Everything Threat Times has reported about Help Net Security: 12 stories, newest first. Part of our Vulnerabilities coverage.
Researchers found that npm’s Trusted Publishing feature allowed attackers to publish malicious updates without stealing credentials by claiming abandoned repository names.
A review of current job postings highlights openings for CISOs, cloud threat hunters and application security specialists across global firms.
Devices lacking specific certificate rotations before mid-2027 could lose access to critical security patches and Windows Update services.
Devices must receive new digital certificates by mid-2027 to maintain access to Windows Update servers and critical security fixes.
Researchers found that AI-generated security fixes frequently pass crash checks but fail the specific tests written by project maintainers.
Google’s internal audit shows that local modifications and dependency repairs significantly increase the engineering hours required for open source maintenance.
Help Net Security reports that the FortiBleed vulnerability remains active while highlighting a healthcare fintech security interview.
High compliance costs for defense contractors highlight the need for automation to manage security controls and evidence collection.
Scammers impersonate brands to trick creators into handing over Google account credentials via fake verification platforms.
Help Net Security outlines the expectations for the upcoming monthly security update cycle following a record-breaking September.
While companies aim for autonomous operations, the majority insist on human oversight for AI-driven operational decisions, creating a significant implementation gap.
The PCI Security Standards Council has released advisory guidance on securing AI systems in payment environments, emphasizing human oversight for sensitive data.