Help Net Security چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۰:۰۰

A CISO’s guide to trimming waste from a flat security budget

In this Help Net Security video, Ken Leeser, CISO at Y Meadows, explains how security leaders can get more protection out of a flat budget. He argues a frozen budget gives teams a reason to cut waste and simplify their security stack. The first step is an inventory of every tool and what it costs, including renewals and storage fees. Next, teams should map those tools against attacker techniques using frameworks like…

Read the full article at Help Net Security Removal request

This page shows only the headline and the short summary. The full text is published by the original source.

Related news

Full archive →

Help Net Security چهارشنبه ۲۰ آبان ۱۴۰۵ · ۱۰:۳۰

The Cyber Resilience Act clock doesn’t stop for weekends

In this Help Net Security interview, Aurimas Bakas, CEO of Copla, talks about what the EU Cyber Resilience Act‘s reporting duties mean for manufacturers. He explains why companies need a register of every product version still in use, why boards focus on CE marking while reporting obligations started in September 2026, and how to define the moment a company becomes aware of an exploited flaw. He also covers what CISO…

Governance, Risk & Compliance

Source

Help Net Security چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۳۰

EU cyber scores look healthy, but 45% of surveyed IT providers take months to patch

Forty-five percent of surveyed IT service management providers in the EU took more than three months to apply critical patches to critical systems, according to ENISA’s 2026 assessment of cybersecurity in the Union. Attackers can turn a newly disclosed flaw into a working attack within days, and sometimes within hours or minutes. Those providers run systems for other organizations, so a slow patch at one becomes expo…

Source

Help Net Security چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۹:۰۰

Nearly half of big firms shelve or close vulnerability findings they haven’t confirmed

Nearly half of security teams at organizations with 5,000 or more employees close or deprioritize vulnerability findings without fully verifying them, ProjectDiscovery found, and the reason they give is time. Here’s the catch. Among teams that skip full verification, 57% say at least three out of four findings they do check turn out to be real. If most of what you look at is genuine, there’s not much reason to think…

Vulnerabilities & Zero-Day

Source

Help Net Security چهارشنبه ۲۰ آبان ۱۴۰۵ · ۰۸:۳۰

An Instagram ad was all it took: Leaked exploit kits are hitting employees’ iPhones

Criminals are using leaked exploit kits to break into vulnerable iPhones, according to iVerify’s 2026 Advanced Mobile Threat Report. Attacks delivered through ads and compromised websites have reached employees who use phones for work. DarkSword chains together several software flaws to compromise iPhones. Researchers disclosed the toolkit in March 2026, and a newer version appeared on GitHub within a week, giving cr…

Malware & Threats Mobile Development

Source