Author Archives: Poseidon

How to mature your IT infrastructure forward while also mining backward for gaps

Creating a forward-thinking framework that keeps sight of what came before makes disruption and digital maturity possible, says Leidos CIO Alexandra Guenther. The post How to mature your IT infrastructure forward while also mining backward for gaps first appeared on Federal News Network.
http://news.poseidon-us.com/THzTqt

How to mature your IT infrastructure forward while also mining backward for gaps

Creating a forward-thinking framework that keeps sight of what came before makes disruption and digital maturity possible, says Leidos CIO Alexandra Guenther. The post How to mature your IT infrastructure forward while also mining backward for gaps first appeared on Federal News Network.
http://news.poseidon-us.com/THzTc1

EEOC changes leadership and emphasis

“We’re in a situation where there’s a lot of unprecedented things going on. So it’s really just a wait and see approach,” said Carol Warner. The post EEOC changes leadership and emphasis first appeared on Federal News Network.
http://news.poseidon-us.com/THzS7x

EEOC changes leadership and emphasis

“We’re in a situation where there’s a lot of unprecedented things going on. So it’s really just a wait and see approach,” said Carol Warner. The post EEOC changes leadership and emphasis first appeared on Federal News Network.
http://news.poseidon-us.com/THzS7w

Threat actors are using legitimate Microsoft feature to compromise M365 accounts

Suspected Russian threat actors have been taking advantage of Microsoft Device Code Authentication to trick targets into granting them access to their Microsoft 365 (M365) accounts. “While Device Code Authentication attacks are not new, they appear to have been rarely leveraged by nation-state threat actors. Volexity’s visibility into targeted attacks indicates this particular method has been far more effective than the combined effort of years of other social engineering and spear-phishing attacks conducted by the … More → The post Threat actors are using legitimate Microsoft feature to compromise M365 accounts appeared first on Help Net Security.
http://news.poseidon-us.com/THzRxk

Fake BSOD Delivered by Malicious Python Script, (Fri, Feb 14th)

I found a Python script that implements a funny anti-analysis trick. The script has a low score on VT (4/59) (SHA256:d716c2edbcdb76c6a6d31b21f154fee7e0f8613617078b69da69c8f4867c9534)[1]. This sample attracted my attention because it uses the tkinter[2] library. This library is used to create graphical user interfaces (GUIs). It provides tools to create windows, dialogs, buttons, labels, text fields, and other interactive elements, allowing developers to build desktop applications with visual interfaces in Python. Most Python scripts are intended to be executed from a command line. That's why I consider this library as a good sign of suspicious behavior (It does not mean that all Python scripts using this library are malicious!)
http://news.poseidon-us.com/THzMjY

OPM clarifies RTO guidance for military spouses after pressure from lawmakers, families

All federally employed spouses of military and Foreign Service members who work remotely are “categorically exempt” from Trump’s return-to-office mandate. The post OPM clarifies RTO guidance for military spouses after pressure from lawmakers, families first appeared on Federal News Network.
http://news.poseidon-us.com/THzLKC

OPM clarifies RTO guidance for military spouses after pressure from lawmakers, families

All federally employed spouses of military and Foreign Service members who work remotely are “categorically exempt” from Trump’s return-to-office mandate. The post OPM clarifies RTO guidance for military spouses after pressure from lawmakers, families first appeared on Federal News Network.
http://news.poseidon-us.com/THzLHX

Grip Security unveils SSPM solution to strengthen SaaS security posture

Grip Security has unveiled its SaaS Security Posture Management (SSPM) solution, which proactively identifies misconfigurations, enforces best practices and strengthens SaaS security posture against emerging risks. Unlike traditional SSPM products, Grip SSPM is built on a foundation of visibility and automation, enabling organizations to combine misconfiguration remediation and policy enforcement as part of a comprehensive security program that addresses SaaS security end-to-end. By consolidating SaaS security into a single platform, Grip SSPM streamlines operations, automates … More → The post Grip Security unveils SSPM solution to strengthen SaaS security posture appeared first on Help Net Security.
http://news.poseidon-us.com/THz5qc

Pig butchering scams are exploding

2024 is set to be a record year for scammers who received at least US$9.9 billion in crypto revenues from their illicit activities, according to Chainalysis. This figure is projected to rise to an all-time high of $12.4 billion as ongoing analysis uncovers more fraudulent activity. These findings are part of Chainalysis’ research into scams, highlighting high-yield investment scams (50%) and pig butchering (33%) as the two most prevalent fraud and scams. Pig butchering scams … More → The post Pig butchering scams are exploding appeared first on Help Net Security.
http://news.poseidon-us.com/THyzyX