Help Net Security

Simbian adds AI threat hunting agent to expand autonomous SecOps platform

Industry News — Mon, 03 Aug 2026 11:02:50 +0000

Simbian has released its autonomous AI Threat Hunt Agent, that investigates potential threats and identifies malicious activity across enterprise environments. The Threat Hunt Agent represents the third pillar of Simbian’s AI-driven security suite. These three Agents eliminate blind spots across the entire threat timeline: The Present: The AI SOC Agent analyzes real-time alerts and neutralizes active threats as they happen. The Future: The AI Pentest Agent probes environments from an attacker’s perspective to uncover vulnerabilities … More →

The post Simbian adds AI threat hunting agent to expand autonomous SecOps platform appeared first on Help Net Security.

OpenAI reveals how criminals used ChatGPT to run scams

Anamarija Pogorelec — Mon, 03 Aug 2026 08:40:26 +0000

OpenAI banned a coordinated network of ChatGPT accounts that likely originated in Cambodia’s Preah Sihanouk province, a region reports have linked to online scam compounds and human trafficking operations. The network used the company’s models to create and manage fake online personas, generate and translate messages sent to scam targets, produce promotional content for fraudulent schemes, and support daily operations. Earlier this year, a lead from WhatsApp prompted OpenAI to investigate and disrupt a Cambodia-based … More →

The post OpenAI reveals how criminals used ChatGPT to run scams appeared first on Help Net Security.

Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support

Mirko Zorz — Mon, 03 Aug 2026 08:31:10 +0000

Attackers reaching for kernel access on a Windows machine bring a driver Microsoft already trusts. It is signed, it loads, and it carries a known flaw. That flaw gives them enough room to tamper with memory or disable the security software watching the host. Once an attacker holds that level of access, the tools on the machine stop reliably protecting it. Ransomware crews run the technique as a step before they deploy a payload, a … More →

The post Elastic Defend now covers 800+ vulnerable drivers, with automated troubleshooting and ARM support appeared first on Help Net Security.

Mapping the malware blast radius a single alert won’t show you

Mirko Zorz — Mon, 03 Aug 2026 06:00:24 +0000

In this interview with Help Net Security, Mike Wiacek, founder and CTO of Stairwell, explains Backstory, an AI agent that takes a single alert and works outward to map how far a malware campaign spread. He walks through the research behind the claim that each published sample hides an average of 2.4 undocumented variants, describes what counts as a related variant, and explains why Stairwell keeps every executable that runs on customer endpoints. Stairwell has … More →

The post Mapping the malware blast radius a single alert won’t show you appeared first on Help Net Security.

SkillSpector: NVIDIA’s open-source security scanner for AI agent skills

Anamarija Pogorelec — Mon, 03 Aug 2026 05:30:57 +0000

SkillSpector is an open-source scanner from NVIDIA that reads an agent skill and tells you whether to install it. Point it at a directory, a zip file, a single SKILL.md, or a Git URL, and it returns a list of findings, a risk score, and recommendations. The folder it reads runs with everything you have. A skill is Markdown instructing the agent, sometimes with a Python script beside it that reaches the shell, the environment … More →

The post SkillSpector: NVIDIA’s open-source security scanner for AI agent skills appeared first on Help Net Security.

AI cut phishing from hours to seconds, which is where DMARC and BIMI come in

Help Net Security — Mon, 03 Aug 2026 05:00:38 +0000

In this Help Net Security video, Mike Boyle, VP of Business Units at GMO GlobalSign, and Rahul Powar, CEO and founder of Red Sift, unpack the evolution of email security and why it matters for business trust. With a combined 45+ years worth of experience in tech, they dissect email from the very beginning, before SPF, spam filtering and DMARC, up to today’s modern security standards. The reveal why most organizations are still struggling with … More →

The post AI cut phishing from hours to seconds, which is where DMARC and BIMI come in appeared first on Help Net Security.

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan

Anamarija Pogorelec — Mon, 03 Aug 2026 04:30:11 +0000

Guardio Mobile Security brings several protection features to iPhone and Android, allowing users to monitor exposed personal information, identify phishing attempts, and receive alerts about emerging threats from a single application. It is available on smartphones and tablets, while browser extensions support Chrome and Microsoft Edge on laptops and desktop computers. After signing in or creating an account, users are guided through the onboarding process, which introduces the app’s security features and begins an initial … More →

The post Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan appeared first on Help Net Security.

Buying TikTok followers can expose users to scams and account theft

Anamarija Pogorelec — Mon, 03 Aug 2026 04:00:04 +0000

Buying TikTok followers, likes, or views could do more than inflate engagement metrics. According to Malwarebytes, many services selling social media growth operate through deceptive practices that can expose customers to scams, stolen accounts, and financial loss. The market for artificial social media engagement also creates security risks for both buyers and other platform users. Behind the promises of instant engagement Websites selling bulk engagement present themselves as legitimate marketing companies, offering likes, comments, followers, … More →

The post Buying TikTok followers can expose users to scams and account theft appeared first on Help Net Security.

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net Security — Sun, 02 Aug 2026 08:00:17 +0000

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Nono: Open-source sandbox for AI agents AI coding agents run with the same permissions as their users, meaning they can access sensitive files, credentials, and production systems. A prompt injection, hallucinated command, or simple mistake can quickly turn that access into a security incident. To reduce the risk, Luke Hinds and Stephen Parkinson co-founded nolabs and released Nono, an open-source … More →

The post Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released appeared first on Help Net Security.

Cybercrime goes subscription: AI, malware and infrastructure on demand

Anamarija Pogorelec — Fri, 31 Jul 2026 13:00:02 +0000

Cybercrime has become a commercialized ecosystem where criminals can buy or rent nearly every capability needed to launch sophisticated attacks. These services provide anonymity, plausible deniability, and access to short-lived infrastructure that is difficult to detect, attribute, and disrupt, enabling low-skilled actors to operate at scale, according to the Infoblox 2026 Threat Landscape Report. “Cybercrime is becoming more efficient, automated, and harder to stop. Driven by economics and fueled in part by frontier AI, it … More →

The post Cybercrime goes subscription: AI, malware and infrastructure on demand appeared first on Help Net Security.