Blog

Citrix expands Platform Flex with observability and secure developer services

Citrix has announced new services for Citrix Platform Flex, extending its flexible credit model with additional options for delivering, monitoring and securing digital work environments. The new offerings include Citrix Experience Insights Flex, a Citrix-managed observability service powered by Splunk Cloud Platform that turns high-resolution workspace telemetry into operational insights, and Citrix SecurSpaces Flex, a hosted cloud platform for code development and agentic workloads that provides secure development environments without requiring enterprises to build and … More → The post Citrix expands Platform Flex with observability and secure developer services appeared first on Help Net Security.
http://news.poseidon-us.com/TTyX4G

Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G

Researchers have found that compromised or malicious SIM cards can issue commands to some smartphones and cellular-connected devices, allowing attackers to steal information, disrupt communications, downgrade connections to 2G, and in some cases execute code. Tomasz Piotr Lisowski and Dr Marius Muench of the University of Birmingham, working with Kristian Covic from Fuzzware, traced this to a legitimate function already built into the cellular spec. That function is Proactive SIM. It lets a card send … More → The post Malicious SIMs can hijack smartphones, steal files, and lock them onto 2G appeared first on Help Net Security.
http://news.poseidon-us.com/TTyX3q

Ransomware gangs don’t need control system access to disrupt industrial production

Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial organizations in the second quarter of 2026, up 12% from 1,020 in Q1. The figures come from publicly disclosed victim data and posts made by ransomware groups on their data leak sites. Manufacturing accounted for 747 incidents, … More → The post Ransomware gangs don’t need control system access to disrupt industrial production appeared first on Help Net Security.
http://news.poseidon-us.com/TTyRrr

Locking your ssh-agent exposed local-only keys until OpenSSH 10.5

Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the check that tells the agent whether a request came from your own machine or arrived down a forwarded connection from a remote server. The fix shipped today in OpenSSH 10.5. The agent holds your decrypted private keys so you are not retyping a passphrase every few minutes, and agent forwarding … More → The post Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 appeared first on Help Net Security.
http://news.poseidon-us.com/TTyRrc

Secure development can help turn the tables as AI alters cyber landscape

A top Microsoft executive said a shift toward memory safety and other preventative measures can limit the ability to exploit flawed software.
http://news.poseidon-us.com/TTyRHW

GPT-5.6-Cyber refuses security researchers’ requests far less often

GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program for cybersecurity professionals. “The GPT‑5.6‑Cyber model is trained to improve performance on certain cybersecurity workflows involving exploit development and advanced security research,“ the company said. OpenAI built an internal benchmark to track how often … More → The post GPT-5.6-Cyber refuses security researchers’ requests far less often appeared first on Help Net Security.
http://news.poseidon-us.com/TTyF9k

Who will be the Stanislav Petrov in your organization?

The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported that the United States had launched nuclear missiles towards the Soviet Union. The officer on duty, Stanislav Petrov, did something computers still struggle to do. He applied context, experience, and human judgement to determine the warning … More → The post Who will be the Stanislav Petrov in your organization? appeared first on Help Net Security.
http://news.poseidon-us.com/TTyF9j

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws nobody had reported before. Developers have confirmed 83 of them, and 81 now carry CVE numbers. The most serious one lets an attacker take over a subscriber’s data session, so the network delivers that subscriber’s traffic to the attacker instead of to the internet. … More → The post An AI tool found 84 flaws in 5G network software and 23 of them still have no fix appeared first on Help Net Security.
http://news.poseidon-us.com/TTyF9g

Previously unseen entry vector used to breach Polish energy plant

The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a dedicated mobile network that a Distribution System Operator (DSO), the company running the local electricity grid, sets up with a mobile carrier. Illustrative use of a private APN in distributed energy resources (Source: CERT Polska) The … More → The post Previously unseen entry vector used to breach Polish energy plant appeared first on Help Net Security.
http://news.poseidon-us.com/TTyF9d