Blog

depthfirst adds pre-install protection against malicious dependencies

depthfirst has introduced Dependency Firewall, a product that reviews every open-source package being downloaded anywhere in a company and blocks the malicious ones before they reach the person or system that requested them. Developers, AI agents, and any employee using Claude, Codex, or other AI tools keep installing exactly as they do today, and nothing dangerous makes it through. Security teams can ensure that AI is rolled out safely across the company. Modern software runs … More → The post depthfirst adds pre-install protection against malicious dependencies appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2nG

PathSolutions brings on-premises AI troubleshooting to NetOps teams

PathSolutions has announced the launch of TotalView AI, a new capability within its TotalView platform that provides AI-driven troubleshooting for NetOps teams using network data analyzed on-premises. As enterprise networks become more distributed and complex, NetOps teams face increasing pressure to resolve issues quickly, often without the benefit of deep domain expertise. At the same time, many AI-driven monitoring solutions rely on sending limited datasets to the cloud, introducing latency, increasing cost, and restricting visibility. … More → The post PathSolutions brings on-premises AI troubleshooting to NetOps teams appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2nF

Cato cuts vulnerability protection time to 45 minutes with agentic threat research

Cato Networks announced a new capability that reduces time-to-protect for newly disclosed vulnerabilities to 45 minutes. The company attributes this reduction to the use of agentic threat research designed to accelerate protection against emerging exploits. Traditional appliance-based security depends on a slow customer-operated patching cycle: vendors develop protections, customers receive updates, teams test them, and thousands of distributed appliances must be upgraded or configured. In the AI era, that model cannot keep pace with exploit … More → The post Cato cuts vulnerability protection time to 45 minutes with agentic threat research appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2nC

Hyland platform innovations focus on AI governance, context, and agent oversight

Hyland has unveiled platform innovations designed to move AI from experimentation to enterprise-wide adoption. Powered by the Content Innovation Cloud, these advancements transform governed enterprise content into trusted, actionable intelligence that accelerates business outcomes. To meet the demands of global organizations, Hyland announced the general availability of the Enterprise Context Engine and introduced industry-specific ontologies that enrich organizational context for more accurate, domain-aware AI performance. Additionally, the company delivered Enterprise Agent Mesh, enabling governed orchestration … More → The post Hyland platform innovations focus on AI governance, context, and agent oversight appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2n8

Microsoft Defender Vulnerability Management gets a smarter exposure score

Microsoft Defender Vulnerability Management’s updated exposure score model adds vulnerability risk signals and asset context to help teams understand where risk is concentrated and which remediation actions are likely to have the greatest impact. The model is available in public preview. “The updated model addresses these customer pain points by combining vulnerability risk, exploitability signals, and asset context into a more representative exposure score. The goal is to help security teams move from a score … More → The post Microsoft Defender Vulnerability Management gets a smarter exposure score appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2n2

Horizon3.ai introduces Rapid Response to prioritize and verify vulnerability remediation

Horizon3.ai has introduced Rapid Response, a capability that helps organizations assess exposure to newly disclosed threats, prioritize remediation, and verify that vulnerabilities have been addressed. Security teams are inundated with vulnerability disclosures, threat intelligence feeds, exploit chatter, and vendor advisories, all demanding immediate attention. While tens of thousands of new vulnerabilities are disclosed each year, only a small fraction are actively exploited. Across more than 250,000 NodeZero security assessments, Horizon3.ai has consistently found that exploitability, … More → The post Horizon3.ai introduces Rapid Response to prioritize and verify vulnerability remediation appeared first on Help Net Security.
http://news.poseidon-us.com/TSq2lk

How NIST fumbled management of the National Vulnerability Database

A US federal watchdog has outlined how the National Institute of Standards and Technology (NIST) failed to effectively manage the growing backlog of unprocessed cybersecurity vulnerabilities in the National Vulnerability Database (NVD). How the NVD crisis unfolded The NVD was established in 2005 and serves as a central repository for cybersecurity vulnerability data. When security researchers or software vendors discover a flaw in a piece of software or hardware, they submit a report through the … More → The post How NIST fumbled management of the National Vulnerability Database appeared first on Help Net Security.
http://news.poseidon-us.com/TSpxsb

Dragos acquires Phosphorus to secure extended operational technology

Dragos has acquired Phosphorus, extending the Dragos Platform to protect billions of connected devices embedded across critical infrastructure and other operational networks. Operational environments have outgrown traditional OT boundaries. Power grids, pipelines, manufacturing facilities, and data centers now depend on an increasingly diverse mix of connected devices and digital systems. Traditional and non-traditional assets alike are woven throughout their operational environments. This expanded environment, OT systems and the billions of connected devices that have reshaped … More → The post Dragos acquires Phosphorus to secure extended operational technology appeared first on Help Net Security.
http://news.poseidon-us.com/TSpwJ4

Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257)

Authentication bypass vulnerabilities (CVE-2026-0257) in Palo Alto Networks’ firewalls that the company disclosed on May 13 have been targeted in “limited exploit attempts”. “Across multiple customers, Rapid7 observed successful exploitation via authentication probes using forged cookies, but the appliance accepted the cookie without a full VPN session being established in 8 out of 10 impacted [Managed Detection Response] customers.” The good news, though, is that the company hasn’t observed any indication of successful lateral movement … More → The post Hackers are exploiting Palo Alto GlobalProtect VPN authentication bypass (CVE-2026-0257) appeared first on Help Net Security.
http://news.poseidon-us.com/TSpwHk

The forgotten organ that could predict how long you live

A long-overlooked organ may hold surprising clues to healthy aging and cancer survival. Researchers at Mass General Brigham used AI to analyze CT scans from tens of thousands of adults and found that people with healthier thymuses—a small immune-system organ once thought to become largely irrelevant after childhood—lived longer and had substantially lower risks of heart disease, cancer, and death.
http://news.poseidon-us.com/TSprJZ