Help Net Security

Microsoft’s Windows 365 for Agents is a cloud platform that gives AI agents secure access to cloud PCs. It lets builders run copilots, agents, and automated workflows in Windows environments without managing infrastructure. The platform includes security, policy controls, scalability, and visibility so agents can browse websites, process data, and complete tasks inside a managed cloud PC. “Windows 365 is designed to support a broad spectrum of agent solutions, operating systems, and data access controls, … More →

The post Windows 365 for Agents brings managed cloud PCs to autonomous workflows appeared first on Help Net Security.

A coordinated international operation supported by Eurojust dismantled a fraudulent call centre operating from three offices and targeting citizens throughout Europe. Authorities arrested 11 suspects and seized more than €400,000 in cash. Initial investigations identified victims in Latvia and Lithuania who lost over €160,000, with more people believed to have fallen for the fake investment platform. According to the Eurojust statement, “During searches at 32 locations, authorities seized electronic equipment, documents, computers and SIM cards.” … More →

The post International operation dismantles fraud network, €400,000 seized appeared first on Help Net Security.

Support is ending for three Windows products released in 2016, with deadlines beginning in October 2026. Windows 10 Enterprise LTSB 2016 and Windows 10 IoT Enterprise 2016 LTSB will reach end of support on October 13, 2026, followed by Windows Server 2016 on January 12, 2027. Microsoft states that organizations still running these products will receive one final monthly security update on the listed dates. After that, the systems will stop receiving security patches, non-security … More →

The post Microsoft extends security patching for three Windows products at a price appeared first on Help Net Security.

Arctic Wolf has acquired Sevco Security, integrating Sevco’s cloud-native technology into the Arctic Wolf Aurora Platform. This integration unifies asset intelligence, vulnerability context, and security control coverage to give organizations a continuous, consolidated view of exposures across hybrid environments and enables faster, more precise identification, prioritization, and remediation of risk. Organizations seeking to move from reactive defense to a more proactive security posture increasingly view exposure management as a critical capability. Security teams cannot get … More →

The post Arctic Wolf acquires Sevco Security to advance proactive exposure management appeared first on Help Net Security.

Underground forums include long threads about chatbots drafting phishing emails, generating code snippets, and coaching social engineering calls. A new study examined conversations captured between January 1, 2025 and July 31, 2025 across dozens of cybercrime forums to map how AI tools are entering day to day criminal operations. The dataset includes 163 discussion threads drawn from 21 forums, totaling 2,264 messages posted by 1,661 distinct contributors. Much of the activity clustered on well known … More →

The post AI is becoming part of everyday criminal workflows appeared first on Help Net Security.

The modern security operations center faces a crisis of scale that human effort cannot fix. With alert volumes exponentially growing and threat actors automating their attacks, organizations must pivot to autonomous SOC strategies. This shift to AI-driven defense is the only way to survive the operational realities of 2026. The mathematical impossibility of legacy defense We need to be honest about the state of the traditional SOC. It is failing. It is not failing because … More →

The post Why SOCs are moving toward autonomous security operations in 2026 appeared first on Help Net Security.

Enterprise AI agents are embedded in routine business processes, particularly inside engineering and IT operations. Many organizations report active production deployments, and agent development ranks high on strategic agendas. A new study from Docker, The State of Agentic AI Report, examines how enterprises are deploying agentic systems and the challenges emerging as deployments scale. The data shows that 60% of organizations run AI agents in production environments. Nearly all describe building agents as a strategic … More →

The post Security and complexity slow the next phase of enterprise AI agent adoption appeared first on Help Net Security.

In this Help Net Security video, Jen Sovada, General Manager, Public Sector at Claroty, explains CISA’s Binding Operational Directive 26-02 and what it means for federal agencies. The directive requires agencies to inventory, report, decommission, and replace unsupported edge devices such as firewalls, routers, switches, load balancers, and wireless access points. Unsupported devices don’t receive security updates. This makes them high risk entry points for attackers. Agencies must identify these devices within three months and … More →

The post Binding Operational Directive 26-02 sets deadlines for edge device replacement appeared first on Help Net Security.

Application Security Engineer Anthropic | USA | On-site – View job details As an Application Security Engineer, you will secure AI products and internal tools by embedding security into the SDLC, conducting design reviews and threat modeling, and scaling secure code review practices. You will also lead vulnerability management efforts, building automation and prioritization workflows to drive effective remediation at scale. Cloud Security Engineer Matillion | United Kingdom | Remote – View job details As … More →

The post Cybersecurity jobs available right now: February 24, 2026 appeared first on Help Net Security.

A new malware delivery campaign has hit ClawHub, the official online repository for “skills” that augment the capabilities of the popular OpenClaw AI agent. Unlike previous ones, this campaign does not aim to trick users into downloading a bogus, malicious skill. Instead, the threat actor is leaving this particular comment on popular legitimate skills published by others: The malicious troubleshooting comment “At first glance, this appears to be a troubleshooting suggestion. It is not. It … More →

The post Fake troubleshooting tip on ClawHub leads to infostealer infection appeared first on Help Net Security.

