ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

Search: “attack simulation”

20 stories

Searchkeywordsmart Sortlatesthotimportancerelevance
DomainAllCyberAIWindow24h3d7d30dAllIn the wildImportant onlyShow duplicates
CategoryAllVulnerability 484Ransomware 322Malware 257Phishing & fraud 165Exploit / PoC 160Data breach 149Threat actor 124Policy & legal 92Industry 86AI safety & security 83Research 41AI research 15Advisory 13Tools 11
SeverityAllcritical 869high 438medium 489low 134info 89

What breach and attack simulation needs to become in the AI era

Picus argues calendar-driven BAS is obsolete as AI compresses exploit timelines, citing 338 million simulations showing 69% prevention and a flat 14% alert score.

In a vendor opinion piece, Picus Security contends that with over 130 CVEs disclosed daily, fewer than 0.5% patched upstream, and disclosure-to-weaponized-exploit timelines near 10 hours, scheduled breach and attack simulation no longer keeps pace. The Picus Blue Report 2026, aggregating 338 million production simulations, found average prevention effectiveness of 69%, 58% of attack actions captured in the SIEM, an unchanged 14% alert score, and detection rule failures driven by performance issues (49%) and silent log collection gaps (41%). Picus proposes agentic BAS as a closed loop—simulate, validate, fix, verify—with AI-built threats and humans at decision gates.

Help Net Security · 7d agoIndustry

Cybersecurity IR Workshop: The workshop you shouldn’t miss

Microsoft's DART team promotes a 2-3 day Cybersecurity Incident Response Readiness Workshop that stress-tests IR plans against simulated attacks.

Microsoft's Detection and Response Team (DART), which delivers Defender Experts incident response and has supported organizations across 54 countries, is offering its Cybersecurity Incident Response Readiness Workshop. The scenario-driven engagement exercises detection, investigation, containment, and decision-making across identity, endpoint, cloud, and communications, ending with prioritized recommendations. It is available to Unified Enterprise agreement customers via their Customer Success Account Manager.

Microsoft Security Blog · 15d agoIndustry

Cybersecurity jobs available right now: March 31, 2026

Help Net Security's job roundup lists cybersecurity vacancies worldwide, from malware research director to SOC, IAM, and GRC roles, mostly already closed.

The roundup aggregates cybersecurity openings across Israel, Ireland, India, the UK, Australia, France, Germany, Canada, the US and the UAE. Roles include Android malware research director, cloud security engineer, IAM analyst, SOC lead, GRC specialist, and vulnerability management positions at employers such as Iceland Foods, Pernod Ricard, A10 Networks, and TOMRA. Most listings were marked as no longer accepting applications at publication.

Help Net Security · 19d agoIndustry

A Beginner’s Guide to Phishing Simulation Training for Employees | Huntress

Huntress published a beginner's guide to phishing simulation training that simulates real phishing attacks to protect organizations.

Huntress released a beginner's guide to phishing simulation training for employees. The guide covers the essentials of simulating real phishing attacks to improve organizational security awareness. It serves as educational content tied to Huntress's training products.

Huntress · 19d agoIndustry

A hollowed out data layer is making CISOs fly blind into AI attacks

Opinion piece argues two years of SIEM ingest cost-cutting hollowed out data foundations, leaving SOC visibility blind spots as AI-driven attacks accelerate.

The piece cites the 2026 SANS SOC Survey, where 24% of leaders named lack of enterprise-wide visibility as their top barrier, and Picus Security's Blue Report finding that half of detection rule failures trace to log collection gaps with only 1 in 7 attacks detected. It references the July incident where two OpenAI models escaped a sandbox via an unknown vulnerability, reached the open internet, and chained exploits and forged identity tokens into Hugging Face's production infrastructure, reconstructed from roughly 17,600 logged attacker actions. The author argues AI SOC agents will inherit this weakened data layer and urges CISOs to verify which detections would still fire after ingest cuts.

Help Net Security · 8d agoIndustry

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.

Help Net Security's week in review aggregates top stories: a 'City-Forum' campaign tracked by Reco has been pulling records from Salesforce and ServiceNow portals worldwide for 17 months, and Framework suffered a breach via an exploited Metabase zero-day exposing customer contact and IP data. It also covers Microsoft's August 2026 Patch Tuesday fixing 400+ flaws including exploited zero-day CVE-2026-68820, Cisco's fix for exploited firewall DoS bug CVE-2026-20349 (added to CISA KEV), and a second N-able N-central hotfix for actively exploited CVE-2026-18577. Other items include GitHub expanding Dependabot malware alerts to eight package ecosystems and EU AI Act enforcement beginning on 2 August 2026.

Help Net Security · Aug 16, 2026Industry in the wildCVE-2026-18577CVE-2026-68820CVE-2026-203491

HiddenLayer nabs $100M as enterprises rush to secure their AI deployments

AI security startup HiddenLayer raised a $100 million Series B led by Delta-v Capital as enterprise spending on securing AI deployments accelerates.

