Blog

Congress seems frozen by the Trump administration bulldozer

“We’re going to find out one way or another exactly how Republicans are going to move forward,” said WTOP Capitol Hill correspondent Mitchell Miller. The post Congress seems frozen by the Trump administration bulldozer first appeared on Federal News Network.
http://news.poseidon-us.com/THtzX3

Veridas helps companies combat AI-driven injection attacks

Generative AI is fueling a new wave of identity fraud, making digital security more critical than ever. In response, Veridas has introduced an advanced injection attack detection capability to combat the growing threat of synthetic identities. This new feature strengthens fraud prevention by combining injection detection with liveness verification across face, voice, and document authentication. According to the Veridas Identity Fraud Report 2024, 85% of financial fraud cases now involve synthetic identities. The UK government … More → The post Veridas helps companies combat AI-driven injection attacks appeared first on Help Net Security.
http://news.poseidon-us.com/THtylj

Malicious ML models found on Hugging Face Hub

Researchers have spotted two machine learning (ML) models containing malicious code on Hugging Face Hub, the popular online repository for datasets and pre-trained models. Once one of them is downloaded and executed on the developer’s machine, the malicious payload checks if it is being executed on a Windows, Linux or a system using the Mach kernel (e.g., macOS). Depending on the results of the check, it uses different programming logic to create a reverse shell … More → The post Malicious ML models found on Hugging Face Hub appeared first on Help Net Security.
http://news.poseidon-us.com/THtyhr

How Mondelēz laid the groundwork for a major digital overhaul

The snack maker spent 18 months gearing up for transformation, which will include data center exits, workload migrations, generative AI exploration and an ERP upgrade.
http://news.poseidon-us.com/THtprp

Reminder: 7-Zip & MoW, (Mon, Feb 10th)

CVE-2025-0411 is a vulnerability in 7-zip that has been reported to be exploited in recent attacks. The problem is that Mark-of-Web (MoW) isn't propagated correctly: when extracted, a file inside a ZIP file inside another ZIP file will not have the MoW propagated from the outer ZIP file.
http://news.poseidon-us.com/THtfHT

February 2025 Patch Tuesday forecast: New directions for AI development

The new year has started with a whirlwind of activity, and one of the hottest topics in the news is the increasing emphasis on AI. DeepSeek ad Stargate DeepSeek took the world by storm as millions of copies were downloaded to personal devices, but soon security concerns arose as to how the chatbot used personal data. As research continues, many countries have banned the app from sensitive systems, and other countries and organizations, including the … More → The post February 2025 Patch Tuesday forecast: New directions for AI development appeared first on Help Net Security.
http://news.poseidon-us.com/THtX4S

Security validation: The new standard for cyber resilience

Security validation has officially turned a corner. Once considered a “nice-to-have” it’s now a top priority for security leaders worldwide. This shift has been accelerated by frameworks like Gartner’s Continuous Threat Exposure Management (CTEM), introduced in 2022, which emphasizes the need for continuous testing and validation of security controls. But what exactly is security validation, and why has it become so critical? In simple terms, it’s the process of “battle-testing” your security defenses to ensure … More → The post Security validation: The new standard for cyber resilience appeared first on Help Net Security.
http://news.poseidon-us.com/THtX3T

Political campaigns struggle to balance AI personalization and voter privacy

In this Help Net Security interview, Mateusz Łabuz, researcher at the IFSH, discusses the balance between using AI for personalized political campaigns and protecting voter privacy. Łabuz also discusses the potential of AI in fact-checking, the regulatory landscape, and the influence of AI on campaign strategies in authoritarian regimes. How can campaigns balance leveraging AI for personalization with concerns about eroding voter privacy, particularly in jurisdictions with weaker data protection laws? One way to counteract … More → The post Political campaigns struggle to balance AI personalization and voter privacy appeared first on Help Net Security.
http://news.poseidon-us.com/THtTht

Beelzebub: Open-source honeypot framework

Beelzebub is an open-source honeypot framework engineered to create a secure environment for detecting and analyzing cyber threats. It features a low-code design for seamless deployment and leverages AI to emulate the behavior of a high-interaction honeypot. “I created Beelzebub because my research activities require deploying numerous honeypots from different families (e.g., WordPress, Joomla, SSH, MySQL). With Beelzebub, configuring and managing this is streamlined through simple YAML files, enabling rapid setup and scalability,” Mario Candela, … More → The post Beelzebub: Open-source honeypot framework appeared first on Help Net Security.
http://news.poseidon-us.com/THtThN

Evolving uses of tokenization to protect data

Tokenization replaces sensitive data, such as credit card numbers or personal identifiers, with unique, non-sensitive tokens with no exploitable value. This method helps protect sensitive information by ensuring that the actual data is never stored or transmitted, reducing the risk of breaches. Unlike encryption, which can be reversed with a key, tokenized data is only meaningful within a secure system that maps tokens back to the original values. In this Help Net Security video, Ruston … More → The post Evolving uses of tokenization to protect data appeared first on Help Net Security.
http://news.poseidon-us.com/THtTgB