Help Net Security

Orion Security has raised $32 million in a Series A round led by Norwest Venture Partners, with participation from IBM and existing investors including PICO Venture Partners, Lama Partners, and others. The round comes less than a year after the company’s Seed financing and brings total funding since inception to $38 million. The funding will enable the company to accelerate development of its proprietary end-to-end architecture and specialized AI agents, while expanding go-to-market operations to … More →

The post Orion Security raises $32 million to build AI-powered data loss prevention solution appeared first on Help Net Security.

Global Threat Map is an open-source project offering security teams a live view of reported cyber activity across the globe, pulling together open data feeds into a single interactive map. It visualizes indicators such as malware distribution, phishing activity, and attack traffic by geographic region. Global threat maps have long been used by security vendors to illustrate attack volumes and regional trends. This project takes a different path by relying on open feeds and community-maintained … More →

The post Global Threat Map: Open-source real-time situational awareness platform appeared first on Help Net Security.

Security isn’t just a feature, it’s a foundation. As cyber threats grow more sophisticated and regulations tighten, developers are being asked to do more than just write clean code. They’re being asked to build software that’s secure by design throughout its lifetime. To help developers meet this challenge, the Center for Internet Security (CIS) and the Software Assurance Forum for Excellence in Code (SAFECode) released Secure by Design: A Guide to Assessing Software Security Practices. … More →

The post How Secure by Design helps developers build secure software appeared first on Help Net Security.

In this Help Net Security video, Jon David, Managing Director, NR Labs, discusses why incident response often breaks down during a breach. Drawing on years of experience watching real attackers operate across many industries, he walks through what tends to fail once pressure sets in. He explains how hesitation, poor escalation, and weak communication allow attackers to move faster than defenders. The discussion focuses on how trust, connectivity, and human behavior are often exploited more … More →

The post Why incident response breaks down when it matters most appeared first on Help Net Security.

Auto retailers see fraud as a regular part of selling and financing vehicles, something that shows up often enough to plan around, according to Experian. Income and identity fraud lead the list Most fraud problems start with the borrower. Income and employment misrepresentation rank as the most common issues. Fake pay stubs, altered bank statements, and inflated job details continue to surface during loan applications. Identity fraud follows closely behind. Respondents pointed to synthetic identity … More →

The post Auto finance fraud is costing dealers up to $20,000 per incident appeared first on Help Net Security.

Russian state-sponsored hackers Fancy Bear (aka APT 28) are exploiting CVE-2026-21509, a Microsoft Office vulnerability for which Microsoft released an emergency fix last week. The exploitation CVE-2026-21509 allows unauthorized attackers to bypass a security feature (OLE mitigations in Microsoft 365 and Microsoft Office) locally, by creating and tricking targets into opening booby-trapped Office files. On January 29, 2026 – three days after Microsoft released the aforementioned fix – Zscaler researchers flagged an email phishing campaign … More →

The post Russian hackers are exploiting recently patched Microsoft Office vulnerability (CVE-2026-21509) appeared first on Help Net Security.

Gremlin, the proactive reliability platform, launched Disaster Recovery Testing: a new product built to safely and efficiently test zone, region, and datacenter evacuations and failovers. These large-scale tests ensure businesses maintain digital resilience and business continuity when faced with cloud migrations, compliance concerns, and catastrophic events. There were multiple high-profile cloud outages in 2025, such as the AWS us-east-1 zone outage in October 2025 impacting 70,000 companies and incurring losses estimated at $581 million, that … More →

The post Gremlin launches Disaster Recovery Testing for zone, region, and datacenter failovers appeared first on Help Net Security.

Security teams everywhere are adopting AI. Yet manual work persists, workloads are rising, and burnout continues to climb. To understand what’s really changing, Tines surveyed 1,800+ security leaders and practitioners worldwide. The findings show where AI is delivering value, how security roles are evolving, the barriers holding teams back, and how to thrive in 2026. What’s in the report: Why security is gaining strategic influence, yet struggles to align with business goals How AI is … More →

The post Download: Tines Voice of Security 2026 report appeared first on Help Net Security.

Rapid7 researchers have attributed the recent hijacking of the Notepad++ update mechanism to Lotus Blossom (aka Billbug), a Chinese state-sponsored group known for targeting organizations in Southeast Asia for espionage purposes. On Wednesday, Kaspersky researchers shared the insights they’ve gleaned from their own telemetry: the attackers targeted individuals located in Vietnam, El Salvador and Australia; a government organization located in the Philippines; a financial organization located in El Salvador; and a Vietnamese IT service provider. … More →

The post Notepad++ supply chain attack: Researchers reveal details, IoCs, targets appeared first on Help Net Security.

Enterprise storage environments already run long qualification cycles as solid-state drive capacities rise and validation teams try to mirror production workloads. Preconditioning steps now consume days of lab time for a single device, especially in data centers supporting AI training, analytics, and large-scale databases. High-capacity enterprise SSDs now reach 256TB and higher. These capacities change how vendors and customers approach testing before deployment. Preconditioning places a drive into steady state so that performance and endurance … More →

The post Sandisk brings SPRandom to open source for large SSD testing appeared first on Help Net Security.

