Monthly Archives: November 2024

Upswing in direct hire helps DoD fill cyber workforce gaps

Nontraditional hiring, pay authorities were among the factors that let DoD significantly reduce its cyber workforce shortage over the past year. The post Upswing in direct hire helps DoD fill cyber workforce gaps first appeared on Federal News Network.
http://news.poseidon-us.com/TG6lZ0

Trump team vulnerable to cyber threats by not signing transition memos, experts warn

Transition experts say cooperating with GSA is critical to ensure the Trump administration has the cybersecurity resources necessary to protect sensitive data. The post Trump team vulnerable to cyber threats by not signing transition memos, experts warn first appeared on Federal News Network.
http://news.poseidon-us.com/TG6jtl

Trump team vulnerable to cyber threats by not signing transition memos, experts warn

Transition experts say cooperating with GSA is critical to ensure the Trump administration has the cybersecurity resources necessary to protect sensitive data. The post Trump team vulnerable to cyber threats by not signing transition memos, experts warn first appeared on Federal News Network.
http://news.poseidon-us.com/TG6jkB

PDF Object Streams, (Mon, Nov 11th)

The first thing to do, when analyzing a potentially malicious PDF, is to look for the /Encrypt name as explained in diary entry Analyzing an Encrypted Phishing PDF.
http://news.poseidon-us.com/TG6cBp

November 2024 Patch Tuesday forecast: New servers arrive early

Microsoft followed their October precedent set with Windows 11 24H2 and announced Microsoft Server 2025 on the first of November. We were expecting the official announcement at Microsoft Ignite near the end of the month, but with the early release, early users and Ignite attendees can have more in-depth discussions due to product familiarity. Before we dig into some of the security enhancements and features in the new server, let’s take a quick look at … More → The post November 2024 Patch Tuesday forecast: New servers arrive early appeared first on Help Net Security.
http://news.poseidon-us.com/TG6R1n

4 reasons why veterans thrive as cybersecurity professionals

Through their past military service, veterans are trained to think like adversaries, often share that mission-driven spirit and excel when working with a team to achieve a larger goal. They develop and champion the unique traits that cybersecurity companies need in prospective talent. These organizations must take note, as tapping veterans for cybersecurity roles can mutually benefit their business and the individuals they hire. Below, I’ll explain four reasons veterans make excellent cybersecurity company employees. … More → The post 4 reasons why veterans thrive as cybersecurity professionals appeared first on Help Net Security.
http://news.poseidon-us.com/TG6P9w

Strategies for CISOs navigating hybrid and multi-cloud security

In this Help Net Security interview, Alex Freedland, CEO at Mirantis, discusses the cloud security challenges that CISOs need to tackle as multi-cloud and hybrid environments become the norm. He points out the expanded attack surfaces, the importance of consistent security policies, and the need for automated compliance solutions. What are the most pressing cloud security challenges that CISOs should prioritize, especially as multi-cloud and hybrid environments grow more complex? With the increasing adoption of … More → The post Strategies for CISOs navigating hybrid and multi-cloud security appeared first on Help Net Security.
http://news.poseidon-us.com/TG6P9t

Setting a security standard: From vulnerability to exposure management

Vulnerability management has been the standard approach to fending off cyber threats for years. Still, it falls short by focusing on a limited number of vulnerabilities, often resolving only 1% to 20% of issues. In 2024, with the average data breach cost rising to $4.88 million, businesses can no longer rely on outdated, reactive practices. Instead, a shift to exposure management is crucial. In this Help Net Security video, Rob Gurzeev, CEO of CyCognito, discusses … More → The post Setting a security standard: From vulnerability to exposure management appeared first on Help Net Security.
http://news.poseidon-us.com/TG6P9Y

How human ingenuity continues to outpace automated security tools

10% of security researchers now specialize in AI technology as 48% of security leaders consider AI to be one of the greatest risks to their organizations, according to HackerOne. HackerOne’s report combines perspectives from the researcher community, customers, and security leaders. It explores how security-focused organizations integrate human expertise with technology and AI for a defense-in-depth strategy. AI is a threat and an opportunity 67% of security professionals said an external and unbiased review of … More → The post How human ingenuity continues to outpace automated security tools appeared first on Help Net Security.
http://news.poseidon-us.com/TG6P7D

ISC Stormcast For Monday, November 11th, 2024 https://isc.sans.edu/podcastdetail/9216, (Mon, Nov 11th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/TG6LH4