical newsletter released when there is breaking news
Weekly newsletter listing new cybersecurity job positions
Monthly newsletter focusing on open source cybersecurity tools