Blog

Police dismantle Kratos phishing platform behind 15,000 monthly campaigns

German and US law enforcement have dismantled the infrastructure behind Kratos, a notorious phishing-as-a-service (PhaaS) platform. Its alleged developer and administrator was arrested in Indonesia by local police. Seizure banner (Source: BKA) The takedown was led by the Frankfurt public prosecutor’s cybercrime unit (ZIT) and Germany’s Federal Criminal Police Office (BKA), working alongside US law enforcement. The suspect was arrested in Indonesia by local police. Authorities describe Kratos as one of the “world’s most widely … More → The post Police dismantle Kratos phishing platform behind 15,000 monthly campaigns appeared first on Help Net Security.
http://news.poseidon-us.com/TTfPt0

Small teams are the heaviest users of AI coding agents

The pull request arrives with the tests already run and the description already written, the work of an agent that handled the whole thing on its own. Somebody still has to read it. On GitHub that somebody is usually one developer sitting alone with the diff, and the rest of the project never sees the code. Maliha Noushin Raida and Daqing Hou at Rochester Institute of Technology sorted 25,264 agentic pull requests by who reviewed … More → The post Small teams are the heaviest users of AI coding agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTfPsh

Snowpick: Open-source ServiceNow exposure scanner

An employee opens a company service portal, searches the knowledge base, and drops a file onto a ticket. Someone who never signed in can send a request to that same portal and get records back. Bishop Fox ran that test across 166 ServiceNow instances during authorized penetration tests. The firm published the results along with the Go tool it used, Snowpick. Findings came back from 31% of the instances. Those instances returned records or confirmed … More → The post Snowpick: Open-source ServiceNow exposure scanner appeared first on Help Net Security.
http://news.poseidon-us.com/TTfHST

Security teams keep finding critical flaws after scheduled testing ends

Enterprise environments change between scheduled security assessments, leaving organizations with periods where new vulnerabilities can go undetected. Synack’s State of Continuous Security Validation report found that 95% of surveyed organizations identified high- or critical-severity vulnerabilities outside planned testing windows during the past year, with 42% encountering them at least once a month. How often high/critical vulns are found outside testing windows (past 12 mo.) (Source: Synack) False sense of coverage Eighty-three percent of security leaders … More → The post Security teams keep finding critical flaws after scheduled testing ends appeared first on Help Net Security.
http://news.poseidon-us.com/TTfHSS

AI can’t fix cybersecurity’s hiring problem

Organizations are redefining cybersecurity roles through workforce frameworks and placing greater emphasis on verified skills as AI and new regulatory requirements change hiring. The SANS 2026 Cybersecurity Workforce Survey found demand for specialists in new roles more than doubled over the past year, alongside increased hiring for existing cybersecurity skills. AI changes security work AI is reducing manual analysis, automating routine tasks and creating demand for security roles focused on AI governance, engineering and risk. … More → The post AI can’t fix cybersecurity’s hiring problem appeared first on Help Net Security.
http://news.poseidon-us.com/TTfHSQ

Cloud operations become the next big role for agentic AI

Companies are using agentic AI to manage growing application environments, automate routine tasks, and support decisions. Business and IT leaders increasingly see the technology as part of cloud application management, according to Unisys’ AI & Cloud Insights Report. To what extent do the following factors limit your organization’s ability to scale agentic AI safely? (Chart shows those answering “moderate/major limitation.”) (Source: Unisys) Most organizations remain in testing or early deployment. Nearly one quarter have started … More → The post Cloud operations become the next big role for agentic AI appeared first on Help Net Security.
http://news.poseidon-us.com/TTfHRv

New programmable photonic chip can control how fast light moves

Scientists have created a programmable optical chip that can slow light on demand, giving engineers far greater control over how optical signals propagate through a circuit. The technology could provide the delays, synchronization, and buffering functions needed to make light-based computing more practical. A single chip could eventually perform several tasks that currently require separate devices, potentially reducing energy use, cost, and complexity in AI servers and data centers.
http://news.poseidon-us.com/TTfCwC