Monthly Archives: April 2025

OpenSSL prepares for a quantum future with 3.5.0 release

The OpenSSL Project has released version 3.5.0 of its widely used open-source cryptographic library, introducing new features and notable changes that signal its evolution toward future-ready cryptography. This feature release includes support for post-quantum cryptography (PQC), server-side QUIC, and tighter control over TLS behavior. Default behaviors reworked OpenSSL 3.5.0 makes several potentially incompatible changes to default settings. Notably, the default encryption cipher for the req, cms, and smime command-line utilities has changed from the aging … More → The post OpenSSL prepares for a quantum future with 3.5.0 release appeared first on Help Net Security.
http://news.poseidon-us.com/TK31Y0

Index Engines CyberSense 8.10 strengthens AI-driven cyber resilience

Index Engines announced CyberSense 8.10, fully integrated with Dell PowerProtect Cyber Recovery, which provides new capabilities to enhance cyber resilience and streamline recovery from ransomware attacks. CyberSense’s highly-trained AI ensures data integrity, empowering organizations to detect corruption from cyber threats and recover with confidence. With more than 1,500 global installations, CyberSense continues to lead the industry in ransomware detection. “As ransomware attacks continue to rise, organizations must ensure they have data integrity to enable fast … More → The post Index Engines CyberSense 8.10 strengthens AI-driven cyber resilience appeared first on Help Net Security.
http://news.poseidon-us.com/TK31XR

Fortinet unveils FortiAI innovations enhancing threat protection and security operations

Fortinet has unveiled FortiAI innovations embedded across the Fortinet Security Fabric platform to enhance protection against new and emerging threats, simplify and automate security and network operations, and secure employee use of AI-enabled services. “Fortinet’s AI advantage stems from the breadth and depth of our AI ecosystem—shaped by over a decade of AI innovation and reinforced by more patents than any other cybersecurity vendor,” said Michael Xie, President, and CTO at Fortinet. “By embedding FortiAI across … More → The post Fortinet unveils FortiAI innovations enhancing threat protection and security operations appeared first on Help Net Security.
http://news.poseidon-us.com/TK31Wj

Fastly DDoS Attack Insights helps reveal and explain the unfolding of a DDoS attack

Fastly announced key updates to Fastly DDoS Protection that deliver visibility into attack mitigation. Fastly DDoS Protection can mitigate attacks in seconds. Now with Fastly DDoS Protection’s Attack Insights, security teams gain real-time insights into DDoS events, empowering them to validate mitigation actions and confidently protect applications and APIs from DDoS attacks. DDoS, or Distributed Denial of Service attacks, can quickly disrupt services with distributed attacks against applications and APIs, causing costly downtime and requiring … More → The post Fastly DDoS Attack Insights helps reveal and explain the unfolding of a DDoS attack appeared first on Help Net Security.
http://news.poseidon-us.com/TK31Wb

Tufin Orchestration Suite R25-1 brings expanded device coverage and boosts cloud security

Tufin releases Tufin Orchestration Suite (TOS) R25-1, bringing expanded device coverage, deeper visibility, and stronger cloud security to today’s modern hybrid and multi-cloud networks. As enterprises expand their networks across multiple cloud platforms and vendors, maintaining security, visibility, and compliance becomes increasingly complex. TOS R25-1 addresses these challenges by: Providing deeper visibility across hybrid environments with Arista, Zscaler, and VMware NSX-T Gateway Firewall support. Expanding automation to streamline security policy changes with Meraki, Microsoft Azure … More → The post Tufin Orchestration Suite R25-1 brings expanded device coverage and boosts cloud security appeared first on Help Net Security.
http://news.poseidon-us.com/TK31W8

Obfuscated Malicious Python Scripts with PyArmor, (Wed, Apr 9th)

Obfuscation is very important for many developers. They may protect their code for multiple reasons like copyright, anti-cheat (games), or to protect their code from being reused. If an obfuscated program does not mean automatically that it is malicious, it&#x27s often a good sign. For malware developers, obfuscation helps bypass many static security controls and slows down the reverse analysis process.
http://news.poseidon-us.com/TK2zZr

Why CISOs are doubling down on cyber crisis simulations

Cyber threats aren’t going away, and CISOs know prevention isn’t enough. Being ready to respond is just as important. Cyber crisis simulations offer a way to test that readiness. They let teams walk through real-world scenarios in a controlled setting, exposing gaps and showing what needs work. It’s a practical way to strengthen response plans before a real attack hits. Budgets are up, and so is pressure A recent survey by Hack The Box shows … More → The post Why CISOs are doubling down on cyber crisis simulations appeared first on Help Net Security.
http://news.poseidon-us.com/TK2vMl

Transforming cybersecurity into a strategic business enabler

In this Help Net Security interview, Kevin Serafin, CISO at Ecolab, discusses aligning security strategy with long-term business goals, building strong partnerships across the organization, and approaching third-party risk with agility. How do you define cyber risk within your organization’s overall enterprise risk framework? At Ecolab, we don’t approach cyber risk in isolation. Instead, it’s positioned as an integral component of our overall enterprise risk management framework. We define cyber risk as the potential for … More → The post Transforming cybersecurity into a strategic business enabler appeared first on Help Net Security.
http://news.poseidon-us.com/TK2sYQ

APTRS: Open-source automated penetration testing reporting system

APTRS is an open-source reporting tool built with Python and Django. It’s made for penetration testers and security teams who want to save time on reports. Instead of writing reports by hand, users can create PDF and Excel files directly in the tool. APTRS features “APTRS is the only tool specifically focused on pentest reporting combined with project and client management. It’s designed to give clients real-time visibility and control over their penetration tests,” Sourav … More → The post APTRS: Open-source automated penetration testing reporting system appeared first on Help Net Security.
http://news.poseidon-us.com/TK2sYM

AI is challenging the geopolitical status quo

AI-powered cyberattacks are becoming powerful new weapons. Organizations need to act fast to close the gap between today’s defenses and tomorrow’s threats. These attacks are only going to grow. New data from Armis Labs shows that the threat of AI in cyberwarfare is growing. Its third annual global report finds rising concern among organizations and governments worldwide. 73% of IT leaders worry that nation-states are using AI to launch smarter, more targeted attacks. “AI is … More → The post AI is challenging the geopolitical status quo appeared first on Help Net Security.
http://news.poseidon-us.com/TK2sXb