50
50
Four corporate investigation mistakes organizations make under pressure
BlackBerry security executive outlines four investigation mistakes, warning poor chain of custody has cost firms over $2 billion in SEC penalties.
In a Help Net Security video, BlackBerry VP and Chief Security Advisor Christine Gadsby explains how early decisions in corporate investigations—granting access, informal conversations and undocumented choices—damage chain of custody, privilege and regulatory outcomes. She cites more than $2 billion in SEC penalties across over 100 financial firms since 2021 tied to missing records. Her guidance includes naming an incident commander, using communication channels with audit trails, verifying participants, and documenting decisions in real time.
16
What must happen for AI’s trillion-dollar gamble to pay off
Hyperscalers need 2.7x productivity gains by 2030 to justify nearly $1.1 trillion in AI data center spending, or risk bankruptcy and capital misallocation.
Wharton finance professor Jessica Wachter estimates hyperscaler AI expenditure will reach nearly $1.1 trillion through 2027 and that a 2.7x productivity increase is needed to break even by 2030. AI revenues of roughly $150-200 billion this year fall far short of about $750 billion in annual spending, with total investment from Alphabet, Microsoft, Amazon, Meta, and Oracle potentially exceeding $5 trillion over four years. Alphabet reported its first free cash flow deficit (about $5.9 billion) since its 2004 IPO due to AI infrastructure costs. Researchers warn that failed demand could make the buildout the largest capital misallocation in history, with depreciating GPU chips risking stranded assets.
35
Cybersecurity jobs available right now: June 9, 2026
Help Net Security lists open cybersecurity roles at firms like Lockheed Martin, ByteDance, Nordic Semiconductor, and General Motors across AppSec, cloud, and compliance.
A June 2026 roundup aggregates cybersecurity openings spanning application security, cloud security, compliance, reverse engineering, and deepfake forensics across the US, UK, Israel, Ireland, Norway, Singapore, India, and Canada. Most listed positions are marked as no longer accepting applications.
5
Cybersecurity jobs available right now: June 24, 2026
Help Net Security lists open cybersecurity roles at DriveNets, Thales, University of Chicago, Bayer, Novartis, NATO NCIA and other employers.
This is a recurring roundup of open cybersecurity job postings across multiple countries, including application security, cloud security architecture, red teaming, PKI and cryptography, and AI compliance governance roles. Listings span Israel, Canada, the USA, India, Ireland, the UK, Belgium and Australia. All positions shown are marked as no longer accepting applications.
12
Risky Bulletin: Russia starts blocking DoH and DoT
Russian users report blocks on DoH and DoT servers, including Cloudflare 1.1.1.1 and Google 8.8.8.8, in an apparent censorship crackdown.
Russian internet users began reporting failures connecting to DNS-over-HTTPS and DNS-over-TLS servers, suggesting a government crackdown on the two privacy protocols. The blocks reportedly cover Cloudflare's 1.1.1.1 and Google's 8.8.8.8 resolvers; Roskomnadzor has not officially confirmed the action. The agency tested a similar block in March on Beeline's network and had named DoH for blocking as early as 2021. The bulletin also briefly notes state-sponsored phishing of EU officials, a DDoS against Norway's Digdir, the ReliaQuest/ShinyHunters dispute, and older ransomware and breach disclosures.
40
Cybersecurity jobs available right now: June 16, 2026
Help Net Security rounds up cybersecurity job openings at Boeing, Lockheed Martin, Siemens Energy, and other firms across the US, Europe, India, and Israel.
Help Net Security's June 16, 2026 roundup lists cybersecurity job openings including Android vulnerability researcher, application security engineer, vulnerability management specialist, DevSecOps engineer, and OT/ICS consultant. Employers include Byteria, Millennium, Nava, Siemens Energy, Lockheed Martin, Enterprise Products, Audubon Companies, Boeing, and General Dynamics across the US, Ireland, Germany, India, Israel, and the UK.
10
The true cost of a ransomware attack, with and without BCDR
Ransomware's true cost averages $5.08 million per incident versus a $139,875 median ransom, and mature BCDR strategies with immutable backups cut downtime and recovery expenses.
IBM's Cost of a Data Breach Report 2025 puts the average ransomware incident at $5.08 million, far above the $139,875 median ransom payment cited in Verizon's 2026 DBIR. Datto's State of BCDR Report 2025 found 60% of organizations believed they could recover within a day, but only 35% actually did. The Datto-sponsored piece argues mature BCDR with immutable WORM backups shortens downtime, citing a Techify case that restored 19 TB and returned a client to operations in under two hours without paying a ransom. It also flags compliance deadlines such as GDPR's 72-hour breach notification and the SEC's four-business-day disclosure rule.
