Blog

Malicious Rust packages targeted Web3 developers

A malicious Rust crate (package) named evm-units, aimed at stealing cryptocurrency from unsuspecting developers, has been pulled from the official public package registry for the Rust programming language, but not before having been downloaded 7257 times. Another package (uniswap-utils) by the same author appeared to be benign, but depends on evm-units and calls it in one of its files. That package has been removed as well, after having been downloaded 7441 times, the crates.io team … More → The post Malicious Rust packages targeted Web3 developers appeared first on Help Net Security.
http://news.poseidon-us.com/TPdL3k

SpecterOps and Tines partner to add native BloodHound and automated attack path workflows

SpecterOps and Tines announced a strategic partnership that brings native BloodHound integration to Tines, enabling customers to operationalize Attack Path Management through automated, AI-assisted workflows. This partnership combines SpecterOps’ identity Attack Path Management capabilities with Tines’ intelligent workflow platform, freeing security teams from repetitive tasks, making identity risks actionable and measurable, and empowering analysts by integrating AI-assisted workflows into their investigation. “We’re thrilled to be working with Tines,” said Justin Kohler, Chief Product Officer at … More → The post SpecterOps and Tines partner to add native BloodHound and automated attack path workflows appeared first on Help Net Security.
http://news.poseidon-us.com/TPdKzc

Zenity expands AI security platform with incident intelligence and agentic browser protection

Zenity expanded its AI security platform with incident-correlation intelligence, broader agentic browser coverage, and a new open-source tool for testing emerging LLM manipulation techniques. As organizations adopt AI agents, AI assistants and agentic browsers at scale, security teams face increasing difficulty understanding how incidents unfold across identities, workflows and environments. Traditional alerting provides signals, but not the narrative behind them. Zenity’s latest advancements provide a unified approach for detecting, analyzing and governing AI behaviors in … More → The post Zenity expands AI security platform with incident intelligence and agentic browser protection appeared first on Help Net Security.
http://news.poseidon-us.com/TPdKzJ

Darktrace / Email strengthens behavioral detection, DLP, and SOC integrations

Darktrace announced a series of enhancements to Darktrace / EMAIL designed to detect and stop attacks spanning communications channels, strengthen outbound email protections, and streamline SOC integrations. The new capabilities will help security teams catch sophisticated attacks that evade existing email tools, protect sensitive data, and preserve trust in digital communications, all while reducing operational complexity. New Darktrace research shows that even with multiple layers of email security in place, a significant share of dangerous … More → The post Darktrace / Email strengthens behavioral detection, DLP, and SOC integrations appeared first on Help Net Security.
http://news.poseidon-us.com/TPdKxQ

Coro 3.7 rolls out redesigned Actionboard, unified ticketing, and AI insights

Coro announced the latest release of its unified platform. Coro 3.7 introduces user interface enhancements designed to accelerate remediation and streamline security management for SMBs. Coro has further refined its Actionboard, equipping IT professionals with essential information while minimizing unnecessary distractions. “Coro 3.7 continues our mission to make robust security accessible to resource-constrained lean IT teams through enhanced usability and accelerated remediation,” said Joe Sykora, CEO of Coro. “Our redesigned Actionboard and Workspace Health Score … More → The post Coro 3.7 rolls out redesigned Actionboard, unified ticketing, and AI insights appeared first on Help Net Security.
http://news.poseidon-us.com/TPdFcK

Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182)

A critical vulnerability (CVE-2025-55182) in React Server Components (RSC) may allow unauthenticated attackers to achieve remote code exection on the application server, the React development team warned on Wednesday. The maximum-severity vulnerability was privately reported by Lachlan Davidson and has been fixed. At this moment, there are no public reports of it being exploited by attackers and no confirmed public PoC exploits (for now). Nevertheless, affected users have been advised to upgrade to a non-vulnerable … More → The post Max-severity vulnerability in React, Node.js patched, update ASAP (CVE-2025-55182) appeared first on Help Net Security.
http://news.poseidon-us.com/TPdCNP

CIOs grapple with role change amid AI influx

Nearly 2 in 3 tech chiefs say their roles have evolved in recent years as their focus has shifted to business outcomes.
http://news.poseidon-us.com/TPd7P3

Incode Deepsight targets deepfakes and synthetic identity threats

Incode has launched Deepsight, an AI defense tool that detects and blocks deepfakes, injected virtual cameras, and synthetic identity attacks. As AI systems increasingly interact and transact autonomously, the ability to instantaneously separate real people from AI-generated fakes becomes critical. Deepsight’s multi-modal AI analyzes video, motion, and depth data to expose inconsistencies that synthetic media cannot reproduce, all in under 100 milliseconds and without adding friction. “Deepfakes have evolved beyond novelty. They are now a … More → The post Incode Deepsight targets deepfakes and synthetic identity threats appeared first on Help Net Security.
http://news.poseidon-us.com/TPcy3W

SandboxAQ launches AI-SPM platform to expose shadow AI risks

SandboxAQ announced an AI-SPM offering that provides visibility into where AI is being used in organizations’ tech stacks and evaluates AI assets for exploitable weaknesses, insecure dependencies, and exposure risks such as prompt injection, data leakage, and unauthorized access. The offering is purpose-built to help organizations address the growing threat of “shadow AI” before it leads to material breaches. Recent SandboxAQ research reveals a widening blind spot in enterprise security: while 79% of organizations are … More → The post SandboxAQ launches AI-SPM platform to expose shadow AI risks appeared first on Help Net Security.
http://news.poseidon-us.com/TPcvnP

CIS, Astrix, and Cequence partner on new AI security guidance

The Center for Internet Security, Astrix Security, and Cequence Security announced a strategic partnership to develop new cybersecurity guidance tailored to the unique risks of AI and agentic systems. This collaborative initiative builds on the CIS Critical Security Controls (CIS Controls), extending its principles into AI environments where autonomous decision‑making, tool and API access, and automated threats introduce new challenges. The intent of the partnership includes initially developing two CIS Controls companion guides: one for … More → The post CIS, Astrix, and Cequence partner on new AI security guidance appeared first on Help Net Security.
http://news.poseidon-us.com/TPcsx3