433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | info@poseidon-us.com | Office: (813) 563-2652

A new way to think about zero trust for workloads

Static credentials have been a weak point in cloud security for years. A new paper by researchers from SentinelOne takes direct aim at that issue with a practical model for authenticating workloads without long-lived secrets. Instead of relying on static keys, the team proposes using temporary, verifiable tokens that expire within minutes. Breaking from static credentials The researcher’s core argument is that static keys are incompatible with zero trust. These credentials often last months or … More → The post A new way to think about zero trust for workloads appeared first on Help Net Security.
http://news.poseidon-us.com/TP2PLQ

Heisenberg: Open-source software supply chain health check tool

Heisenberg is an open-source tool that checks the health of a software supply chain. It analyzes dependencies using data from deps.dev, Software Bills of Materials (SBOMs), and external advisories to measure package health, detect risks, and generate reports for individual dependencies or entire projects. “We wanted a practical way to catch and block risky changes before they reached the main branch,” Max Feldman, Head of Application Security at AppOmni, told Help Net Security. “The turning … More → The post Heisenberg: Open-source software supply chain health check tool appeared first on Help Net Security.
http://news.poseidon-us.com/TP2PJz

Securing real-time payments without slowing them down

In this Help Net Security interview, Arun Singh, CISO at Tyro, discusses what it takes to secure real-time payments without slowing them down. He explains how analytics, authentication, and better industry cooperation can help stay ahead of fraud. Singh also touches on how digital identity and accountability are transforming how trust is built in payments. What cybersecurity controls or technologies have proven most effective for securing real-time payment ecosystems? Real-time payments demand real-time protection. Combining … More → The post Securing real-time payments without slowing them down appeared first on Help Net Security.
http://news.poseidon-us.com/TP2LPZ

Employees keep finding new ways around company access controls

AI, SaaS, and personal devices are changing how people get work done, but the tools that protect company systems have not kept up, according to 1Password. Tools like SSO, MDM, and IAM no longer align with how employees and AI agents access data. The result is what researchers call the “access-trust gap,” a growing distance between what organizations think they can control and how employees and AI systems access company data. The survey tracks four … More → The post Employees keep finding new ways around company access controls appeared first on Help Net Security.
http://news.poseidon-us.com/TP2LNk

Europe’s phone networks are drowning in fake calls

Caller ID spoofing has become one of Europe’s most persistent enablers of cyber fraud. A new position paper from Europol warns that manipulated phone identities now drive much of the continent’s financial and social engineering crime, making it difficult for law enforcement to track perpetrators. The agency estimates global losses at around EUR 850 million a year, with phone and text-based fraud accounting for roughly two thirds of reported scam cases. A network flooded with … More → The post Europe’s phone networks are drowning in fake calls appeared first on Help Net Security.
http://news.poseidon-us.com/TP2LN1