Monthly Archives: March 2025

Trump administration guts board of US Institute of Peace. Group says DOGE arrives

The Trump administration has fired most of the board of the U.S. Institute of Peace and sent its new leader into the Washington headquarters of the independent organization. A document obtained by The Associated Press shows that the remaining three members of the group’s board fired President and CEO George Moose on Friday. Current USIP employees said staffers from Elon Musk’s Department of Government Efficiency entered the building despite protests that the nonprofit is not part of the executive branch. Police cars were outside the building Monday evening. Moose said that “DOGE has broken into our building.” USIP helps prevent violent conflicts and broker peace deals abroad. The post Trump administration guts board of US Institute of Peace. Group says DOGE arrives first appeared on Federal News Network.
http://news.poseidon-us.com/TJbWyr

Critics warn staff cuts at federal agencies overseeing US dams could put public safety at risk

Experts are warning that Trump administration workforce cuts at federal agencies overseeing U.S. dams are threatening their ability to provide. The post Critics warn staff cuts at federal agencies overseeing US dams could put public safety at risk first appeared on Federal News Network.
http://news.poseidon-us.com/TJbWxf

CISO Global launches AI-driven cloud security solution

CISO Global launched of CISO Edge, its next-generation AI-driven cloud security solution, now available to existing customers and channel partners. Built to meet the growing demand for enterprise-grade cybersecurity, CISO Edge delivers comprehensive cloud-first, hybrid, and remote security—ensuring organizations can secure their users, networks, and data anywhere in the world. CISO Edge is a cornerstone of CISO Global’s proprietary cybersecurity suite, which was valued at $50 million last year as part of the company’s extensive … More → The post CISO Global launches AI-driven cloud security solution appeared first on Help Net Security.
http://news.poseidon-us.com/TJbRkv

Python Bot Delivered Through DLL Side-Loading, (Tue, Mar 18th)

One of my hunting rules triggered some suspicious Python code, and, diving deeper, I found an interesting example of DLL side-loading. This technique involves placing a malicious DLL with the same name and export structure as a legitimate DLL in a location the application checks first, causing the application to load the malicious DLL instead of the intended one. This is a classic vulnerability seen for years in many software. The attacker also implemented simple tricks to bypass classic security controls.
http://news.poseidon-us.com/TJbKwQ

How financial institutions can minimize their attack surface

In this Help Net Security interview, Sunil Mallik, CISO of Discover Financial Services, discusses cybersecurity threats for financial institutions. He also shares insights on balancing compliance with agility, lessons from regulatory audits, and Discover’s approach to risk management and workforce development. What are the most pressing security threats facing credit card and digital banking platforms, and how should organizations adapt defenses to counter them? The most pressing security threats facing credit card companies and digital … More → The post How financial institutions can minimize their attack surface appeared first on Help Net Security.
http://news.poseidon-us.com/TJbFwx

Hackers target AI and crypto as software supply chain risks grow

The growing sophistication of software supply chain attacks is driven by widespread flaws in open-source and third-party commercial software, along with malicious campaigns that specifically target AI and cryptocurrency development pipelines, according to a ReversingLabs report. According to ReversingLabs data, open-source software remained a key element of supply chain risk in 2024. For example, incidents of exposed development secrets via publicly accessible, open-source packages rose 12% compared to 2023. And critical and exploitable software flaws … More → The post Hackers target AI and crypto as software supply chain risks grow appeared first on Help Net Security.
http://news.poseidon-us.com/TJbFwC

Cybersecurity jobs available right now: March 18, 2025

Application Security Expert monday.com | United Kingdom | Hybrid – View job details As an Application Security Expert, you will provide guidance on security best practices and compliance, and undertake security testing. Develop security testing plans and integrate them into the software development lifecycle. Perform and oversee security testing and manage remediation of identified vulnerabilities. Application Security Analyst II, Information Security First National Financial | Canada | On-site – View job details As an Application … More → The post Cybersecurity jobs available right now: March 18, 2025 appeared first on Help Net Security.
http://news.poseidon-us.com/TJbFvW

ISC Stormcast For Tuesday, March 18th, 2025 https://isc.sans.edu/podcastdetail/9368, (Tue, Mar 18th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/TJb8rh

Twisting atomically thin materials could advance quantum computers

Researchers show that precisely layering nano-thin materials creates excitons — essentially, artificial atoms — that can act as quantum information bits, or qubits.
http://news.poseidon-us.com/TJb8PD

Public service: Professional responsibility vs. personal opinion

Ron Sanders, a NAPA Fellow and former OPM associate director argues that public servants have a duty to help the new administration. The post Public service: Professional responsibility vs. personal opinion first appeared on Federal News Network.
http://news.poseidon-us.com/TJb4Tn