Blog

OT teams are losing the time advantage against industrial threat actors

In many industrial environments, internet-facing gateways, remote access appliances, and boundary systems sit close enough to production networks that attackers can move from IT intrusion to operational disruption with limited resistance. Dragos’ 2026 OT/ICS Year in Review describes a threat landscape where adversaries are spending more time learning how physical processes work and less time treating OT access as a passive foothold. A shift in 2025 involved multiple state-aligned groups moving into control-loop mapping. That … More → The post OT teams are losing the time advantage against industrial threat actors appeared first on Help Net Security.
http://news.poseidon-us.com/TR0sZ6

Pressure builds on Grok AI, Ireland launches investigation

The Irish Data Protection Commission (DPC) opened an investigation into X over concerns that its Grok AI chatbot was used to generate sexualized deepfakes. The investigation focuses on the apparent creation and publication of potentially harmful, non-consensual intimate or sexualised images on X using generative AI tools linked to the platform’s Grok LLM. According to the regulator, the content may involve the personal data of users in the EU and EEA, including children. The probe … More → The post Pressure builds on Grok AI, Ireland launches investigation appeared first on Help Net Security.
http://news.poseidon-us.com/TR0sZ4

HaystackID delivers audit-ready AI governance for high-risk, regulated environments

HaystackID has released HaystackID AI Governance Services, a new portfolio designed to help organizations move from AI principles and policies to an execution-ready governance operating model. The launch comes as organizations face converging regulatory timelines. EU AI Act obligations have been in effect since February 2025, with additional high-risk system requirements phasing in through August 2027 and administrative fines reaching €35 million or 7% of global annual turnover. In the U.S., Colorado’s SB 24-205, one … More → The post HaystackID delivers audit-ready AI governance for high-risk, regulated environments appeared first on Help Net Security.
http://news.poseidon-us.com/TR0sYv

Impart enables safe, in-app enforcement against AI-powered bots

Impart Security has launched Programmable Bot Protection, a runtime approach to bot defense that brings detection and enforcement together within the application. Impart makes enforcement operational by enabling teams to see what would be blocked before turning it on. Bot protection split detection and enforcement across two tools that were never designed to work together. Web Application Firewalls (WAFs) attempted bot detection at the edge but lacked behavioral intelligence. Dedicated bot vendors improved detection with … More → The post Impart enables safe, in-app enforcement against AI-powered bots appeared first on Help Net Security.
http://news.poseidon-us.com/TR0sYq

Firmware-level Android backdoor found on tablets from multiple manufacturers

A new Android backdoor embedded directly in device firmware can quietly take control of apps and harvest data, Kaspersky researchers found. The malware, named Keenadu, was discovered during an investigation into earlier Android threats and appears to have been inserted during the firmware build process, not after devices reached users.  How the backdoor works The research team said they found the backdoor code in the firmware of Android-based tablets belonging to several brands. “The … More → The post Firmware-level Android backdoor found on tablets from multiple manufacturers appeared first on Help Net Security.
http://news.poseidon-us.com/TR0sXQ

What CIOs need to know about AIBOMs

AI bills of materials can help leaders gain clarity on how AI systems generate their output, easing compliance and regulation efforts as complexity rises.
http://news.poseidon-us.com/TR0mH5

The surprisingly simple flaw that can undermine quantum encryption

Quantum key distribution promises ultra-secure communication by using the strange rules of quantum physics to detect eavesdroppers instantly. But even the most secure quantum link can falter if the transmitter and receiver aren’t perfectly aligned. Researchers have now taken a deep dive into this often-overlooked issue, building a powerful new analytical framework to understand how tiny beam misalignments—caused by vibrations, turbulence, or mechanical flaws—disrupt secure key generation.
http://news.poseidon-us.com/TR0kjj

Phobos ransomware affiliate arrested in Poland

Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) detained a 47-year-old man suspected of creating, acquiring, and sharing computer programs used to unlawfully obtain information stored in computer systems. He faces a potential prison sentence of up to five years. The arrest took place in the Małopolska Voivodeship as part of a joint operation conducted by CBZC officers from the Katowice and Kielce branches. During a search of the suspect’s apartment, officers recovered a … More → The post Phobos ransomware affiliate arrested in Poland appeared first on Help Net Security.
http://news.poseidon-us.com/TR0h5V

Your encrypted data is already being stolen

Quantum computing is often treated as a distant, theoretical cybersecurity issue. According to Ronit Ghose, Global Head, Future of Finance of Citi Institute, that mindset is already putting financial institutions at risk. The biggest misconception, he says, is that quantum threats begin on a single future Q-day, when quantum machines suddenly crack encryption. In reality, adversaries can harvest encrypted data today and decrypt it later, creating long-term exposure for banks handling sensitive identity and transaction … More → The post Your encrypted data is already being stolen appeared first on Help Net Security.
http://news.poseidon-us.com/TR0XCJ