Author Archives: Poseidon

Cargo theft malware actor spent a month inside a decoy network before researchers pulled the plug

Proofpoint researchers executed a malicious payload from a threat actor known to target trucking and logistics companies in late February 2026, doing so inside a decoy environment. The environment stayed compromised for more than 30 days, long enough for researchers to watch the actor work through their tools, scripts, and decisions beyond the initial break-in. The attacker had previously been documented targeting transportation carriers through compromised load board platforms, which are online marketplaces connecting shippers … More → The post Cargo theft malware actor spent a month inside a decoy network before researchers pulled the plug appeared first on Help Net Security.
http://news.poseidon-us.com/TS3xrT

Two US nationals jailed over scheme that generated $5 million for the North Korean regime

Two US nationals have been sentenced for their role in a scheme that placed North Korean IT workers inside American companies under false identities. Over several years, the operation used stolen identities from at least 80 US individuals and brought in more than $5 million for the North Korean government. Kejia Wang was sentenced to 108 months in prison, and Zhenxing Wang to 92 months. Both pleaded guilty to wire fraud and money laundering charges, … More → The post Two US nationals jailed over scheme that generated $5 million for the North Korean regime appeared first on Help Net Security.
http://news.poseidon-us.com/TS3xrR

OpenAI updates Agents SDK, adds sandbox for safer code execution

OpenAI’s updated Agents SDK helps developers build agents that inspect files, run commands, edit code, and handle tasks within controlled sandbox environments. The update provides standardized infrastructure for OpenAI models, a model-native harness that lets agents work with files and tools on a computer, and native sandbox execution for running tasks safely. The new harness and sandbox capabilities launch first in Python, with TypeScript support planned for a future release. Additional features, including code mode … More → The post OpenAI updates Agents SDK, adds sandbox for safer code execution appeared first on Help Net Security.
http://news.poseidon-us.com/TS3xqt

AI identifies early risk patterns for skin cancer

A massive Swedish study shows that AI can spot people at higher risk of melanoma using routine health data. Advanced models significantly outperformed basic methods, identifying high-risk groups with striking accuracy. Some individuals flagged by the system had up to a 33% chance of developing melanoma within five years. This approach could pave the way for smarter, more targeted screening.
http://news.poseidon-us.com/TS3tFd

Anthropic tests user trust with ID and selfie checks for Claude

Anthropic announced identity verification for Claude using government ID and selfie checks, becoming the first major AI chatbot to do so, a move that may prove unpopular with users. Having built its reputation around privacy in the AI race, Anthropic risks undermining its positioning, as competitors such as OpenAI’s ChatGPT and Google’s Gemini do not require such verification. Earlier this year, Discord expanded age verification to include facial scans and ID checks, though it later … More → The post Anthropic tests user trust with ID and selfie checks for Claude appeared first on Help Net Security.
http://news.poseidon-us.com/TS3rfg

GitHub lays out copyright liability changes and upcoming DMCA review for developers

A U.S. Supreme Court ruling issued in March has settled a question that has circulated among platform operators and developers for years: whether a service provider can be held liable for copyright infringement committed by its users without evidence of intent to contribute to that infringement. The answer, per the Court’s opinion in Cox v. Sony, is no. Liability requires conscious, culpable conduct. The standard endorsed by the Court is the same one advocated in … More → The post GitHub lays out copyright liability changes and upcoming DMCA review for developers appeared first on Help Net Security.
http://news.poseidon-us.com/TS3rfd

EU cybersecurity standards are at risk if supplier ban passes

Today, the European standards body ETSI sent a formal position paper to the European Commission, calling for changes to the proposed Cybersecurity Act 2 (CSA2), the EU’s planned revision to its existing cybersecurity certification framework. The paper focuses on two provisions: a proposed expansion of ENISA’s role in developing technical specifications, and a clause in Article 100(4)(a) that would bar entities from countries designated as posing cybersecurity concerns from participating in European standardization work tied … More → The post EU cybersecurity standards are at risk if supplier ban passes appeared first on Help Net Security.
http://news.poseidon-us.com/TS3rdw

Command integrity breaks in the LLM routing layer

Systems that rely on LLM agents often send requests through intermediary routing services before reaching a model. These routers connect to different providers through a single endpoint and manage how requests are handled. This layer can influence what gets executed and what data is exposed. A recent study examined 28 paid routers and 400 free routers used to access model APIs. Request–response lifecycle through a malicious router Some routers are already altering commands In testing, … More → The post Command integrity breaks in the LLM routing layer appeared first on Help Net Security.
http://news.poseidon-us.com/TS3mnD

What the EU AI Act requires for AI agent logging

The EU AI Act is 144 pages long. The logging requirements that matter for AI agent developers sit across four articles that keep referencing each other. Here’s what they say, when the deadlines hit, and where the gaps are. Your agent is probably high-risk The Act doesn’t mention “AI agents” by name. What matters is what the system does. If your agent scores credit applications, filters resumes, decides who gets healthcare benefits, prices insurance, or … More → The post What the EU AI Act requires for AI agent logging appeared first on Help Net Security.
http://news.poseidon-us.com/TS3mmj

Product showcase: Ente Auth encrypts, backs up, and syncs 2FA

Two-factor authentication (2FA) is an essential layer of protection for online accounts, and Ente Auth makes it easier to manage securely across devices. Ente Auth is a free, open-source authenticator app designed to generate and store one-time passcodes for 2FA. It supports setup through QR codes and manual entry, allowing users to add accounts and begin generating codes. Users can also import existing accounts from other authenticator apps, simplifying the transition without the need to … More → The post Product showcase: Ente Auth encrypts, backs up, and syncs 2FA appeared first on Help Net Security.
http://news.poseidon-us.com/TS3jtT