Blog

Theori brings Xint Code to market for large-scale AI code security analysis

Theori has made Xint Code commercially available, an LLM-native static application security testing (SAST) tool capable of analyzing millions of lines of source code, configuration files, and binaries in less than 12 hours. Xint Code’s approach to deep scanning and contextual analysis of massive codebases helps application security teams identify, reproduce, validate and understand the real-world critical vulnerabilities in applications. It uses LLMs combined with a proprietary orchestration engine to scan and analyze each line … More → The post Theori brings Xint Code to market for large-scale AI code security analysis appeared first on Help Net Security.
http://news.poseidon-us.com/TRYYn2

Linux Foundation secures $12.5 million to strengthen open source security and support maintainers

The Linux Foundation has announced a total of $12.5 million in grants from Anthropic, AWS, GitHub, Google, Google DeepMind, Microsoft, and OpenAI to strengthen the security of the open source software ecosystem. The funding will be managed by Alpha-Omega and the Open Source Security Foundation (OpenSSF), trusted security initiatives within the Linux Foundation, to support the development of long-term, sustainable security solutions for open source communities worldwide. As the security landscape grows more complex, advances … More → The post Linux Foundation secures $12.5 million to strengthen open source security and support maintainers appeared first on Help Net Security.
http://news.poseidon-us.com/TRYYms

1Password Users API for Partners helps automate identity response during incidents

1Password has announced the public preview of Users API for Partners, which allows security teams to respond to incidents faster during active security events. Launch partners like CrowdStrike, in addition to BlinkOps, Elastic, Sumo Logic, Tines, and Torq enable mutual customers to automatically suspend or restore users in 1Password Enterprise Password Manager when risk is detected. As part of this launch, 1Password is introducing api.1password.com as a unified access point for its APIs, with standardized … More → The post 1Password Users API for Partners helps automate identity response during incidents appeared first on Help Net Security.
http://news.poseidon-us.com/TRYYmf

Cayosoft adds AI identity visibility and incident response for hybrid environments

Cayosoft has announced updates to its Cayosoft Guardian platform. Cayosoft Guardian will now bring AI agent identities into existing identity threat detection and response (ITDR) workflows, giving security teams visibility, reporting, alerting, and automated rollback, without adding another dashboard. Cayosoft also launched a new Identity Forensics & Incident Response (IFIR) service, a purpose-built incident response offering designed specifically for Microsoft hybrid identity environments to address the growing operational and security risks created by complex environments … More → The post Cayosoft adds AI identity visibility and incident response for hybrid environments appeared first on Help Net Security.
http://news.poseidon-us.com/TRYYkd

Virtue AI brings continuous stress testing to enterprise AI agents

Virtue AI has announced Agent ForgingGround with built-in Red-Teaming Agents, the first enterprise-scale testing ground designed to continuously evaluate and stress-test AI agents (including multi-agent systems) before, during, and after deployment. As organizations adopt large-scale AI agents, many enterprises are unprepared to manage agent risk. AI agents can call tools, access sensitive data, and execute actions in real-time across enterprise databases, financial records, messaging platforms, CRMs, and more. Agents operate in dynamic, stateful environments where … More → The post Virtue AI brings continuous stress testing to enterprise AI agents appeared first on Help Net Security.
http://news.poseidon-us.com/TRYWRq

ManageEngine expands Endpoint Central with EDR and secure access

ManageEngine has announced the expansion of its unified endpoint management and security (UEMS) platform, Endpoint Central, to include endpoint detection and response (EDR) and secure private access capabilities. The additions bolster Endpoint Central’s endpoint security capabilities by enabling AI-powered threat detection, automated remediation, and zero trust access to internal applications through device trust verification. As enterprises manage increasingly distributed workforces and device fleets, endpoints have emerged as both the operational hub of IT and the … More → The post ManageEngine expands Endpoint Central with EDR and secure access appeared first on Help Net Security.
http://news.poseidon-us.com/TRYWRk

Tufin introduces AI agents to take on network security work

Tufin is launching a new collection of AI agents designed to take on network security tasks for teams that are already stretched thin. This helps free up scarce expertise to focus on higher-level risks, critical decisions, and defending the enterprise. Enterprise infrastructure is becoming more dynamic, decentralized, and harder to secure. Tufin’s Network Connectivity Graph, combined with its proven automation playbooks, provides the trusted data and control layer needed to support agent-driven network security at … More → The post Tufin introduces AI agents to take on network security work appeared first on Help Net Security.
http://news.poseidon-us.com/TRYWQp

Cybercriminals scale up, government sector hit hardest

Government agencies faced the highest volume of cyberattack campaigns in 2025, according to new findings from HPE Threat Labs, which tracked 1,186 active campaigns over the course of the year. The data covers activity observed between January 1 and December 31, 2025, and reflects a broad mix of sectors and attack types. Top sectors targeted by threat campaigns in 2025 (Source: HPE) AI and automation drive faster, more powerful cyberattacks Government agencies were targeted in … More → The post Cybercriminals scale up, government sector hit hardest appeared first on Help Net Security.
http://news.poseidon-us.com/TRYSYm

Stop building security goals around controls

In this Help Net Security interview, Devin Rudnicki, CISO at Fitch Group, argues that security strategy fails when it loses its connection to business outcomes. Rudnicki walks through how to align security goals with corporate priorities, why CISOs must present risk in terms leadership can act on, and how to balance innovation speed with measured risk. She outlines three metrics every security program should track: value, risk, and maturity. Rudnicki also addresses where maturity models … More → The post Stop building security goals around controls appeared first on Help Net Security.
http://news.poseidon-us.com/TRYSYj

Global fraud losses climb to $442 billion

Online fraud is reaching more victims and generating larger losses, driven by digital tools and organized networks operating across borders. Global trends in financial fraud (Source: Interpol) In INTERPOL’s March 2026 Global Financial Fraud Threat Assessment, financial fraud sits among the top five global crime threats, with a 54% rise in fraud related Notices and Diffusions from 2024 to 2025. “Estimating the financial cost of fraud is challenging for a number of reasons, including significant … More → The post Global fraud losses climb to $442 billion appeared first on Help Net Security.
http://news.poseidon-us.com/TRYSXD