Monthly Archives: May 2026

Authorities seize 800 servers used for cyberattacks and disinformation

Dutch authorities arrested two men and seized 800 servers linked to a hosting provider that investigators say supported Russian activities aimed at undermining democracy and security through cyberattacks, disinformation, and disruption of public and economic systems. Servers seized by Dutch authorities (Source: FIOD) The Dutch Fiscal Information and Investigation Service (FIOD) arrested a 57-year-old man from Amsterdam and a 39-year-old man from The Hague on suspicion of violating Dutch sanctions laws. The two men allegedly … More → The post Authorities seize 800 servers used for cyberattacks and disinformation appeared first on Help Net Security.
http://news.poseidon-us.com/TSjVpV

AI won’t replace you but someone using AI might

Generative AI is transforming the workplace faster than ever, but new research from the University of Vaasa suggests the biggest threat may not be AI itself — it’s falling behind in learning how to use it. Researcher Zhe Zhu found that employees who see tools like ChatGPT and Gemini as helpful collaborators rather than job-stealing rivals tend to be more engaged, adaptable, and optimistic about their careers.
http://news.poseidon-us.com/TSjSq8

US states step up cyber defenses to protect local communities

U.S. state governments are taking on a larger role in cybersecurity to help protect local communities and essential services. Many states are building state-led cyber defense programs, including cybersecurity clinics, regional security operations centers (RSOCs), and state cyber corps programs to reduce costs, strengthen the local workforce, and improve cyber resilience. Cyber defense programs in the U.S. as of April 2026 (Source: UC Berkley, CLTC) Some states are expanding shared services, centralized procurement, cyber risk … More → The post US states step up cyber defenses to protect local communities appeared first on Help Net Security.
http://news.poseidon-us.com/TSjP6g

Lessons for organizations from the Verizon 2026 Data Breach Investigations Report

This is my favourite time of the year, not just because spring is here and the promise of summer is on the way. But also, because one of my must reads each year gets published. There are a few must read reports that I have on my reading list for each year and the Verizon Data Breach Investigations Report is on top of that list. The latest Verizon 2026 Data Breach Investigations Report (DBIR) once … More → The post Lessons for organizations from the Verizon 2026 Data Breach Investigations Report appeared first on Help Net Security.
http://news.poseidon-us.com/TSj8d6

OpenHack: Open-source AI-powered vulnerability research

Source-guided vulnerability research increasingly leans on coding harnesses such as Claude Code, Codex, and Cursor to drive agent-based reviews of application code. A new MIT-licensed project from the Dutch security firm Hadrian, called OpenHack, packages that approach into a file-based workspace that any of those harnesses can run. OpenHack is a set of agents and tools that mimics how Hadrian’s research team performs automated vulnerability research. The workflow runs inside a coding harness or a … More → The post OpenHack: Open-source AI-powered vulnerability research appeared first on Help Net Security.
http://news.poseidon-us.com/TSj8cS

Boards want cyber risk in dollars, not CVE counts

In this Help Net Security video, Ziv Levi, SVP of Technology at CYE, explains why translating cyber risk into dollars is one of the most pressing tasks for security leaders. Boards and executives want cyber exposure described in business terms, not technical jargon. Levi walks through a three-step financial translation framework. First, identify business exposure by mapping attack paths to the assets that matter most, such as intellectual property and customer data. Second, focus on … More → The post Boards want cyber risk in dollars, not CVE counts appeared first on Help Net Security.
http://news.poseidon-us.com/TSj6yg

Turns out the C-suite loves shadow AI

Senior decision-makers are the heaviest users of unapproved AI tools, and they continue using them despite being aware of the security and privacy risks linked to shadow AI, according to TrustedTech’s Shadow AI in the Workplace report. The study found that 65% of decision-makers use shadow AI, compared with 31% of employees below decision-maker level. Net Shadow AI use (Source: TrustedTech) The data suggests that shadow AI is not mainly driven by junior employees experimenting … More → The post Turns out the C-suite loves shadow AI appeared first on Help Net Security.
http://news.poseidon-us.com/TSj6yb

AI scans 400,000 Reddit posts and finds hidden Ozempic side effects

By analyzing over 400,000 Reddit posts, researchers discovered that users of popular GLP-1 weight-loss drugs frequently discussed unexpected symptoms like menstrual irregularities, chills, and hot flashes. The findings suggest AI could turn social media into a powerful early-warning system for spotting side effects that clinical trials may miss.
http://news.poseidon-us.com/TShlSp

Scientists discover atoms suddenly spinning backward in quantum experiment

Scientists have directly watched angular momentum move through a crystal for the very first time — and discovered a bizarre twist along the way. Using ultra-powerful terahertz laser pulses, researchers triggered tiny atomic rotations inside a quantum material and found that the direction of rotation can unexpectedly flip as momentum is transferred. The strange reversal happens because of the crystal’s underlying symmetry, creating an almost impossible-sounding effect where two rotations combine into one spinning the opposite way.
http://news.poseidon-us.com/TShhN2

Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: TeamPCP breached GitHub’s internal codebase via poisoned VS Code extension Following TeamPCP’s claim that they’ve breached GitHub’s own private code repositories, the Microsoft-owned company launched an investigation and confirmed the compromise. Earbud sensors can authenticate users by their heartbeat, study finds Researchers built a continuous authentication system called AccLock that identifies a wearer by the tiny vibrations a heartbeat makes … More → The post Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited appeared first on Help Net Security.
http://news.poseidon-us.com/TShh8C