Mozilla will add a set of controls in Firefox that let users manage and block GenAI features in the desktop browser. The controls will be included in Firefox version 148 on February 24, 2026. “We believe choice is more important than ever as AI becomes a part of people’s browsing experiences. What matters to us is giving people control, no matter how they feel about AI,” Ajit Varma, Head of Firefox, said. Each of these … More →

The post Firefox to let users manage and block AI features appeared first on Help Net Security.

Snowflake announced advancements that make data AI-ready by design, enabling enterprises to rely on data that is continuously available, usable, and governed as AI transitions from experimentation into real-world production systems. With new enhancements to Snowflake Postgres, the database now runs natively in the AI Data Cloud, allowing enterprises to consolidate transactional, analytical, and AI use cases on a single, secure platform. To help ensure AI systems are trusted at enterprise scale, Snowflake is further … More →

The post Snowflake makes enterprise data AI-ready with native Postgres in its AI Data Cloud appeared first on Help Net Security.

OpenAI has launched the new Codex app for macOS, a dedicated workspace for managing multiple AI coding agents in parallel. The app is designed to help developers reduce repetitive work and focus on higher-level engineering tasks. Codex can write features, fix bugs, answer questions about a codebase, and propose pull requests for review. Each task runs in its own isolated environment that is preloaded with a user’s repository, giving Codex direct context from the start. … More →

The post OpenAI releases Codex macOS app for agent-based software development appeared first on Help Net Security.

Boards of Directors (BoDs) do three things exceptionally well when cyber is framed correctly. They set risk appetite, they allocate capital, and they demand evidence that the business can withstand disruption without losing momentum. Why cyber keeps becoming a board topic Boards typically address cybersecurity reactively. When material incidents occur, cyber becomes their top priority as disclosure requirements, customer impact, and financial exposure collapse into one event. For example, U.S. public companies are required by … More →

The post Why boards must prioritize non-human identity governance appeared first on Help Net Security.

Software development relies on a steady flow of third-party code, automated updates, and fast release cycles. That environment has made the software supply chain a routine point of entry for attackers, with malicious activity blending into normal build and deployment processes. A recent ReversingLabs study documents how these conditions played out across open source ecosystems during 2025, with attackers leaning on scale, trust, and automation to spread malware and harvest credentials. Share of 2025 open-source … More →

The post Open-source attacks move through normal development workflows appeared first on Help Net Security.

Online accounts usually rely on a password, but passwords alone can be weak if they’re reused, easily guessed, or stolen. Two-factor authentication (2FA) adds a second layer of verification, usually a six-digit code generated by an app on your phone. 2FAS Auth is a free, open-source two-factor authentication app that helps users securely log in to their accounts by verifying their identity. The app doesn’t require an account to use and is available as a … More →

The post Product showcase: 2FAS Auth – Free, open-source 2FA for iOS appeared first on Help Net Security.

Application Security Engineer Liebherr Group | Germany | Hybrid – View job details As an Application Security Engineer, you will As an Application Security Engineer, you will implement and automate application security testing, perform vulnerability assessments and penetration testing, and work closely with developers to remediate issues and enforce secure coding practices. You will monitor and respond to application security threats while maintaining security documentation and compliance requirements. Application Security Expert – Information Systems HCLTech … More →

The post Cybersecurity jobs available right now: February 3, 2026 appeared first on Help Net Security.

Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in these latest hacking spree are Panera Bread, SoundCloud, Match Group (owner of online dating services Tinder, Hinge, Match and OkCupid) and Crunchbase. There will likely be many more victims, as Silent Push researchers detected active targeting or … More →

The post ShinyHunters flip the script on MFA in new data theft attacks appeared first on Help Net Security.

Malwarebytes announced Malwarebytes in ChatGPT, a new way for individuals and small businesses to get fast, trusted security assistance directly within ChatGPT. Users can ask Malwarebytes to check whether something is a scam or spam, tapping into the company’s deep cybersecurity expertise and decades of threat intelligence. This initiative represents a step toward building user confidence in AI by pairing Malwarebytes’ expert threat intelligence with ChatGPT’s functionality. Scams aren’t a fringe issue – they’ve become … More →

The post Malwarebytes in ChatGPT delivers AI-powered protection against scams appeared first on Help Net Security.

Suspected Chinese state-sponsored attackers hijacked the Notepad++ update mechanism by compromising the software project’s shared hosting server and intercepting and redirecting update traffic destined for notepad-plus-plus.org, the software’s maintainer Don Ho confirmed on Monday. The attack timeline In early December 2025, security researcher Kevin Beaumont said that he knew of three organizations that have had security incidents traced back to Notepad++ processes providing the attackers initial access to the computers. “I’ve only talked to a … More →

The post How state-sponsored attackers hijacked Notepad++ updates appeared first on Help Net Security.