Blog

Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware

Midnight Blizzard, the Russian threat actor tied to the country’s foreign intelligence service, has spent months targeting users of public Wi-Fi networks at places like hotels and conference centers, according to new findings from Microsoft Threat Intelligence. Overview of the CaptiveCrunch attack flow (Source: Microsoft) Microsoft named the campaign CaptiveCrunch and identified two malware strains behind it, CornFlake and ChocoShell. Building on earlier research from security firm ReliaQuest, published July 23, Microsoft ties this activity … More → The post Russian hackers abuse hotel Wi-Fi networks to steal Microsoft 365 credentials and deploy malware appeared first on Help Net Security.
http://news.poseidon-us.com/TTrmbc

AI incidents cost enterprises $2M or more, and the biggest shadow AI culprit is IT

Among enterprise decision-makers, 47% named IT and infrastructure as the top source of shadow AI, per a WitnessAI survey.
http://news.poseidon-us.com/TTrk3C

Indusface SwyftComply AI enables autonomous virtual patching for AI-discovered flaws

Indusface has announced SwyftComply AI, an autonomous vulnerability remediation solution that virtually patches vulnerabilities surfaced by AI-assisted pentesting. Artificial intelligence has changed the economics of application security. AI-powered security agents now uncover exponentially more vulnerabilities than ever before. Yet remediation has not accelerated. Security teams are overwhelmed by findings while remediation remains constrained by engineering bandwidth. The cybersecurity industry has entered a new phase: the race has moved from finding vulnerabilities to protecting applications before … More → The post Indusface SwyftComply AI enables autonomous virtual patching for AI-discovered flaws appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYm

ESET introduces new AI capabilities for autonomous agent security

ESET is expanding its AI capabilities across threat detection, investigations, threat protection, and security operations, delivering added value to customers through built-in innovations rather than separate add-on solutions. “AI is a new class of actor inside the company – reading, writing, making decisions and executing. As such, it deserves the same security attention as users and endpoints, because it behaves like both at once,” said Kamil Pšenák, Senior AI Product Manager at ESET. “It is … More → The post ESET introduces new AI capabilities for autonomous agent security appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYl

Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response

Joinable Labs launched Joinable Security, the first domain on the Joinable platform, with two products: Joinable Threat Map, a free utility that lets the security community map, analyze, and share evolving adversary behavior, and Joinable Runbooks, an enterprise platform that turns an organization’s security response documentation into governed knowledge and the agents that act on it. Both are built on Propagator, Joinable’s Trusted Knowledge Foundry. Security teams face a two-sided problem: adversary techniques evolve constantly, … More → The post Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYj

Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs

Securonix has announced expanded cybersecurity cost reduction, expanded Threat Analytics for Microsoft Sentinel, and new Governed AI Agent Detection and Response capabilities. The additions extend the Securonix Unified Defense SIEM platform to help enterprises and managed security providers control data costs, improve detection coverage and response, and govern risks created by enterprise AI adoption. Security teams face three pressures at once. Telemetry volumes and SIEM costs continue to rise. Threats increasingly span identity, cloud, endpoint, … More → The post Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYf

Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package

Uptime Kuma checks whether a website, a Docker container, a DNS record, or a Steam game server is still answering, and pushes a message to Telegram, Slack, or email when one stops. The self-hosted monitoring tool is MIT licensed, runs in a container or on Node.js, and has 89,800 stars and 8,200 forks on GitHub. The change with the widest reach in version 2.5.0 is that the project now sets a 14-day cooldown on npm … More → The post Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYY

Legit Security VibeGuard 2.0 brings endpoint security and real-time guardrails to AI coding agents

Legit Security has unveiled VibeGuard 2.0, bringing a new endpoint security capability that seamlessly discovers and integrates with coding agents, secures them and delivers a frictionless developer experience. Launched in Q4 2025, Legit VibeGuard was the solution designed to secure AI-generated code at the moment of creation and place guardrails on coding agents. This latest release changes the developer experience and tightens security of AI-first coding and coding agents. Unlike IDE extension solutions that are … More → The post Legit Security VibeGuard 2.0 brings endpoint security and real-time guardrails to AI coding agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhXz