Blog

Claude now reviews and fixes vulnerabilities as you write code

Anthropic introduced a security-guidance plugin for Claude Code that reviews code changes for common vulnerabilities and helps Claude identify and fix issues during the same development session. The company says the plugin is designed to catch issues such as injection flaws, unsafe deserialization, and insecure DOM APIs before code reaches pull requests, reducing the amount of manual security review later in the development process. Once installed, the plugin runs automatically during development sessions, without requiring … More → The post Claude now reviews and fixes vulnerabilities as you write code appeared first on Help Net Security.
http://news.poseidon-us.com/TSlBGX

Cogent targets exploit-to-remediation gap with new AI-powered security capabilities

Cogent has launched two new platform capabilities designed to reduce the time between vulnerability disclosure and confirmed remediation. Zero Day Response identifies exposure within minutes of public disclosure, without waiting for scanner signatures. Autonomous Remediation determines the right fix, assesses business impact before execution, and confirms that the vulnerability has been resolved. The releases arrive as AI-assisted exploit development compresses attacker timelines faster than most security programs can keep pace. Time to exploit has collapsed … More → The post Cogent targets exploit-to-remediation gap with new AI-powered security capabilities appeared first on Help Net Security.
http://news.poseidon-us.com/TSlBGC

Ping Identity advances agentic security with AI governance and trusted access

Ping Identity announced new capabilities that extend the Ping Identity Platform for the agentic enterprise, where AI agents, automation, and developers increasingly shape how access is managed, governed, and secured across organizations. AI agents are changing both sides of the identity equation. They are new actors that need to be discovered, governed, and managed across their lifecycle, and they are also new operators that can help builders administer and secure identity environments through machine-native interfaces. … More → The post Ping Identity advances agentic security with AI governance and trusted access appeared first on Help Net Security.
http://news.poseidon-us.com/TSlBG1

eSentire launches new Atlas AI Operatives for autonomous threat detection and response

eSentire has unveiled new preempt, detect, and respond capabilities within the Atlas Platform, a unified agentic AI platform with purpose-built AI Operatives that work together in a continuous security lifecycle. Controlled autonomy SecOps The Atlas Platform delivers purpose-built and adaptive AI operative infrastructure in a continuous closed loop across autonomous AI offensive security, exposure management, and Managed Detection and Response (MDR) services. It executes hundreds of thousands of autonomous investigations and responses across 2,000+ customer … More → The post eSentire launches new Atlas AI Operatives for autonomous threat detection and response appeared first on Help Net Security.
http://news.poseidon-us.com/TSlBCn

Fake ChatGPT and Claude installers on GitHub are dropping Deno RAT malware

Attackers are hosting counterfeit installers and plugins on GitHub and SourceForge that pose as widely used software, including ChatGPT, Claude, AutoTune, Kontakt, Ableton Live, and ZENOLOGY. The downloads deliver a backdoor called DinDoor, which then loads a remote access Trojan built on the Deno JavaScript runtime, according to Malwarebytes. Compromised YouTube channels push victims toward the malicious repositories. The videos promoting the fake tools have accumulated more than 50,000 views. The attackers rotate through GitHub … More → The post Fake ChatGPT and Claude installers on GitHub are dropping Deno RAT malware appeared first on Help Net Security.
http://news.poseidon-us.com/TSl6Cs

Apple makes its quantum-resistant encryption open source

Apple has published its post-quantum cryptography implementations in corecrypto, together with mathematical proofs and verification tools for independent expert evaluation, allowing external researchers to review the work and reproduce the company’s analysis. Post-quantum cryptography is designed to protect encrypted data from future quantum computers that could break widely used public-key encryption algorithms. A new approach to formal verification of Apple corecrypto (Source: Apple) Corecrypto, the cryptography library used throughout Apple operating systems and services, provides … More → The post Apple makes its quantum-resistant encryption open source appeared first on Help Net Security.
http://news.poseidon-us.com/TSl3WN

Tech titans break revenue records amid deep workforce cuts

The largest vendors aggressively reduced headcounts to fund historic levels of infrastructure spending, Omdia analysts found.
http://news.poseidon-us.com/TSl2dN

Franklin Access adds three-layer security system to Wi-Fi routers

Franklin Access has launched a three-layer security system integrated into its Wi-Fi routers, delivering enterprise-grade protection for consumers and small businesses. The system runs automatically in the background, blocking millions of malicious websites in real time to protect families, children, seniors, and businesses from online threats. Franklin’s Wi-Fi routers include advanced security protocols and privacy features designed to safeguard connected devices and user data. Layer 1: Foundation Franklin’s DNS filters block and redirect outgoing traffic … More → The post Franklin Access adds three-layer security system to Wi-Fi routers appeared first on Help Net Security.
http://news.poseidon-us.com/TSkw5w

Jetico expands BestCrypt Data Shelter with zero-trust file access controls

Jetico has announced the extension of BestCrypt Data Shelter to include centrally managed enterprise data access control for sensitive files. The solution allows security teams to define and enforce policies governing which applications, processes and users can access protected files. This default-deny model aligns with zero-trust security principles. “Organizations have made significant progress in encrypting data and securing the perimeter, but broad access inside trusted environments often remains uncontrolled,” explains Jetico CEO Hannaleena Pojanluoma. “BestCrypt … More → The post Jetico expands BestCrypt Data Shelter with zero-trust file access controls appeared first on Help Net Security.
http://news.poseidon-us.com/TSkw5g

AppOmni’s Marlin AI automates SaaS threat analysis, triage, and remediation at scale

AppOmni has launched Marlin AI to transform how enterprise organizations defend complex SaaS applications. Marlin AI delivers autonomous AI-powered SaaS security that leverages AppOmni’s deep SaaS application observability. It actively correlates SaaS security indicators, performs deep investigations, and guides security teams to immediate solutions. By reducing the massive hours wasted on investigating threats, alerts and warnings across the security tech stack, security teams can now move beyond manual event and indicator correlation to autonomous triaging … More → The post AppOmni’s Marlin AI automates SaaS threat analysis, triage, and remediation at scale appeared first on Help Net Security.
http://news.poseidon-us.com/TSkw5Y