Author Archives: Poseidon

Compliance Scorecard Version 7 simplifies compliance management for MSPs

Compliance Scorecard released Compliance Scorecard Version 7. This latest release is designed to seamlessly integrate compliance into cybersecurity offerings, delivering new features that simplify and enhance compliance management for MSPs and their clients. Compliance Scorecard Version 7 builds on its reputation for providing specialized tools for privacy compliance and data protection. These enhancements complement existing features—such as policy management, compliance assessments, and customizable reporting—enabling MSPs to provide comprehensive compliance solutions. The platform’s new capabilities allow … More → The post Compliance Scorecard Version 7 simplifies compliance management for MSPs appeared first on Help Net Security.
http://news.poseidon-us.com/THcwhn

Fileless Python InfoStealer Targeting Exodus, (Tue, Jan 28th)

Exodus is a well-known crypto wallet software[1] and, when you are popular, there are chances that attackers will target you! I already wrote a diary related to this application[2]. Yesterday, I found a new one that behaves differently. My previous diary described a Python script that will patch the original Exodus software. Today, it&#x27s a real “info stealer”.
http://news.poseidon-us.com/THcrYg

BloodyAD: Open-source Active Directory privilege escalation framework

BloodyAD is an open-source Active Directory privilege escalation framework that uses specialized LDAP calls to interact with domain controllers. It enables various privilege escalation techniques within Active Directory environments. Features “I created this tool because I do a lot of internal testing on Active Directory infrastructures and at the time in 2021 there was no tool on Linux that could easily do the AD privesc shown by Bloodhound. The easiest was using Powersploit, which is … More → The post BloodyAD: Open-source Active Directory privilege escalation framework appeared first on Help Net Security.
http://news.poseidon-us.com/THclCt

74% of CISOs are increasing crisis simulation budgets

In the aftermath of 2024’s high-profile cybersecurity incidents, including NHS, CrowdStrike, 23andMe, Transport for London, and Cencora, CISOs are reassessing their organisation’s readiness to manage a potential “chaos” of a full-scale cyber crisis, according to Hack The Box. Many CISOs across the UK and US are concerned about their organization’s ability to handle a cyber crisis. This is owing to several reasons – the rising volume of cyber incidents (31%), lack of incident response planning … More → The post 74% of CISOs are increasing crisis simulation budgets appeared first on Help Net Security.
http://news.poseidon-us.com/THclBv

Cybersecurity jobs available right now: January 28, 2025

Application Security Engineer Bumble | United Kingdom | Hybrid – View job details As an Application Security Engineer, you will design and implement security testing tools within CI/CD pipelines to detect vulnerabilities early without impacting development speed. Conduct risk assessments and threat modelling exercises to identify potential vulnerabilities and prioritise security measures based on impact. Identify and prioritise vulnerabilities, driving remediation efforts and offering mitigation strategies to engineering teams. CISO Global-e | Israel | On-site … More → The post Cybersecurity jobs available right now: January 28, 2025 appeared first on Help Net Security.
http://news.poseidon-us.com/THcj2K

Transforming longevity research: AI paves the way for personalized treatments in aging science

Artificial Intelligence (AI) has the potential to transform aging research and help people live healthier, longer lives.
http://news.poseidon-us.com/THcgmr

ISC Stormcast For Tuesday, January 28th, 2025 https://isc.sans.edu/podcastdetail/9298, (Tue, Jan 28th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/THcgPq

A Tumultuous Week for Federal Cybersecurity Efforts

President Trump last week issued a flurry of executive orders that upended a number of government initiatives focused on improving the nation’s cybersecurity posture. The president fired all advisors from the Department of Homeland Security’s Cyber Safety Review Board, called for the creation of a strategic cryptocurrency reserve, and voided a Biden administration action that sought to reduce the risks that artificial intelligence poses to consumers, workers and national security.
http://news.poseidon-us.com/THcgJF

Trump Justice Department says it has fired employees involved in prosecutions of the president

The Trump Justice Department says it has fired more than a dozen employees who worked on criminal investigations into President Donald Trump. The abrupt action targeting career prosecutors who worked on special counsel Jack Smith’s team is the latest sign of upheaval inside the Justice Department. It reflects the administration’s determination to purge the government of workers it perceives as disloyal to the president. The move, which follows the reassignment of multiple senior career officials across divisions, was made even though rank-and-file prosecutors by tradition remain in their positions across presidential administrations and are not punished because of their involvement in sensitive investigations. The post Trump Justice Department says it has fired employees involved in prosecutions of the president first appeared on Federal News Network.
http://news.poseidon-us.com/THcgH1

Scott Bessent confirmed as treasury secretary, giving him a key role in extending Trump’s tax cuts

The U.S. Senate has confirmed billionaire investor Scott Bessent as President Donald Trump’s treasury secretary. Bessent has said the U.S. faces economic calamity if Congress does not renew key provisions of Trump’s Tax Cuts and Job Act that are set to expire Dec. 31. Implementing the extension of those tax cuts will be a hallmark of his role. He also faces the delicate balancing act of cutting taxes and curbing deficits while putting forward a plan on tariffs that doesn’t jeopardize growth. Bessent is the first openly gay individual to hold the role. He’s a past supporter of Democrats who has become an enthusiastic backer of Trump. The post Scott Bessent confirmed as treasury secretary, giving him a key role in extending Trump’s tax cuts first appeared on Federal News Network.
http://news.poseidon-us.com/THcgDX