Blog

Black Duck Signal secures AI-generated code with agentic application security

Black Duck has announced the general availability of Black Duck Signal, an agentic AI application security solution purpose-built to secure AI-generated code in autonomous development workflows. As agentic AI coding assistants increasingly design, code and deliver production software, organizations face a new class of application risk, created at unprecedented speed and scale. Black Duck Signal is designed to meet this shift head-on, delivering AI-native security that intelligently assesses risk, validates findings and automates remediation at … More → The post Black Duck Signal secures AI-generated code with agentic application security appeared first on Help Net Security.
http://news.poseidon-us.com/TRfNPY

AppGate delivers identity-based ZTNA for secure access across OT systems

AppGate has announced the launch of its Operational Technology (OT) ZTNA solution. Designed to secure industrial control systems, manufacturing plants, energy facilities, and other critical infrastructure, the offering extends AppGate’s direct-routed ZTNA architecture into OT environments. It enables secure remote access without compromising performance or operational stability. As IT and OT systems grow increasingly interconnected, remote access has become fundamental to industrial operations. This shift challenges legacy security models that were designed for isolated networks. … More → The post AppGate delivers identity-based ZTNA for secure access across OT systems appeared first on Help Net Security.
http://news.poseidon-us.com/TRfNL7

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

Oracle has released an out-of-band patch for a critical and easily exploitable vulnerability (CVE-2026-21992) in Oracle Identity Manager and Oracle Web Services Manager. The company did not say whether the vulnerability has been exploited as a zero-day, but has urged customers to apply the updates or provided mitigations as soon as possible. About CVE-2026-21992 CVE-2026-21992 is caused by missing authentication for a critical function. In Oracle Identity Manager – a solution for provisioning, managing and … More → The post Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992) appeared first on Help Net Security.
http://news.poseidon-us.com/TRfGMC

Proofpoint unifies email, data, and AI security to reduce enterprise blind spots

Proofpoint has unveiled innovations across its Collaboration Security and Data Security portfolios, strengthening protection for the agentic workspace, where people and AI agents interact across communication and data environments to execute business-critical work. As organizations deploy AI assistants and autonomous agents, they are delegating authority at scale. AI systems now draft communications, access sensitive data, and take action at machine speed. Unlike deterministic systems built on fixed rules, AI generates outcomes based on prediction rather … More → The post Proofpoint unifies email, data, and AI security to reduce enterprise blind spots appeared first on Help Net Security.
http://news.poseidon-us.com/TRfBDZ

Enterprises aren’t aligned on AI ROI

Executives prioritize cost savings and efficiency, while engineers focus on innovation and strategic gains, a report from TE Connectivity found.
http://news.poseidon-us.com/TRf9Q9

Zluri addresses expanding identity attack surface across SaaS, cloud, and AI

Enterprise identity is undergoing a fundamental shift. Employees are no longer the only identities operating inside organizations. Service accounts, machine identities, application integrations, and AI agents now interact with enterprise systems at scale, accelerating the growth of non-human identities and expanding the identity attack surface across SaaS applications, cloud infrastructure, and on-premises systems. To address this shift, Zluri expanded its platform to deliver the Zluri Identity Security Platform, helping enterprises discover, govern, and monitor identities … More → The post Zluri addresses expanding identity attack surface across SaaS, cloud, and AI appeared first on Help Net Security.
http://news.poseidon-us.com/TRf6pf

Russian hackers go after high-value targets through Signal

Russian intelligence-linked hackers are targeting commercial messaging platforms, with Signal a primary focus, the FBI and CISA warn. The campaign is aimed at individuals of intelligence interest, including government personnel, journalists, and others with access to sensitive communications. It is believed that the campaign has compromised thousands of commercial messaging applications accounts. People who use these applications can develop a false sense of security, believing they are protected from hacking. Criminals exploit this through phishing … More → The post Russian hackers go after high-value targets through Signal appeared first on Help Net Security.
http://news.poseidon-us.com/TRf6pR

Zero Networks Kubernetes Access Matrix exposes hidden access paths and blast radius

Zero Networks has announced the Kubernetes Access Matrix, a real time visual map that exposes every allowed and denied rule inside Kubernetes clusters. The new capability enables security and DevOps teams to see, understand, and control Kubernetes access at scale, closing “understanding what is going on inside K8s” gaps that leave organizations exposed to lateral movement and operational risk. In most IT environments, security and infrastructure teams control what can talk to what. In Kubernetes, … More → The post Zero Networks Kubernetes Access Matrix exposes hidden access paths and blast radius appeared first on Help Net Security.
http://news.poseidon-us.com/TRf6lP