Blog

Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response

Joinable Labs launched Joinable Security, the first domain on the Joinable platform, with two products: Joinable Threat Map, a free utility that lets the security community map, analyze, and share evolving adversary behavior, and Joinable Runbooks, an enterprise platform that turns an organization’s security response documentation into governed knowledge and the agents that act on it. Both are built on Propagator, Joinable’s Trusted Knowledge Foundry. Security teams face a two-sided problem: adversary techniques evolve constantly, … More → The post Joinable Labs unveils Joinable Security for threat intelligence and AI-driven response appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYj

Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs

Securonix has announced expanded cybersecurity cost reduction, expanded Threat Analytics for Microsoft Sentinel, and new Governed AI Agent Detection and Response capabilities. The additions extend the Securonix Unified Defense SIEM platform to help enterprises and managed security providers control data costs, improve detection coverage and response, and govern risks created by enterprise AI adoption. Security teams face three pressures at once. Telemetry volumes and SIEM costs continue to rise. Threats increasingly span identity, cloud, endpoint, … More → The post Securonix enhances Unified Defense SIEM with AI agent detection and lower data costs appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYf

Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package

Uptime Kuma checks whether a website, a Docker container, a DNS record, or a Steam game server is still answering, and pushes a message to Telegram, Slack, or email when one stops. The self-hosted monitoring tool is MIT licensed, runs in a container or on Node.js, and has 89,800 stars and 8,200 forks on GitHub. The change with the widest reach in version 2.5.0 is that the project now sets a 14-day cooldown on npm … More → The post Uptime Kuma 2.5.0 waits two weeks before trusting a new npm package appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhYY

Legit Security VibeGuard 2.0 brings endpoint security and real-time guardrails to AI coding agents

Legit Security has unveiled VibeGuard 2.0, bringing a new endpoint security capability that seamlessly discovers and integrates with coding agents, secures them and delivers a frictionless developer experience. Launched in Q4 2025, Legit VibeGuard was the solution designed to secure AI-generated code at the moment of creation and place guardrails on coding agents. This latest release changes the developer experience and tightens security of AI-first coding and coding agents. Unlike IDE extension solutions that are … More → The post Legit Security VibeGuard 2.0 brings endpoint security and real-time guardrails to AI coding agents appeared first on Help Net Security.
http://news.poseidon-us.com/TTrhXz

Tanium expands autonomous security across AI, exposure management and SecOps

Tanium has announced a series of new autonomous security capabilities across the Tanium Autonomous IT Platform. Spanning agentic AI, exposure management and security operations, the capabilities empower IT and security operators to stay ahead of an AI-accelerated threat landscape, safely, without losing control. “Tanium is the platform that governs and manages them with Tanium Atlas — where every action is auditable, boundaries are enforced, and everything is grounded in what’s actually happening on the endpoint … More → The post Tanium expands autonomous security across AI, exposure management and SecOps appeared first on Help Net Security.
http://news.poseidon-us.com/TTrdpQ

Microsoft shortens NuGet API key lifetime to improve supply chain security

Microsoft is reducing the lifetime of new NuGet.org API keys from 365 days to 30 days starting August 17, 2026, to improve the security of NuGet, its package repository for .NET developers. API keys created before August 17 will remain valid until November 1, after which developers will need to generate new keys or switch to NuGet Trusted Publishing. The change does not eliminate the risks associated with API keys, though it reduces the amount … More → The post Microsoft shortens NuGet API key lifetime to improve supply chain security appeared first on Help Net Security.
http://news.poseidon-us.com/TTrdp2

EU begins enforcing AI Act, putting AI models under the microscope

Europe’s fight to regulate AI models moved from paper to practice on 2 August 2026, when the European Commission’s AI Office and national authorities began enforcing the AI Act. On the same date, new transparency rules took effect, requiring certain AI systems to tell users when they’re interacting with AI and when content has been generated or altered by it. Under these rules, chatbots have to identify themselves as automated systems, deepfakes need a label, … More → The post EU begins enforcing AI Act, putting AI models under the microscope appeared first on Help Net Security.
http://news.poseidon-us.com/TTrXRd

Digital executive protection is a strategic imperative for CEOs

In this interview with Help Net Security, Brian Hill, Field CISO, Client Advisory for BlackCloak, explains how attackers reach companies through the personal lives of executives. He describes a case where a draft report sat in an executive’s personal email with no multifactor authentication, and traders acted on it before the news went public. He also covers a home network left open after an AV technician swapped cables, malware planted through hotel Wi-Fi, and why … More → The post Digital executive protection is a strategic imperative for CEOs appeared first on Help Net Security.
http://news.poseidon-us.com/TTrXRX

OWASP’s subtractive security project measures the attack paths you erased

An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outbound route to anywhere, a scripting engine sitting there for the taking. Christopher Frenz wants those capabilities deleted before anyone writes a detection rule for them. Frenz leads the OWASP Subtractive Security Top 10, a set of nine lists published alongside an engineering standard called Path Erasure Rate. Organizations that … More → The post OWASP’s subtractive security project measures the attack paths you erased appeared first on Help Net Security.
http://news.poseidon-us.com/TTrXQc