Blog

Adaptiva simplifies secure patch management for air-gapped networks

Adaptiva has announced AirGap for OneSite Patch, a new capability that extends autonomous patch management to air-gapped environments. Developed in response to growing demand from government agencies, critical infrastructure operators, and large enterprises managing highly secure environments, AirGap for OneSite Patch enables organizations to securely patch isolated systems without compromising the physical separation those environments require. “For years, organizations operating air-gapped environments have had to choose between maintaining strict isolation and keeping critical systems consistently … More → The post Adaptiva simplifies secure patch management for air-gapped networks appeared first on Help Net Security.
http://news.poseidon-us.com/TTZ33h

CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance

On Wednesday, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and four allied cyber authorities published a guide telling software vendors how to build a coordinated vulnerability disclosure (CVD) program. Six days earlier, CISA published a blog post explaining how a security researcher had tried and failed, repeatedly, to report a serious problem to CISA itself. Read side by side, the two documents suggest the timing is deliberate. The guidance Suppliers should design a CVD … More → The post CISA folds its own hard-won lessons into coordinated vulnerability disclosure guidance appeared first on Help Net Security.
http://news.poseidon-us.com/TTZ33d

Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes

A Russian-speaking threat actor known as “bandcampro” used a jailbroken Gemini CLI, Google’s open-source terminal-based AI agent, to deploy and operate a small command-and-control (C2) botnet, according to TrendAI. Operational overview (Source: TrendAI) In more than 200 sessions between March 19 and April 21, 2026, the threat actor worked with Gemini to deploy and operate infrastructure that controlled eight computers inside a dental clinic and gain access to the clinic’s OpenDental database. Posing as an … More → The post Russian cybercriminal used jailbroken Gemini CLI to rebuild botnet infrastructure in six minutes appeared first on Help Net Security.
http://news.poseidon-us.com/TTZ33Y

ValorC3 extends SaaS protection with immutable cloud backups

ValorC3 Data Centers today announced the general availability of Backup as a Service, a fully managed offering that protects the SaaS data businesses rely on most, including Microsoft 365, Entra ID and Salesforce. Every backup is immutable, so data stays recoverable after deletion, corruption or a ransomware attack. Most companies falsely assume SaaS vendors provide backup service. In reality, recent cloud governance tracking shows that 80% of organizations have experienced at least one cloud security … More → The post ValorC3 extends SaaS protection with immutable cloud backups appeared first on Help Net Security.
http://news.poseidon-us.com/TTZ33W

Intruder brings AI-powered, on-demand penetration testing to web applications

Intruder has announced the launch of AI Pentesting for web applications, providing on-demand penetration testing. Following its initial release of issue-level investigations last quarter, the platform now allows organizations to securely connect their codebases via GitHub or GitLab to automatically scope and launch penetration tests in minutes, with results and audit-ready reporting in hours. Mythos and Daybreak have proven that AI is extremely adept at finding security vulnerabilities. At the same time, AI is accelerating … More → The post Intruder brings AI-powered, on-demand penetration testing to web applications appeared first on Help Net Security.
http://news.poseidon-us.com/TTZ32f

Romania’s land registry hit by cyber attack, data allegedly for sale

Romania’s National Agency for Cadastre and Land Registration (ANCPI) suffered a major disruption on Tuesday, July 14, when its e-Terra cadastre and land registry app became unavailable to users. What was first declared to be a “major technical incident” has now been confirmed as a cyber attack. While the circumstances are still being investigated by the competent state institutions, ANCPI stated that the data administered through its IT systems has not been compromised as a … More → The post Romania’s land registry hit by cyber attack, data allegedly for sale appeared first on Help Net Security.
http://news.poseidon-us.com/TTYtcy

Tenable One unifies code risks with enterprise exposure data

Tenable has announced the expansion of the Tenable One Exposure Management Platform, unifying application security risks with all other exposure data. By integrating static code vulnerability data, Tenable One delivers complete, code-to-runtime visibility across the entire attack surface. Security teams have long struggled with a code security problem where vulnerable code reaches production faster than it can be reviewed. This problem is exacerbated by the use of generative AI, which empowers developers to ship code … More → The post Tenable One unifies code risks with enterprise exposure data appeared first on Help Net Security.
http://news.poseidon-us.com/TTYpWX

Lineation.ai focuses on runtime security for autonomous AI agents

Lineation.ai has announced the public launch of its comprehensive agentic security platform. Delivering a solution at the intersection of GenAI Application Security and Runtime Defense, Lineation introduces a Zero Trust unified control plane and a lightweight endpoint daemon that secures autonomous AI agents directly at execution. As enterprises adopt autonomous AI agents that read sensitive data, call APIs, and execute workflows, traditional static perimeters and standard LLM gateways fall blind. By assigning a Zero Trust … More → The post Lineation.ai focuses on runtime security for autonomous AI agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTYpWS

Microsoft makes Windows SSO prompts easier to manage

Microsoft is introducing a new registry-based policy that lets IT administrators automatically accept Windows SSO permissions on Windows 11 versions 24H2 and 25H2 devices managed with Microsoft Entra ID. Users with personal Microsoft accounts and devices outside policy-managed environments will continue to receive SSO permission prompts. Admin control for SSO prompts in Windows (Source: Microsoft) Why Microsoft introduced it In the European Economic Area (EEA), Microsoft changed the Windows sign-in experience so users can choose … More → The post Microsoft makes Windows SSO prompts easier to manage appeared first on Help Net Security.
http://news.poseidon-us.com/TTYpWL