Blog

New Intel 471 assessment helps organizations measure CTI program maturity

Intel 471 has announced its new Cyber Threat Intelligence (CTI) Maturity Pulse Check, a free, lightweight self-assessment for practitioners based on the Cyber Threat Intelligence Capability Maturity Model (CTI-CMM v1.3). The CTI Maturity Pulse Check offers a quick, structured way for organizations to reflect on their CTI program’s current capabilities, highlight areas that warrant a closer look and help security teams prepare for a more thorough assessment using the official CTI-CMM tool. “The CTI-CMM is … More → The post New Intel 471 assessment helps organizations measure CTI program maturity appeared first on Help Net Security.
http://news.poseidon-us.com/TSz7T4

Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520)

Ivanti has patched two critical vulnerabilities (CVE-2026-10520 and CVE-2026-10523) in Ivanti Sentry and has urged customers to implement the fix right away. Though the vulnerabilities are not known to be actively exploited, security researchers have already released technical details about the former, which may be used by attackers to craft a working exploit. About Ivanty Sentry and the vulnerabilities Ivanti Sentry is a security gateway that acts as a gatekeeper between mobile devices outside of … More → The post Critical Ivanti Sentry flaw allows root-level remote code execution (CVE-2026-10520) appeared first on Help Net Security.
http://news.poseidon-us.com/TSz7SG

New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials

A new Browser-in-the-Browser (BitB) phishing campaign is targeting Microsoft 365 users with fake login popups designed to closely mimic legitimate browser authentication windows, according to Palo Alto Networks Unit 42. The attack relies on a fake browser window embedded within a webpage. Victims who click a Microsoft sign-in button are presented with what appears to be a standard authentication prompt, complete with a spoofed Microsoft OAuth URL and a login form. Phishing page displaying a … More → The post New Browser-in-the-Browser phishing uses fake login popups to steal Microsoft 365 credentials appeared first on Help Net Security.
http://news.poseidon-us.com/TSz1GK

Building reusable workflows with custom agents in Copilot CLI

Developers spend much of their working time in the terminal, generating commands, debugging issues, and running scripts close to their systems. Repeated terminal work tends to pile up small steps such as re-running the same commands, re-explaining context, and translating logs into a form a team can act on. Custom agents in GitHub Copilot CLI address these patterns by turning repeated tasks into reusable workflows. “A custom agent is a Copilot agent that can be … More → The post Building reusable workflows with custom agents in Copilot CLI appeared first on Help Net Security.
http://news.poseidon-us.com/TSz1GC

Record Microsoft Patch Tuesday, fresh zero-day

Microsoft marked its largest-ever Patch Tuesday this month, by shipping fixes for nearly 200 vulnerabilities. Within hours, “Nightmare Eclipse”, the researcher behind weeks of escalating Windows exploit releases, dropped a proof-of-concept exploit for a new zero-day: “RoguePlanet”, which abuses a race condition in Windows Defender to spawn a command shell running with SYSTEM-level privileges. Various researchers have confirmed that the PoC exploit works to achieve local privilege escalation. “In initial development, it was confirmed that … More → The post Record Microsoft Patch Tuesday, fresh zero-day appeared first on Help Net Security.
http://news.poseidon-us.com/TSz1Dc

A classic brain test exposed AI’s biggest weakness

Researchers gave top AI models a classic attention test used in psychology and found a major flaw. While the models could correctly name colors in short lists, their performance deteriorated sharply as the task became longer and more complex. Some leading systems fell from over 90% accuracy to nearly complete failure.
http://news.poseidon-us.com/TSyxcS

Cyber insurance policyholders facing heavier scrutiny in underwriting, claims

A multiyear lull in insurance rates and insurers’ over-dependence on large U.S. policyholders have led to more restrictions and exclusions in coverage.
http://news.poseidon-us.com/TSyvv4

Rubrik launches Autonomous Business Recovery to rebuild cloud applications after cyberattacks

Rubrik has unveiled Autonomous Business Recovery (ABR) for Cloud Applications, the agentic cyber resilience solution that recovers cloud applications from data to network, identity and configurations. The end result is a rebuild of an organization’s Minimum Viable Business (MVB) at machine speed. At a time when powerful AI models collapse the window between vulnerability discovery and exploitation from months to seconds, the imperative to plan in advance for cyber resilience has never been greater. ABR … More → The post Rubrik launches Autonomous Business Recovery to rebuild cloud applications after cyberattacks appeared first on Help Net Security.
http://news.poseidon-us.com/TSyvgt

F5 adds AI-powered threat detection and API security for on-premises environments

F5 has introduced new web application and API protection (WAAP) capabilities for its Application Delivery and Security Platform. The company said the updates are intended to address a threat landscape in which AI models can accelerate the time between vulnerability discovery and exploitation, giving attackers faster access to offensive capabilities. The new features expand the AI-powered web application firewall (WAF) functionality in F5 Distributed Cloud Services. “Frontier AI has collapsed the window between discovery and … More → The post F5 adds AI-powered threat detection and API security for on-premises environments appeared first on Help Net Security.
http://news.poseidon-us.com/TSytFR

Anthropic’s Claude Fable 5 is out for public use, with safeguards for high-risk requests

Days after publishing research on how advanced AI systems could amplify cyber operations in the wrong hands, Anthropic released Claude Fable 5, a Mythos-class model for general use. “Releasing a model this capable comes with risks. Without safeguards, Fable 5’s capabilities in areas like cybersecurity could be misused to cause serious damage,” Anthropic wrote. The company said Mythos-class models possess advanced cybersecurity and research biology capabilities that can provide information and guidance beyond what is … More → The post Anthropic’s Claude Fable 5 is out for public use, with safeguards for high-risk requests appeared first on Help Net Security.
http://news.poseidon-us.com/TSytFC