Monthly Archives: October 2025

AI agents can leak company data through simple web searches

When a company deploys an AI agent that can search the web and access internal documents, most teams assume the agent is simply working as intended. New research shows how that same setup can be used to quietly pull sensitive data out of an organization. The attack does not require direct manipulation of the model. Instead, it takes advantage of what the model is allowed to see during an ordinary task. The research comes from … More → The post AI agents can leak company data through simple web searches appeared first on Help Net Security.
http://news.poseidon-us.com/TNxcDd

Early reporting helps credit unions stop fraudulent transfers faster

In this Help Net Security interview, Carl Scaffidi, CISO at VyStar Credit Union, discusses how credit unions are adapting to an evolving fraud landscape and strengthening payment security. As cybercriminals leverage social engineering and AI-driven tactics, Scaffidi explains how innovation in authentication, real-time monitoring, and member education can enhance security without sacrificing the member experience. Which fraud schemes, such as account takeover, card-not-present fraud, or synthetic identity fraud, are posing the biggest challenges for credit … More → The post Early reporting helps credit unions stop fraudulent transfers faster appeared first on Help Net Security.
http://news.poseidon-us.com/TNxcDb

Product showcase: Syteca – The human-centric insider threat management platform

Most organizations think the greatest danger lurks outside their walls. But statistics keep proving otherwise. According to Verizon’s 2025 Data Breach Investigation Report, 60% of breaches involve the human element. The real risk often comes from within – from a trusted partner who clicks a phishing link, a disgruntled employee who decides to leave with your intellectual property, or a clinician who downloads sensitive patient records for malicious purposes. For organizations with lean IT resources, … More → The post Product showcase: Syteca – The human-centric insider threat management platform appeared first on Help Net Security.
http://news.poseidon-us.com/TNxcCX

Scammers target international students by threatening their visa status

In 2025, the U.S. government revoked thousands of visas from international students, often without warning or explanation. According to a newly released study, this opened a door for scammers. Posing as government officials, police, or university staff, they took advantage of students’ fear of losing their status. Researchers interviewed students to learn how they experience these scams and what universities can do to help. Scams that hit international students Scammers approach students through common communication … More → The post Scammers target international students by threatening their visa status appeared first on Help Net Security.
http://news.poseidon-us.com/TNxWvM

Proximity: Open-source MCP security scanner

Proximity is a new open-source tool that scans Model Context Protocol (MCP) servers. It identifies the prompts, tools, and resources that a server makes available, and it can evaluate how those elements might introduce security risks. The tool also work with NOVA, a rule engine that checks for issues such as prompt injection or jailbreak attempts. “Over the past year, MCP has been rapidly adopted by the community to extend AI capabilities. Developers around the … More → The post Proximity: Open-source MCP security scanner appeared first on Help Net Security.
http://news.poseidon-us.com/TNxWtt