Blog

How to prioritize AI agent security by business impact

Your CEO calls about an AI agent security incident in finance. He wants to know whether money moved, whether financial data was exposed, who owned the agent and why it had this level of access. The agent was connected to a spend management application to reconcile invoices, summarize vendor contracts and flag unusual payment activity. The breakdown occurred when the employee who configured it left and the OAuth grant remained active, allowing the agent to … More → The post How to prioritize AI agent security by business impact appeared first on Help Net Security.
http://news.poseidon-us.com/TTMxr1

Securing the inbox: Where identity, brand and security meet

Getting a verified logo to appear next to your email has traditionally meant having to work with two separate entities. You have to work with a DMARC partner for setting up DMARC and BIMI, then use a trusted Certificate Authority (CA) to purchase a Mark Certificate, and this means having to source a trusted partner for both which delays the project unnecessarily. Red Sift and GlobalSign have now folded both halves into a single package. … More → The post Securing the inbox: Where identity, brand and security meet appeared first on Help Net Security.
http://news.poseidon-us.com/TTMvph

Omnigent: Open-source AI agent framework and meta-harness

Plenty of developers now keep several coding agents close at hand, reaching for Claude Code on one task and Codex or Cursor on the next. Each tool arrives with its own command line, its own handling of credentials, and its own way of running shell commands against a working directory. That spread leaves teams with a governance gap around where agent actions land and how much they cost. Omnigent, an open-source project, sits one level … More → The post Omnigent: Open-source AI agent framework and meta-harness appeared first on Help Net Security.
http://news.poseidon-us.com/TTMvpg

Product showcase: Is that text a scam? Malwarebytes Mobile Security can help you find out

Malwarebytes Mobile Security for iPhone combines scam prevention, privacy protection, and identity monitoring in a single app. It evaluates a device’s security posture, provides recommendations to improve protection, and is available for Windows, macOS, Android, iOS, and ChromeOS. Installation and security dashboard Installing Malwarebytes Mobile Security from the App Store takes only a few moments. After creating an account, the app guides users through enabling Web Protection, Call Protection, Scam Guard, and the VPN. The … More → The post Product showcase: Is that text a scam? Malwarebytes Mobile Security can help you find out appeared first on Help Net Security.
http://news.poseidon-us.com/TTMvpf

Flipper Zero firmware development gets a fresh set of community rules

Owners of the Flipper Zero, the pocket-sized wireless testing tool, spent recent weeks worried that its official firmware had gone quiet. Pavel Zhovner, CEO of Flipper Devices, moved to settle that concern with word that the company has set aside staff to keep the firmware maintained and to support outside contributions. The work will run under a fresh set of rules covering feature requests, code submissions, and testing. How the quiet period began The firmware … More → The post Flipper Zero firmware development gets a fresh set of community rules appeared first on Help Net Security.
http://news.poseidon-us.com/TTMvns

The future of payment fraud could be automated

Payment fraud is becoming more organized as criminal groups use fake websites, large-scale operations, and, in some cases, forced labor to steal money and personal information. Advances in agentic AI could automate many stages of payment fraud, from collecting and assembling stolen credentials to deploying password-cracking tools. What kind of payment fraud concerns you most? (Source: Capco) CAPCO’s “US Payment Fraud Survey” found that consumers increasingly value fraud protection when choosing payment providers. Security was … More → The post The future of payment fraud could be automated appeared first on Help Net Security.
http://news.poseidon-us.com/TTMsmV

New ClamAV security patch closes seven scanner bugs dating back two decades

Open source antivirus scanning sits inside mail gateways, file upload checks, and endpoint tooling at organizations of every size. Much of that work runs through ClamAV, the scanning engine maintained by Cisco’s Talos group. The project released two patch versions, 1.5.3 and 1.4.5, carrying fixes for seven security flaws along with smaller hardening changes. Packer and PE parsing flaws Most of the patched bugs sit in the code that unpacks and parses executable formats, the … More → The post New ClamAV security patch closes seven scanner bugs dating back two decades appeared first on Help Net Security.
http://news.poseidon-us.com/TTMmTW