20
deepseek-ai/DeepSeek-V4.1-Flash — new model trending #28 on Hugging Face
DeepSeek releases DeepSeek-V4.1-Flash, a 552B-parameter multimodal MoE model with 1M-token context and KV cache cut to 890 bytes per token.
DeepSeek-V4.1-Flash is a multimodal Mixture-of-Experts model with a 552B-parameter backbone that activates 8B parameters per token during prefill and 16B during decode. It uses a Causal Encoder-Decoder architecture, Compressed Sparse Attention 2, and FP4 KV caching to reduce the global KV cache footprint to 890 bytes per token, roughly one quarter of DeepSeek-V4-Flash. The model was trained from scratch on 45T tokens with context extended to 1M tokens, includes an Engram conditional-memory module (196B parameters), and is released under the MIT license. Post-training uses SFT, RL, and on-policy distillation with large-scale automated synthesis of agentic tasks and a controllable reasoning effort setting from 1 to 100.
80
Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million
Grindr will pay $35.2 million to settle a UK privacy lawsuit alleging it shared users' HIV status with advertisers.
Grindr agreed to pay 26 million pounds ($35.2 million) in two lump sums to resolve a UK class action alleging it provided advertisers with sensitive user data including HIV status. The suit was filed in April 2024 over conduct before early 2020, when the app was under Chinese ownership, and involved roughly 12,000 class members. Per an SEC filing, the settlement includes no findings or admission of liability, and the company says data was shared in encrypted form with two service providers.
42
Grindr Settles UK Data Privacy Claims for £26m
Grindr will pay £26m ($35.2m) to settle UK group claims alleging unlawful sharing of sensitive data, including HIV status, before 2020, without admitting liability.
The settlement, reached on September 2 and disclosed to the US SEC, covers roughly 12,000 claimants represented by Austen Hays over the free app's 2016–2020 data practices when Grindr was owned by Chinese conglomerate Kunlun. Grindr will pay £13m by December 31, 2026 and £13m by March 31, 2027, and continues to dispute the allegations; the agreement contains no admission of liability. The claims concerned sharing HIV status, PrEP use, ethnicity, and sexual orientation data with analytics providers Apptimize and Localytics without adequate consent. Norway's data protection authority fined Grindr €6.5m in 2021, and the UK ICO reprimanded the company in July 2022.
30
Grindr settles HIV status data-sharing lawsuit for $35 million
Grindr agreed to pay about $35 million to settle a UK privacy suit alleging it shared users' HIV status and sensitive data with advertisers without consent.
The claim, brought by London firm Austen Hays on behalf of roughly 12,000 UK users, alleges Grindr breached privacy and data-protection laws during a period ending in early 2020, when it was owned by Beijing Kunlun Tech. Shared data may have included ethnicity, HIV status, last HIV test date, and PrEP use. Per an SEC filing, Grindr will make two payments of £13 million (totaling about $35 million), one by December 31, 2026 and one by March 31, 2027, without admitting liability. The settlement follows a Norwegian Data Protection Authority enforcement finding over ad sharing without a valid legal basis.
40
Troy Hunt
Troy Hunt warns ShinyHunters' Carhartt breach claim of 50GB and millions of records is unverified, while Sri Lanka joins Have I Been Pwned.
Troy Hunt's blog roundup centers on a cautionary tale about data breach claims: ShinyHunters claims it compromised Carhartt and stole over 50GB of compressed data containing millions of customer records, employee information and loyalty data, but Hunt stresses criminal claims require verification. The feed also covers Sri Lanka CERT becoming the 48th government onboarded to Have I Been Pwned's free government monitoring service, following Nepal as the 47th. Other commentary addresses ransomware economics, Brinks Home's lawyer-heavy extortion FAQ, and the Origin Energy breach in Australia.
30
ENEAS: Embedding-guided Neural Ensemble for Adaptive Segmentation
ENEAS adds text prompting and semantic verification to video segmentation to keep tracking targets through occlusion and reject lookalike distractors.
ENEAS is a unified text-promptable method for instance tracking and open-concept semantic discovery in video, designed to fix temporal hallucinations, spatial fragmentation, and semantic misclassification seen in SAM 3-class foundation models. It extends the geometrically robust SeC architecture with a text-prompting adapter and temporal memory, and uses a verification layer combining fast visual embedding matching with conditional VLM refinement for ambiguous candidates. It targets 3D reconstruction pipelines where a single misclassified distractor corrupts the asset. Code and models are open-sourced.
32
30
30
30