Blog

Data brokers are exposing medical professionals, and turning their personal lives into open files

Large amounts of personal information about medical professionals are available on people search sites. A new analysis by Incogni’s researchers shows how much data about doctors appears online and how easily it can be found. The findings should concern healthcare leaders who support staff safety, workforce protection, and clinical operations. Doctors have searchable profiles Researchers examined 786 medical doctors working in major U.S. hospitals. 97% of them appeared on at least one people search site. … More → The post Data brokers are exposing medical professionals, and turning their personal lives into open files appeared first on Help Net Security.
http://news.poseidon-us.com/TPdzVp

New infosec products of the week: December 5, 2025

Here’s a look at the most interesting products from the past week, featuring releases from BlackFog, Datadog, Forward Edge-AI, SandboxAQ, and Upwind. BlackFog releases ADX Vision to block data loss from unapproved AI use BlackFog announced the availability of its newest solution, ADX Vision. Designed to secure every endpoint and every LLM interaction, ADX Vision gives organizations the visibility and control needed to manage AI securely. Operating directly on the device, it detects shadow AI … More → The post New infosec products of the week: December 5, 2025 appeared first on Help Net Security.
http://news.poseidon-us.com/TPdxYn

ISC Stormcast For Friday, December 5th, 2025 https://isc.sans.edu/podcastdetail/9726, (Fri, Dec 5th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/TPdsh1

Remote Code Execution Vulnerability in React and Next.js Frameworks: December 2025

On December 3, 2025, the React team released a security advisory regarding a vulnerability, CVE-2025-55182, in the React server that could allow an unauthenticated, remote attacker to perform remote code execution on an affected device or system. For a description of this vulnerability, see the public React Security Advisory. Cisco’s standard practice is to update integrated third-party software components to later versions as they become available. This advisory will be updated as additional information becomes available. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-react-flight-TYw32Ddb Security Impact Rating: Critical CVE: CVE-2025-55182
http://news.poseidon-us.com/TPdmXx

Salesforce bets on IT automation as AI demand rises

The company’s “quarter of Agentforce” stretched into the following fiscal year, with Q3 revenue for the agentic AI product surpassing $500 million.
http://news.poseidon-us.com/TPdkPz

Snowflake deepens partnerships as customer AI use ticks up

As enterprises seek to build AI agents, vendors are partnering to expand data access, interoperability and AI functionality.
http://news.poseidon-us.com/TPdjBp

Seqwater seeking asset planning tool to overcome “functional limitations”

Intends to modify spreadsheet-based system with software.
http://news.poseidon-us.com/TPddcP

Phishing-resistant MFA leads ICAM progress as agencies tackle privilege risks, continuous monitoring 

New AI tools are helping agencies automatically flag anomalous activity, giving them much-needed visibility into identity risks. The post Phishing-resistant MFA leads ICAM progress as agencies tackle privilege risks, continuous monitoring  first appeared on Federal News Network.
http://news.poseidon-us.com/TPdYjN

Should CIOs let go of long-term planning cycles?

As businesses adapt to seismic technology shifts, leaders must find the balance between short-term response and shortsightedness.
http://news.poseidon-us.com/TPdPgm

Malicious Rust packages targeted Web3 developers

A malicious Rust crate (package) named evm-units, aimed at stealing cryptocurrency from unsuspecting developers, has been pulled from the official public package registry for the Rust programming language, but not before having been downloaded 7257 times. Another package (uniswap-utils) by the same author appeared to be benign, but depends on evm-units and calls it in one of its files. That package has been removed as well, after having been downloaded 7441 times, the crates.io team … More → The post Malicious Rust packages targeted Web3 developers appeared first on Help Net Security.
http://news.poseidon-us.com/TPdL3k