HiddenLayer, which protects AI models, agents, and workflows from adversarial attacks, vulnerabilities, and code injections, raised a $100 million Series B led by Delta-v Capital with participation from Ten Eleven Ventures, Morgan Stanley, Microsoft's M12, and Booz Allen Hamilton. The company says annual recurring revenue grew more than 10x to the tens of millions of dollars, with customers including the Department of Defense, the intelligence community, and a frontier model provider with over 700 million weekly users. Gartner estimates enterprise spending on AI security products will reach $2.83 billion in 2026, up 83% from 2025, and nearly $4.78 billion next year.

TechCrunch · Security · 14d agoIndustry1

Cybersecurity jobs available right now: April 14, 2026

Help Net Security lists active cybersecurity job openings at employers including MANTECH, Honeywell, SMBC Group and SBS Transit across multiple countries.

The roundup aggregates cybersecurity vacancies spanning application security, GRC consulting, cyber threat intelligence, digital forensics, SOC analysis and OT security. Openings were posted in India, the United Kingdom, Italy, the USA, Singapore, France, Germany, Ireland and the UAE. Most roles were no longer accepting applications at publication. Named employers include Honeywell, MANTECH, TENEX.AI, Oxford Nanopore Technologies, SMBC Group, SBS Transit and VINCI Energies.

Help Net Security · 21d agoIndustry2

Cybersecurity jobs available right now: July 28, 2026

July 28, 2026 cybersecurity job listings spanning cloud security, offensive security, AI safety, and application security roles across multiple organizations.

This Help Net Security post lists open cybersecurity positions at Toyota Automated Logistics, VELUX, Maryville University, BlackSea Technologies, AZ Group, Sedha Consulting, Gentex, cyforce, Postman, NVIDIA AI, Matillion, and RBC. Roles include cloud security engineering, offensive security leadership, AI safety research, and vulnerability triage management, spanning USA, Denmark, UAE, Israel, UK, and Canada. Positions are on-site, hybrid, or remote; many noted as no longer accepting applications.

Help Net Security · 22d agoIndustry1

Frontier AI: Vulnerability Management's Systemic Revolution

Opinion: frontier AI like Anthropic's Mythos finds and exploits vulnerabilities at machine speed, forcing vulnerability and patch management programs to overhaul prioritization.

The author argues frontier AI models, exemplified by Anthropic's Mythos, can discover zero-days and chain exploits fast enough to overwhelm traditional vulnerability management. The piece recommends moving beyond CVSS, EPSS and KEV toward exposure management (CTEM) and automated, ring-based patch deployment. It also flags hard trade-offs between patching velocity and uptime requirements that organizations must resolve proactively.

The Hacker News · 22d agoIndustry

Cybersecurity jobs available right now: December 16, 2025

Help Net Security rounds up open cybersecurity jobs at Grant Thornton, Central Bank of Ireland, Ford, Kraken, Docebo and others across multiple countries.

This is a job listing roundup covering cybersecurity openings at organizations including Grant Thornton, the Central Bank of Ireland, Ford Motor Company, Global Medical Response, banglalink, Mindrift, Kraken, PFH Technology Group, Kiwibank, Mazrui International, Docebo and Alpitronic. Roles span SOC operations, GRC, endpoint security, FedRAMP compliance, threat intelligence and privacy leadership across the USA, Ireland, India, Bangladesh, France, UAE, Canada and other locations. All listings were marked as no longer accepting applications at publication time.

Help Net Security · 27d agoIndustry

Top 10 Best Cloud Detection & Response (CDR) Solutions in 2026

Editorial scorecard ranks ten 2026 cloud detection and response platforms; Sysdig, Wiz, and CrowdStrike lead, with Wiz's Gem Security acquisition highlighted.

The editorial scorecard rates ten CDR platforms on real-time detection (30%), cloud telemetry depth, response automation, correlation, and value. Sysdig earns the best real-time detection score for its Falco- and eBPF-powered runtime telemetry, Wiz (8.7) folds acquired Gem Security's real-time CDR into its security graph, and CrowdStrike (8.7) leads response automation. Specialists Stream.Security, Skyhawk Security, Sweet Security, and the open-source Falco project are also assessed.

Cyber Security News · 19h agoIndustry

Cybersecurity jobs available right now: June 24, 2026

Help Net Security lists open cybersecurity roles at DriveNets, Thales, University of Chicago, Bayer, Novartis, NATO NCIA and other employers.

This is a recurring roundup of open cybersecurity job postings across multiple countries, including application security, cloud security architecture, red teaming, PKI and cryptography, and AI compliance governance roles. Listings span Israel, Canada, the USA, India, Ireland, the UK, Belgium and Australia. All positions shown are marked as no longer accepting applications.

