433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | [email protected] | Office: (813) 563-2652

Cisco Secure Email and Web Manager and Secure Email Gateway Cross-Site Scripting Vulnerability

A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager and Secure Email Gateway could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface. This vulnerability is due to insufficient validation of user input. An attacker could exploit this vulnerability by persuading a user of an affected interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid credentials for a user account with at least the role of Operator. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. This advisory is available at the following link: https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-esa-sma-xss-WCk2WcuG Security Impact Rating: Medium CVE: CVE-2025-20180
http://news.poseidon-us.com/THpC2l

SafeBreach exposure validation platform identifies security gaps

SafeBreach launched SafeBreach exposure validation platform, which combines the power of its time-tested breach and attack simulation (BAS) product—now called Validate—and its new attack path validation product, Propagate. Together, they provide enterprise security teams with deeper insight into threat exposure and a more comprehensive view of cyber risk. According to the Gartner Hype Cycle Report, “Adversarial exposure validation technologies offer offensive security technologies simulating threat actor tactics, techniques and procedures to validate the existence of … More → The post SafeBreach exposure validation platform identifies security gaps appeared first on Help Net Security.
http://news.poseidon-us.com/THpC29

Satori provides visibility into data store risk levels

Satori announced its new capabilities, enabling security teams to be in control of all customer data across the development lifecycle in a simple, cost-effective, and holistic way. These capabilities automate the daunting tasks of discovering data, risk assessment, providing granular access control, and mitigating security risks quickly across cloud platforms like AWS, Snowflake, Databricks, and MongoDB. A recent report by Gartner found that 75% of organizations are working to consolidate their cloud-native security vendors. Security … More → The post Satori provides visibility into data store risk levels appeared first on Help Net Security.
http://news.poseidon-us.com/THp96M

Air Force keeps EEO programs, separating them from DEIA initiatives

“It’s important that agencies are interpreting the EO that narrowly, because you can’t shut the EEO office. That’s preposterous,” said Michelle Bercovici. The post Air Force keeps EEO programs, separating them from DEIA initiatives first appeared on Federal News Network.
http://news.poseidon-us.com/THp8F1

The convergence of space and cyber: An evolving threat landscape

Explore the critical role of cyberattacks in shaping the modern space race. Learn how nation-states and organizations must adapt their cybersecurity measures to protect global economies, military operations, and the future of space exploration.
http://news.poseidon-us.com/THp6fB

2025 Dell Technologies Partner Program: Driving Collaboration and Growth

2025 Dell Technologies Partner Program enhances collaboration, streamlines processes and promotes partner growth.
http://news.poseidon-us.com/THp3v8

Air Force keeps EEO programs, separating them from DEIA initiatives

“It’s important that agencies are interpreting the EO that narrowly, because you can’t shut the EEO office. That’s preposterous,” said Michelle Bercovici. The post Air Force keeps EEO programs, separating them from DEIA initiatives first appeared on Federal News Network.
http://news.poseidon-us.com/THp0g4

Union lawsuit seeks to block ‘deferred resignation’ program

OPM’s controversial workforce reduction program violates the Administrative Procedure Act and the Anti-deficiency Act, unions claim. The post Union lawsuit seeks to block ‘deferred resignation’ program first appeared on Federal News Network.
http://news.poseidon-us.com/THp0Nq

Union lawsuit seeks to block ‘deferred resignation’ program

OPM’s controversial workforce reduction program violates the Administrative Procedure Act and the Anti-deficiency Act, unions claim. The post Union lawsuit seeks to block ‘deferred resignation’ program first appeared on Federal News Network.
http://news.poseidon-us.com/THp0Lh

Flipping the script: Inverse-design as game-changer in physics

Physicists have achieved a breakthrough in data processing by employing an ‘inverse-design’ approach. This method allows algorithms to configure a system based on desired functions, bypassing manual design and complex simulations. The result is a smart ‘universal’ device that uses spin waves (‘magnons’) to perform multiple data processing tasks with exceptional energy efficiency. This innovation marks a transformative advance in unconventional computing, with significant potential for next-generation telecommunications, computing, and neuromorphic systems.
http://news.poseidon-us.com/THp077