Blog

Microsoft tightens Windows enterprise activation security

Microsoft is making Trusted Platform Module (TPM)-backed attestation a requirement for Windows Key Management Service (KMS), the on-premises service used for Windows volume activation, replacing the software-only trust model with hardware-backed verification to strengthen enterprise activation security. Attestation will become mandatory with the next Windows Server Long-Term Servicing Channel (LTSC) release. How TPM-backed KMS attestation works The KMS server uses its TPM to generate an attestation report proving its identity and integrity before activation is … More → The post Microsoft tightens Windows enterprise activation security appeared first on Help Net Security.
http://news.poseidon-us.com/TThGXl

Google gives developers an AI bug hunter that also writes patches

Google has launched a preview of CodeMender, an AI agent built to scan code for security flaws, confirm they are exploitable, and generate fixes for developers to review. (Source: Google) The company describes it as a response to attackers who are already using AI to speed up their work, arguing that defenders need automation that moves at the same speed. “CodeMender can help you advance from passive scanning to automated code remediation, and reduce zero-day … More → The post Google gives developers an AI bug hunter that also writes patches appeared first on Help Net Security.
http://news.poseidon-us.com/TThC0V

Google’s newest sign-in method asks you to look at the camera

Google’s selfie video sign-in option verifies that an account owner is a real person and that the account wasn’t created or used by computer programs or bots for the purpose of abuse, such as spamming. It is not available for all regions, accounts, or devices. Source: Google A selfie video is recorded and securely stored with the account owner’s consent, and it can be deleted at any time in the Google Account. Users may take … More → The post Google’s newest sign-in method asks you to look at the camera appeared first on Help Net Security.
http://news.poseidon-us.com/TThBzk

The automotive software vulnerabilities hiding in your dashboard

Pop the hood on a new car and you won’t find much you can fix with a wrench. What you’ll find is software, and a lot of it. The screen in the dash probably runs Android or a flavor of Linux. The system watching the road for you might run QNX or VxWorks, the same kind of code that flies aircraft and runs factory floors. Carmakers spent the last decade making this switch, and it … More → The post The automotive software vulnerabilities hiding in your dashboard appeared first on Help Net Security.
http://news.poseidon-us.com/TTh6xS

Governing Al agents at scale: Lessons from the leaders who’ve done it

Enterprise AI leaders from ZoomInfo, Docusign and AppViewX share what it took to build AI Centers of Excellence and govern agent identities inside two companies operating at scale. What you’ll take away: What an AI Center of Excellence looks like day to day at ZoomInfo and Docusign How to govern agent identities without standing up a parallel identity stack The traps both leaders worked hard to avoid, and what they’d do differently now What Venkat … More → The post Governing Al agents at scale: Lessons from the leaders who’ve done it appeared first on Help Net Security.
http://news.poseidon-us.com/TTh6wj

Ransomware gangs go after EMEA healthcare’s supply chain

A ransomware attack against a hospital makes headlines, while attacks on the rest of the ecosystem around it tend to stay quiet despite doing damage that can be just as bad. Flare researcher Assaf Morag analyzed ransomware leak-site activity tied to healthcare organizations in the EMEA region between 2024 and 2026, and found that ransomware groups are going after the entire healthcare supply chain. The dataset covers hospitals and clinics, telemedicine providers, diagnostic laboratories, pharmacies, … More → The post Ransomware gangs go after EMEA healthcare’s supply chain appeared first on Help Net Security.
http://news.poseidon-us.com/TTh6w6

The best-funded companies open the most phishing attachments

An employee gets an email dressed as a password reset. She clicks the link, types her credentials into a page built to copy her company’s login screen, and moves on with her morning. She tells no one. That silence is the exposure. Across 13.9 million simulated phishing messages, one in ten recipients flagged the attempt to their security team. The rest let it through, and a live attacker needs only one of them. John Wilson, … More → The post The best-funded companies open the most phishing attachments appeared first on Help Net Security.
http://news.poseidon-us.com/TTh6w5

New infosec products of the week: July 24, 2026

Here’s a look at the most interesting products from the past week, featuring releases from Astelia, Druva, Swimlane, and ThreatDown. Druva brings backup, recovery and governance to AI workloads Druva has announced Druva AI Resilience, a new approach that helps organizations recover, govern, and defend the systems, activity, and context behind AI-powered work. The launch introduces new and expanded capabilities for Microsoft Copilot, Claude Code, Druva Model Context Protocol (MCP), and Dru SRE Agent for … More → The post New infosec products of the week: July 24, 2026 appeared first on Help Net Security.
http://news.poseidon-us.com/TTh6vB