Blog

OPNsense 26.1 brings updates to open-source firewall management

OPNsense, the open-source firewall and network security platform, reached version 26.1, adding a range of updates affecting management, traffic visibility, automation interfaces, and core services. Changes in firewall management and APIs Version 26.1, code-named Witty Woodpecker, introduces revisions to the firewall user experience and its automation interfaces. The live firewall log function was updated to provide administrators with faster insight into real-time traffic decisions. A redesigned Firewall Rules interface restructures how rules are created and … More → The post OPNsense 26.1 brings updates to open-source firewall management appeared first on Help Net Security.
http://news.poseidon-us.com/TQcyDf

AI tools break quickly, underscoring need for governance

Security firm Zscaler said it identified severe vulnerabilities in every enterprise tool it tested — sometimes on its first prompt.
http://news.poseidon-us.com/TQcslX

Amazon cuts 16K jobs citing ongoing culture shift

 The company tied the cuts back to the reorganization push that drove 14,000 layoffs in October. 
http://news.poseidon-us.com/TQcj4V

WinRAR vulnerability still a go-to tool for hackers, Mandiant warns

State-sponsored hackers and financially motivated attackers continue leveraging a critical WinRAR vulnerability (CVE-2025-8088) that’s been fixed over half a year ago. CVE-2025-8088 is a path traversal vulnerability that can be exploited via maliciously crafted RAR archives. “The exploit chain often involves concealing the malicious file within the ADS of a decoy file inside the archive. While the user typically views a decoy document (such as a PDF) within the archive, there are also malicious ADS … More → The post WinRAR vulnerability still a go-to tool for hackers, Mandiant warns appeared first on Help Net Security.
http://news.poseidon-us.com/TQccgV

Veracode’s platform enhancements help prevent software supply chain attacks

Veracode announced significant platform innovations introduced through the second half of 2025. Headlining the release is Package Firewall, a preventive control for software supply chains, advancing the company’s mission to help organizations run secure software from code to cloud. With supply chain-related third-party breaches doubling year over year— from 15 to 30 percent according to the Verizon 2025 Data Breach Investigations Report— the need to strengthen security across the software ecosystem has never been greater. … More → The post Veracode’s platform enhancements help prevent software supply chain attacks appeared first on Help Net Security.
http://news.poseidon-us.com/TQccft

Odd WebLogic Request. Possible CVE-2026-21962 Exploit Attempt or AI Slop?, (Wed, Jan 28th)

I was looking for possible exploitation of CVE-2026-21962, a recently patched WebLogic vulnerability. While looking for related exploit attempts in our data, I came across the following request:
http://news.poseidon-us.com/TQcYSs

MIND DLP for Agentic AI protects sensitive data and controls AI access

MIND announced DLP for Agentic AI, a data-centric approach to AI security designed to help organizations safely achieve the business value of agentic AI by ensuring sensitive data and AI systems interact safely and responsibly. Agentic AI can autonomously create, access, transform and share data across SaaS applications, local devices, homegrown systems and third-party tools. While this unlocks meaningful gains in speed and scale, it also introduces new risks. Without clear visibility and controls, data … More → The post MIND DLP for Agentic AI protects sensitive data and controls AI access appeared first on Help Net Security.
http://news.poseidon-us.com/TQcRch

Rein Security launches to provide protection inside application production environments

Rein Security emerged from stealth to address blind spots in application and AI security. Building on an initial $8 million seed round led by Glilot Capital, Rein delivers a patent pending technology that provides real-time context and protection inside application production environments. Enterprises across a variety of industries, such as financial and other business-critical services, rely on Rein to protect applications running in production, including Lemonade and HiBob. The AppSec landscape is undergoing rapid change … More → The post Rein Security launches to provide protection inside application production environments appeared first on Help Net Security.
http://news.poseidon-us.com/TQcRbW

Teaching employees to use AI could add up to $6.6T to US economy

Adding training to AI implementation, rather than replacing workers, could help drive the ROI companies have been missing, according to a Pearson report.
http://news.poseidon-us.com/TQcJlB

n8n adds Chat Hub to centralize AI access inside automation workflows

Teams using automation platforms are starting to treat conversational AI as another operational interface. That change is reflected in a new feature from n8n, which has introduced a built-in Chat Hub designed to let users interact with AI models and internal automation through a single chat interface. Chat Hub sits inside the n8n platform and gives users the ability to send prompts to LLMs, invoke workflow-backed agents, and receive responses without direct access to workflow … More → The post n8n adds Chat Hub to centralize AI access inside automation workflows appeared first on Help Net Security.
http://news.poseidon-us.com/TQcFRk