Help Net Security

Zen-AI-Pentest provides an open-source framework for scanning and exercising systems using a combination of autonomous agents and standard security utilities. The project aims to let users run an orchestrated sequence of reconnaissance, vulnerability scanning, exploitation, and reporting using AI guidance and industry tools like Nmap and Metasploit. It is written to support command line, API, and web interfaces. Multi-agent structure and integrated tools Zen-AI-Pentest organizes its functionality around a set of agents that handle discrete … More →

The post Zen-AI-Pentest: Open-source AI-powered penetration testing framework appeared first on Help Net Security.

PCAPdroid is a free, open-source Android app that allows inspection of network traffic. Installation is straightforward and does not require creating an account. To begin capturing traffic, a VPN request must be accepted, which allows the app to monitor network activity. Once permission is granted, tapping the play button starts PCAPdroid, which then runs in the background until stopped. Viewing connections The Connections tab displays active and past connections. For each entry, it shows which … More →

The post Product showcase: PCAPdroid analyzes Android app network activity appeared first on Help Net Security.

Most enterprises run security programs across sprawling environments that include mobile devices, SaaS applications, cloud infrastructure, and telecom networks. Spend control in these areas often sits outside the security organization, even when the operational consequences land directly on security teams. Tangoe’s 2026 Trends & Savings Recommendations Report connects these cost domains to recurring governance failures that create risk exposure across identity, endpoint management, and infrastructure visibility. The report focuses on IT expense management across three … More →

The post Security teams are paying for sprawl in more ways than one appeared first on Help Net Security.

Singapore’s four major telecommunications companies were hit by a coordinated cyber espionage campaign last year, the country’s Cyber Security Agency (CSA) has revealed. An advanced persistent threat group known as UNC3886 has probed deep into the networks of M1, SIMBA Telecom, Singtel, and StarHub, spurring Singapore’s security agencies to mount a large cyber defence operation. “Under Operation Cyber Guardian, the authorities worked closely with the telcos to limit UNC3886’s movement into the networks and ensure … More →

The post Singapore telcos breached in China-linked cyber espionage campaign appeared first on Help Net Security.

Microsoft is strengthening default protections in Windows through two security initiatives, Windows Baseline Security Mode and User Transparency and Consent. User Transparency and Consent User Transparency and Consent introduces a structured approach to how Windows presents security decisions to users. The operating system will prompt users when applications request access to sensitive resources such as files, cameras, or microphones, and when installers attempt to add additional software. Permission decisions are recorded so they can be … More →

The post Microsoft tightens Windows security with app transparency and user consent appeared first on Help Net Security.

Imprivata has introduced comprehensive new capabilities to enable the next generation of fast, frictionless, and passwordless access for frontline staff, knowledge workers, and all other enterprise users. Imprivata Enterprise Access Management (EAM) now offers context-aware passwordless authentication, identity verification, and AI-powered risk signaling and behavioral analytics, expanding the company’s solutions for seamless access to personal and shared-use devices and applications. Together, these capabilities provide a complete and integrated platform that enables faster, more secure access … More →

The post Imprivata delivers passwordless access to improve security, compliance, and productivity appeared first on Help Net Security.

Portnox has unveiled a major expansion of its zero trust network access (ZTNA) solution, extending credential-free access beyond web and on-premises applications to include enterprise console-based applications. Organizations can eliminate passwords and credentials from administrative access via Remote Desktop Protocol (RDP), Secure Shell (SSH), Virtual Network Computing (VNC), and Teletype Network (Telnet). This removes the attack vector responsible for 80% of data breaches while maintaining the frictionless user experience that has defined Portnox ZTNA. As … More →

The post Portnox expands ZTNA with passwordless access for RDP, SSH, and enterprise consoles appeared first on Help Net Security.

SpecterOps has announced BloodHound Scentry, a new service designed to help customers accelerate their APM practice and reduce identity risk. BloodHound Scentry combines the power of BloodHound Enterprise with SpecterOps tradecraft experts and practitioners to provide customers with tailored guidance for attack path remediation, advanced analysis for emerging threats, and privilege zone design to protect critical assets. The 2024 Verizon Data Breach Investigations Report found that around 80% of breaches involve compromised identity credentials, highlighting … More →

The post BloodHound Scentry helps organizations reduce identity risk and close attack paths appeared first on Help Net Security.

A trojanized version of the popular 7-Zip software is quietly turning home computers into residential proxy nodes, Malwarebytes warns. Spurred by a Reddit post in which a user complained about getting infected with malware after downloading 7-Zip from 7zip[.]com instead of the legitimate 7-zip.org, Malwarebytes researchers looked into the matter and found that the malicious installer functions as 7-zip, but also silently drops additional payloads onto the system. Further analysis showed the malware’s primary role … More →

The post Trojanized 7-Zip downloads turn home computers into proxy nodes appeared first on Help Net Security.

Armis has announced Armis Centrix for Application Security, which unifies application security across an organization’s software development lifecycle. The technology helps security teams secure code as a next-generation attack vector to fortify organizations’ defenses and protect against cyber threats. “To effectively manage risk, it’s essential to get to the root cause of the problem and weed it out,” said Nadir Izrael, CTO of Armis. “Code-based vulnerabilities are being embedded into organizational infrastructure, and AI-generated code … More →

The post Armis Centrix brings unified, AI-driven application security to the SDLC appeared first on Help Net Security.

