Blog

Modat enhances Magnify with Passive DNS for faster threat hunting and infrastructure analysis

Modat has launched native Passive DNS intelligence in Magnify, its internet intelligence platform, unifying IP, device fingerprint, certificate, and passive DNS into a single pivot-driven investigation flow. Threat intelligence, threat hunting, exposure management, fraud and Security teams have long been forced to stitch together evidence across multiple tools and datapoints. Magnify eliminates that gap, building on its clustering-based device fingerprinting and geo-native scanning to surface infrastructure that conventional internet scanners miss. Most internet intelligence platforms … More → The post Modat enhances Magnify with Passive DNS for faster threat hunting and infrastructure analysis appeared first on Help Net Security.
http://news.poseidon-us.com/TT2xcF

Microsoft’s workplace check-in via Wi-Fi tracks who’s in the office, and not everyone’s happy

Microsoft is rolling out workplace check-in via Wi-Fi for Teams and Microsoft Places. Connect to your office network and your in-office presence updates automatically, no manual status change needed. Microsoft says the signal isn’t stored as location history, and that you can configure your own settings. Here’s the catch. Your employer enables the feature at the tenant level, and you only control how it’s used on your end. Privacy advocates and labor groups have already … More → The post Microsoft’s workplace check-in via Wi-Fi tracks who’s in the office, and not everyone’s happy appeared first on Help Net Security.
http://news.poseidon-us.com/TT2xcD

LTM’s BlueVerse for iRun applies agentic AI to managed IT operations

LTM has announced the launch of BlueVerse for iRun, an AI-native managed services offering designed to transform IT operations into a resilient, intelligent, and outcome-driven function. As enterprise environments grow more complex, spanning hybrid cloud, SaaS, and AI-driven ecosystems, managed services models are increasingly constrained by siloed teams, static processes, and effort-led scaling. BlueVerse for iRun addresses this shift by moving beyond headcount-based delivery to a platform-led approach powered by agentic AI, knowledge convergence, and … More → The post LTM’s BlueVerse for iRun applies agentic AI to managed IT operations appeared first on Help Net Security.
http://news.poseidon-us.com/TT2xbc

Your AI agents are operating on 15% of the information they need

The answer is moving domain knowledge closer to where inference actually happens—the operational data layer
http://news.poseidon-us.com/TT2rmb

Oxford physicists just made Schrödinger’s cat even stranger

Oxford physicists have created an entirely new type of Schrödinger’s cat-like quantum state using components that are themselves highly quantum in nature. The advance could open new possibilities for more resilient quantum computers and deeper insights into the strange rules that govern the quantum universe.
http://news.poseidon-us.com/TT2nhp

Onspring CISO on where automated GRC systems fall short

In this interview with Help Net Security, Nichole Windholz, CISO at Onspring, talks about the limits of automated GRC systems and continuous control monitoring. She explains why color-coded dashboards can hide nuance, how teams can check the data feeding their tools, and which risks resist measurement, such as insider behavior and vendor concentration. Continuous control monitoring tools tend to produce a green-yellow-red mosaic that flattens nuance. When a CISO walks into a board meeting with … More → The post Onspring CISO on where automated GRC systems fall short appeared first on Help Net Security.
http://news.poseidon-us.com/TT2kDy

Open-source CI/CD abuse detector guards against stolen credential attacks

CI/CD Abuse Detector is an open-source project that uses a large language model to flag suspicious changes to continuous integration and continuous deployment pipelines, workflows, and automation configurations. The repository contains drop-in templates for GitHub Actions, GitLab CI, and Azure DevOps. The project targets a common attack chain in software supply chain compromises. Stolen developer credentials are used to push modifications to workflow files, which then harvest secrets stored in the CI environment. The detector … More → The post Open-source CI/CD abuse detector guards against stolen credential attacks appeared first on Help Net Security.
http://news.poseidon-us.com/TT2kDt

A hardware neural network backdoor that hides in plain sight

Deep learning systems on phones, cars, and other edge devices increasingly run on custom silicon. Specialized chips such as FPGAs and ASICs give these systems the speed and low power consumption that edge applications need. Many of these chips come from third-party design houses and foundries, which adds steps to the supply chain where an outside party can alter a device. Researchers at the University of Tennessee and the University of Florida built an attack … More → The post A hardware neural network backdoor that hides in plain sight appeared first on Help Net Security.
http://news.poseidon-us.com/TT2kD8

Proving what a military AI model will do is the real problem

Defense contractors build AI systems that task drones automatically and propose kill-chains to support soldiers. Several of these contractors have partnered with frontier AI companies to put advanced models into military tools. Anduril works with OpenAI, Palantir works with Microsoft, and Lockheed Martin works with Meta. The systems coming out of these partnerships carry a security problem that sits outside the methods of arms control diplomacy: confirming what an AI model will do. Verification built … More → The post Proving what a military AI model will do is the real problem appeared first on Help Net Security.
http://news.poseidon-us.com/TT2h6Z