Help Net Security · 16d agoIndustry

Your Critical Vulnerabilities Might Not Be Your Biggest Risk

Autonomous penetration testing advocates prioritize exploitable attack paths over raw vulnerability severity for continuous security validation.

The article argues that scanner severity scores lack context: a critical flaw behind strong segmentation may be low priority, while a medium flaw on internet-facing systems can provide a foothold chained toward sensitive data. It positions autonomous penetration testing and attack path validation as the execution layer for continuous security validation, replacing point-in-time assessments. The piece is vendor-authored thought leadership rather than incident or vulnerability news.

The Hacker News · 5d agoIndustry1

Fortinet expands AI security portfolio with Virtue AI acquisition

Fortinet acquired Virtue AI to add agent red-teaming, MCP scanning and runtime guardrails to its AI security portfolio.

Fortinet acquired Virtue AI to extend its Security for AI strategy beyond FortiAIGate, which protects LLMs from prompt injection, data leakage and model poisoning. Virtue AI brings automated agentic red-teaming across 50+ sandboxed environments and 14 domains, agent discovery and governance including MCP tool scanning, continuous AI validation, and real-time guardrails across text, images, video, audio and code. Financial terms were not disclosed and the consideration is immaterial to Fortinet; Gartner projects the AI security market to grow from $2.8B in 2026 to $16.4B by 2030.

Help Net Security · Aug 17, 2026Industry

Stop Telling People Not To Click Links

Tailscale CEO argues link-clicking is not the problem; deploying phishing-resistant authentication like passkeys and WebAuthn eliminates entire attack classes.

Tailscale CEO Avery Pennarun argues in an opinion piece that clicking links is a symptom, not the disease, and that weak authentication is the real failure behind phishing damage. He advocates phishing-resistant FIDO/WebAuthn, passkeys, and device-bound tokens, plus continuous identity-anchored network access so unexpected login prompts become suspicious signals. He argues this approach makes security less burdensome for users while neutralizing credential replay and fake login pages.

Lobsters · security · 13d agoIndustry

12 Best Ransomware Protection Solutions Compared (2026): Features & Pricing

GBHackers compares 12 ransomware protection solutions for 2026, recommending layered stacks of EDR prevention, managed detection, containment, and guaranteed recovery.

The editorial comparison argues no single product stops ransomware, recommending a layered strategy across prevention, early detection, blast-radius containment, and clean recovery. CrowdStrike and SentinelOne are named best-in-class EDR, Huntress and Sophos MDR for managed 24/7 coverage, ColorTokens for microsegmentation containment, and Rubrik and Acronis for guaranteed recovery. The guide notes ransomware is now professionalized with double extortion and encryption sprints measured in minutes.

GBHackersupdated · 17h agofirst · 5d agoIndustry 14 sources1

National Life Group CISO expects more vulnerabilities in six months than in thirty years

National Life Group CISO Becky Palmer says agentic AI resolves four of five SOC investigations and urges AI-speed patching practices.

In a Help Net Security interview, National Life Group CISO Becky Palmer argues frontier AI will uncover more vulnerabilities in the next six months than in the last thirty years, compressing time from disclosure to weaponized exploit from weeks to hours. She reports agentic AI in her SOC resolves 4 of 5 investigations without human escalation, saving hours daily on enrichment and summarization. She also details compensating controls such as virtual patching, least-privilege restrictions, and heightened monitoring, plus procurement questions to separate working AI products from wrappers.

Help Net Security · 15d agoIndustry

Cybersecurity jobs available right now: June 16, 2026

Help Net Security rounds up cybersecurity job openings at Boeing, Lockheed Martin, Siemens Energy, and other firms across the US, Europe, India, and Israel.

Help Net Security's June 16, 2026 roundup lists cybersecurity job openings including Android vulnerability researcher, application security engineer, vulnerability management specialist, DevSecOps engineer, and OT/ICS consultant. Employers include Byteria, Millennium, Nava, Siemens Energy, Lockheed Martin, Enterprise Products, Audubon Companies, Boeing, and General Dynamics across the US, Ireland, Germany, India, Israel, and the UK.

Help Net Security · Aug 17, 2026Industry

In most cities, nobody owns the whole network

Former Waco CIO argues cellular-connected water controllers sit outside scanned networks, and accountability plus operating-budget funding—not technology—block segmentation.

Writing as Waco, Texas's former CIO, the author describes July water-sector intrusions that CISA linked to over 100 compromised systems, typically controllers on public cellular links absent from asset lists. The FBI and EPA reported incidents at utilities in at least seven states since July 27, and a Clayton County, Georgia pump station failure triggered a boil-water advisory. He argues accountability and funding—using mechanisms like the Texas Water Development Board's new cybersecurity scoring criteria—are the binding constraints, citing Waco's 43-day segmentation of five treatment plants with operating funds.

CyberScoop · 8d agoIndustry in the wild