Blog

Are grocers making smart investments in back-end AI?

Retailers should lean into tech partnerships to alleviate operational pain in the short term, but they should also lay the rails for agentic operations, experts said.
http://news.poseidon-us.com/TTf20s

AI agents tricked into recommending malicious GitHub repositories

Roughly 7,600 malicious GitHub repositories were uncovered, more than 800 of them posing as AI Skills or Model Context Protocol (MCP) servers, in a wave that peaked in April 2026, according to Island. The scale of the FakeGit operation (Source: Island) The fake repositories are tied to about 6,600 accounts, around 1,400 of which were built around AI tools, agents, or workflows, and span individual and enterprise use, ranging from Gmail and WhatsApp integrations to … More → The post AI agents tricked into recommending malicious GitHub repositories appeared first on Help Net Security.
http://news.poseidon-us.com/TTdqQw

Teleport enhances Identity Security platform with new AI agent behavior controls

Teleport has expanded its Identity Security platform with three new capabilities designed to ensure that agent behavior remains within defined boundaries: Beams Session Summaries, Agentic Classifiers, and Risk Scoring. They give enterprises a foundational harness for identifying and preventing agent misalignment as autonomous agents take on greater responsibility inside production infrastructure. The announcement follows Teleport’s recent white paper, From Zero Trust to Agent Trust, which argues that zero trust is necessary but insufficient to govern … More → The post Teleport enhances Identity Security platform with new AI agent behavior controls appeared first on Help Net Security.
http://news.poseidon-us.com/TTdqQs

JadePuffer returns with ransomware built to target AI models and infrastructure

JadePuffer, the threat actor behind the recently documented extortion operation executed end-to-end by an AI agent, is now attempting to leverage ENCFORGE, novel ransomware created to target AI and machine learning (ML) infrastructure. The extortion contact embedded in the ransomware is the same one Sysdig researchers found when analyzing that prior campaign. “This is the same operator with a materially upgraded toolkit,” they noted. How JadePuffer first surfaced Earlier this month, Sysdig researchers revealed that … More → The post JadePuffer returns with ransomware built to target AI models and infrastructure appeared first on Help Net Security.
http://news.poseidon-us.com/TTdqQr