Internet‑exposed and vulnerable SolarWinds Web Help Desk (WHD) instances are under attack by threat actors looking to gain an initial foothold into target organizations’ networks, Microsoft and Huntress researchers have warned. Once inside, the attackers are deploying legitimate remote access and digital forensics and incident response tools, using living-off-the-land techniques, setting up a reverse SSH shell, and stealing sensitive data. Attack details The initial access vector is known: SolarWinds WHD vulnerabilities. What’s unknown is which … More →

The post Unpatched SolarWinds WHD instances under active attack appeared first on Help Net Security.

DuckDuckGo has added voice chat to Duck.ai, allowing users to speak to an AI assistant while keeping audio private, unrecorded, and excluded from AI training. Voice chat is available in the DuckDuckGo browser and most third-party browsers, with support for Mozilla listed as coming soon. According to the company’s help page, “DuckDuckGo limits access to audio streams and voice data so they are available only to OpenAI, the model provider for voice chats, and only … More →

The post DuckDuckGo enables AI voice chat without saving voice data appeared first on Help Net Security.

Cybersecurity teams are overwhelmed with data and short on clarity, while adversaries use AI to move faster and operate at unprecedented scale. Most organizations collect enormous volumes of findings: vulnerabilities, misconfigurations, penetration test results, detection gaps, threat intelligence, and control assessments. Individually, these data points may be accurate, but they don’t always reflect the big picture. As attackers increasingly leverage AI to rapidly identify weaknesses and chain exploits, defenders must keep pace by leveraging AI … More →

The post How AI is reshaping attack path analysis appeared first on Help Net Security.

Discord users will soon see a change to how their accounts work. From early March 2026, access to some features will require age verification using an ID or a face scan. The changes follow earlier deployments in a small number of countries and will apply to both new and existing accounts. Under the updated model, accounts are placed into a teen-oriented experience unless the user confirms they are 18 or older. The change affects access … More →

The post Face scans and ID checks are coming to Discord appeared first on Help Net Security.

In this Help Net Security interview, Andrew Northern, Principal Security Researcher at Censys, explains why mentorship matters and what organizations risk losing when senior staff disengage. He argues that institutional memory and judgment under pressure are difficult to rebuild once they disappear. Northern also pushes back on the idea that mentoring makes someone replaceable, saying it can strengthen both the mentor and the team. He discusses how mentorship can tie directly to measurable security outcomes, … More →

The post What happens when cybersecurity knowledge walks out the door appeared first on Help Net Security.

In this Help Net Security video, Miguel Fornés, Governance and Compliance Manager at Surfshark, discusses how AI is changing social engineering attacks. He describes how tasks that once took weeks, such as research and targeting, are now automated and cheap. This shift has lowered the skills and cost needed to run scams and phishing campaigns. Attackers use AI agents to gather open source data and hold live conversations with victims without human help. Fornés also … More →

The post AI-driven scams are eroding trust in calls, messages, and meetings appeared first on Help Net Security.

Cloud Security Engineer KPMG | Israel | On-site – View job details As a Cloud Security Engineer, you will establish, secure, and support critical Azure cloud infrastructure, with a strong focus on sensitive and regulated environments. You will design and implement secure cloud architectures using infrastructure-as-code practices, maintain and operate cloud systems and servers, and use tools such as Terraform, Bicep, and ARM templates for automation and standardization. Cloud Security Researcher Pentera | Israel | … More →

The post Cybersecurity jobs available right now: February 10, 2026 appeared first on Help Net Security.

SmarterTools, the company behind the popular Microsoft Exchange alternative SmarterMail, has been breached by a ransomware-wielding group that leveraged a recently fixed vulnerability in that solution. How did the SmarterTools breach happen? Derek Curtis, the firm’s Chief Operating Officer, said that the breach happened on January 29, 2026. “Prior to the breach, we had approximately 30 servers/VMs with SmarterMail installed throughout our network. Unfortunately, we were unaware of one VM, set up by an employee, … More →

The post Ransomware group breached SmarterTools via flaw in its SmarterMail deployment appeared first on Help Net Security.

The European Commission’s mobile device management platform was hacked but the incident was swiftly contained and no compromise of mobile devices was detected, EU’s executive branch announced on Friday. The intrusion was detected on January 30, 2026, by CERT-EU, the cybersecurity team protecting all European Union institutions, bodies, and agencies. “The Commission’s swift response ensured the incident was contained and the system cleaned within 9 hours,” the EC stated, and added that the intrusion “may … More →

The post European Commission hit by cyberattackers targeting mobile management platform appeared first on Help Net Security.

The European Commission believes Meta breached EU competition rules by blocking other AI assistants from accessing and interacting with users on WhatsApp. The case centers on a change Meta announced on 15 October 2025 to the WhatsApp Business Solution Terms. The update effectively blocked third-party, general-purpose AI assistants from operating on WhatsApp. Since 15 January 2026, Meta AI has been the only AI assistant available on the app. The Commission plans to impose interim measures … More →

The post EU targets Meta over WhatsApp AI access restrictions appeared first on Help Net Security.