Spanish police (Guardia Civil) arrested four members of the hacktivist group Anonymous Fénix over DDoS attacks targeting ministries, political parties and public institutions. Police raid (Source: Guardia Civil) Police identified the organization’s leadership, including its administrator and moderator, who were arrested in May 2025 in Alcalá de Henares (Madrid) and Oviedo (Asturias). Evidence gathered during that phase of the investigation led authorities to two additional suspects described as the most active members. They were detained … More →

The post Spanish police arrest suspected Anonymous members over DDoS attacks on government sites appeared first on Help Net Security.

Lenovo expanded its ThinkEdge portfolio with a new generation of AI-driven edge computing solutions, including the compact and reliable ThinkEdge SE10n Gen 2, the AI-ready ThinkEdge SE30n Gen 2, the AI-powerhouse ThinkEdge SE60n Gen 2, and Lenovo’s first industrial all-in-one (AIO) Panel PC, the ThinkEdge SE50a. As enterprises push intelligence closer to operations to improve resilience, reduce latency, and keep sensitive data local, edge computing has become a critical layer between devices, infrastructure, and cloud. … More →

The post Lenovo adds new AI-driven edge systems to ThinkEdge portfolio appeared first on Help Net Security.

Japanese tech testing company Advantest has suffered a ransomware attack, the company confirmed last Thursday, after detecting unusual activity within its IT environment on February 15, 2026. What happened? Tokyo-based Advantest is a leading manufacturer of automatic test and measurement equipment used in the design and production of semiconductors that used in computers, electronic devices (including mobile phones), autonomous vehicles, and systems used in high-performance computing (e.g., artificial intelligence systems). The company has facilities in … More →

The post Japanese chip-testing toolmaker Advantest suffers ransomware attack appeared first on Help Net Security.

Meta has released WhatsApp Beta for Android 2.26.7.8 through the Google Play Beta Program. The update includes references to password-protected accounts, indicating plans to introduce an additional layer of protection beyond the app’s current authentication options. WhatsApp is exploring the implementation of a feature that will introduce a password (Source: WABetaInfo) The feature will allow users to create an alphanumeric password between six and 20 characters in settings, with at least one letter and one … More →

The post WhatsApp is adding another lock to your account appeared first on Help Net Security.

Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group that used phishing to seize Facebook accounts and extract BLIK payment codes from victims. Arrest (Source: Poland’s Central Bureau for Combating Cybercrime) Eleven members of an organized criminal group operating in Poland and Germany between May 2022 and May 2024 were identified. Six suspects were placed in pretrial detention as part of the investigation. “Over 100,000 logins and passwords for the aforementioned … More →

The post Police seize 100,000 stolen Facebook credentials in cybercrime raid appeared first on Help Net Security.

Samsung will add Perplexity to its upcoming Galaxy S26 devices as part of its Galaxy AI multi-agent ecosystem expansion. The company is expected to officially unveil the new Galaxy S26 lineup at its Galaxy Unpacked event on February 25, 2026. Users will be able to access Perplexity through quick-access controls, such as pressing and holding the side button, or by using the voice wake phrase “Hey, Plex.” Perplexity’s AI agent will be embedded across several … More →

The post Perplexity AI lands on Samsung’s next Galaxy lineup appeared first on Help Net Security.

Anthropic brings Claude Code Security to Claude Code on the web through a limited research preview. Claude Code Security (Source: Anthropic) Claude Code Security analyzes code context, traces data flows between files, and flags multi-component vulnerability patterns that existing scanners often miss. Each finding undergoes an adversarial verification pass that re-examines results before they are presented, increasing the share of valid findings and reducing false positives. The system identifies issues and suggests fixes, providing a … More →

The post Claude Code scans, verifies, and patches code vulnerabilities appeared first on Help Net Security.

In this Help Net Security interview, Rich Kellen, VP, CISO at IFF, explains why security teams should not treat OT labs like IT environments. He discusses how compromise can damage scientific integrity and create safety risks that backups cannot fix. Kellen also outlines what “good enough” OT visibility looks like, why compensating controls can backfire, and how partnering with scientists improves security outcomes. Where do security teams make the most dangerous false equivalencies between OT … More →

The post The hidden security cost of treating labs like data centers appeared first on Help Net Security.

AI assistants are tied into ticketing systems, source code repositories, chat platforms, and cloud dashboards across many enterprises. In some environments, these systems can open pull requests, query internal databases, book services, and trigger automated workflows with limited human involvement. The State of AI Security 2026 from Cisco places this level of access inside a growing pattern of AI-driven operations that connect directly to core business systems. Organizations granted agentic systems authority to execute tasks, … More →

The post Enterprises are racing to secure agentic AI deployments appeared first on Help Net Security.

Coroot is an open-source observability and application performance monitoring tool. The core software, published in Go and accompanied by companion repositories such as coroot-node-agent, focuses on collecting telemetry data across systems. It uses extended Berkeley Packet Filter (eBPF) technology to gather metrics and trace inter-service communications without manual instrumentation of application code. Coroot collects standard observability signals that engineering teams rely on. The software aggregates metrics, logs, traces, and continuous profiling data and makes them … More →

The post Coroot: Open-source observability and APM tool appeared first on Help Net Security.