433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | info@poseidon-us.com | Office: (813) 786-3120

OWASP’s subtractive security project measures the attack paths you erased

An attacker who talks a user into opening an attachment gets whatever that machine still permits: a service account with rights across the domain, an outbound route to anywhere, a scripting engine sitting there for the taking. Christopher Frenz wants those capabilities deleted before anyone writes a detection rule for them. Frenz leads the OWASP Subtractive Security Top 10, a set of nine lists published alongside an engineering standard called Path Erasure Rate. Organizations that … More → The post OWASP’s subtractive security project measures the attack paths you erased appeared first on Help Net Security.
http://news.poseidon-us.com/TTrXQc

Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials

An analyst opening a queue on Monday morning will spend most of it on tickets that amount to nothing. Stellar Cyber’s Agentic Auto Triage closed 8,047 of those tickets on its own during customer trials, filing them as confident false positives. That covers 64% of every verdict the software issued. Another 1,875 alerts went up the chain as real threats. The remainder got logged as informational and left there. The trials ran 124 days inside … More → The post Analysts got 19 minutes back every hour in Stellar Cyber’s agentic auto triage trials appeared first on Help Net Security.
http://news.poseidon-us.com/TTrSwV

Fake IRS letters direct crypto holders to bogus compliance portal

Scammers are sending physical letters to cryptocurrency holders that copy the look of official IRS notices. The letters tell recipients they must enroll in something called a Digital Asset Compliance Portal before a deadline, or risk penalties. “If you receive a letter claiming to be from the IRS that instructs you to enroll in a Digital Asset Compliance Portal, don’t respond. The IRS did not send it. The IRS does not operate a Digital Asset … More → The post Fake IRS letters direct crypto holders to bogus compliance portal appeared first on Help Net Security.
http://news.poseidon-us.com/TTrSwP

Cybersecurity jobs available right now: August 4, 2026

Application Security Engineer Arcadia | USA | Remote – View job details As an Application Security Engineer, you will lead the application vulnerability management process by prioritizing and driving remediation of security findings. You will integrate and automate security tools within CI/CD pipelines, establish a Security Champions program to promote secure development practices, support application security during incident response, and work with product and engineering teams to embed security into the software development lifecycle through … More → The post Cybersecurity jobs available right now: August 4, 2026 appeared first on Help Net Security.
http://news.poseidon-us.com/TTrSvx

GOP holdouts say they will back Blanche’s attorney general nomination after striking deal over fund

The endorsement from Sens. John Cornyn and Thom Tillis paves the way for the Senate Judiciary Committee to advance Blanche’s nomination on Tuesday.
http://news.poseidon-us.com/TTrJql