Blog

Here comes AI: How federal contractors are preparing

As agencies gear up for AI, here’s how federal contractors are preparing to help The post Here comes AI: How federal contractors are preparing first appeared on Federal News Network.
http://news.poseidon-us.com/TGHPX7

Apple fixes 2 zero-days exploited to breach macOS systems (CVE-2024-44309, CVE-2024-44308)

Apple has released emergency security updates for macOS Sequoia that fix two zero-day vulnerabilities (CVE-2024-44309, CVE-2024-44308) that “may have been actively exploited on Intel-based Mac systems”. About CVE-2024-44309 and CVE-2024-44308 CVE-2024-44309 affects WebKit, the browser engine used in the Safari web browser and all iOS and iPadOS web browsers, and can be triggered when it’s made to process maliciously crafted web content. It can enable a cross site scripting (XSS) attack. CVE-2024-44308 affects JavaScriptCore – … More → The post Apple fixes 2 zero-days exploited to breach macOS systems (CVE-2024-44309, CVE-2024-44308) appeared first on Help Net Security.
http://news.poseidon-us.com/TGHKZw

ArmorCode unifies application security with infrastructure vulnerability management

ArmorCode announced the growth of its ASPM Platform with the ability to unify AppSec and infrastructure vulnerability management. The continued innovation of Risk-Based Vulnerability Management (RBVM) in ArmorCode empowers security teams to address vulnerabilities across infrastructure, cloud, and applications with enhanced prioritization, automation, asset and remediation workflows, offering organizations a comprehensive approach to manage risk. ArmorCode delivers an independent governance layer that integrates findings from multiple scanning tools, including infrastructure and application security scanners into … More → The post ArmorCode unifies application security with infrastructure vulnerability management appeared first on Help Net Security.
http://news.poseidon-us.com/TGHGgj

Tanium Cloud Workloads provides visibility and protection for containerized environments

Tanium announced Tanium Cloud Workloads, providing real-time visibility and protection for containerized environments. Through image vulnerability scanning, container run-time inventory, rogue container identification, and Kubernetes policy enforcement, teams across security, IT operations, and DevOps can reduce their attack surface and improve the security posture of containerized workloads whether on premises or in the cloud. As the adoption of containerized workloads increases across organizations, so does the attack surface available to bad actors exploiting their vulnerabilities. … More → The post Tanium Cloud Workloads provides visibility and protection for containerized environments appeared first on Help Net Security.
http://news.poseidon-us.com/TGHGgg

OpenText Cloud Editions 24.4 blends AI with secure data connectivity

OpenText unveiled Cloud Editions (CE) 24.4, presenting a suite of transformative advancements in Business Cloud, AI, and Technology to empower the future of AI-driven knowledge work. This release delivers secure, AI-integrated solutions that strengthen data connectivity, streamlines workflows, and enhances human potential—addressing the needs of forward-thinking CIOs and business leaders navigating multi-cloud environments. As multi-cloud strategies become standard practice, enterprises are now leveraging them to enhance flexibility, reduce vendor lock-in, and improve resilience. Seamless data … More → The post OpenText Cloud Editions 24.4 blends AI with secure data connectivity appeared first on Help Net Security.
http://news.poseidon-us.com/TGHGgB

Exabeam and Wiz join forces to improve cloud security

Exabeam coolaborates with with Wiz to provide organizations with improved threat detection, investigation, and response (TDIR) capabilities, ensuring a more secure and resilient cloud environment. With its open architecture the Exabeam New-Scale Security Operations Platform supports a best-of-breed ecosystem that includes hundreds of product integrations to accelerate time-to-value and strengthen on-premises and cloud security. “As organizations embrace cloud environments, the surge in cyberattacks is unprecedented, and visibility alone is not enough. Exabeam and Wiz are … More → The post Exabeam and Wiz join forces to improve cloud security appeared first on Help Net Security.
http://news.poseidon-us.com/TGHBlK

Arkose Device ID detects suspicious activity patterns

Arkose Labs launched Arkose Device ID, a device identification solution that raises the bar in fraud detection by combining precise device tracking with session-based risk signals and anti-spoofing technology. Arkose Device ID is designed to address the growing sophistication of cyber threats, which are impacting businesses globally with increasing frequency and intensity. In a new research report, Arkose Labs found that more than 70% of enterprises cite identity-based attacks—including fake account creation and account takeovers … More → The post Arkose Device ID detects suspicious activity patterns appeared first on Help Net Security.
http://news.poseidon-us.com/TGHBjm

Yubico Enrollment Suite boosts security for Microsoft users

Yubico announced Yubico Enrollment Suite for Microsoft users, including Yubico FIDO Pre-reg and the new YubiEnroll. These solutions integrate with Microsoft’s Entra ID, helping organizations create stronger cyber resilience and provide support to further advance strategies with a zero trust model. The Yubico Enrollment Suite enables organizations to strengthen security standards and go passwordless with phishing-resistant multi-factor authentication (MFA) to safeguard Microsoft ecosystems. Microsoft’s recently announced Secure Future Initiative (SFI) aims to deliver strong phishing-resistant … More → The post Yubico Enrollment Suite boosts security for Microsoft users appeared first on Help Net Security.
http://news.poseidon-us.com/TGH9Qs

Five backup lessons learned from the UnitedHealth ransomware attack

The ransomware attack on UnitedHealth earlier this year is quickly becoming the healthcare industry’s version of Colonial Pipeline, prompting congressional testimony, lawmaker scrutiny and potential legislation.  Over the past few months, there have been two congressional hearings on the attack — one in the Senate, followed by one in the House — as well as calls from multiple senators for investigations into how the government responded to the incident, not to mention the criticism against UnitedHealth’s CISO, Steven Martin, … More → The post Five backup lessons learned from the UnitedHealth ransomware attack appeared first on Help Net Security.
http://news.poseidon-us.com/TGH6FF

Debunking myths about open-source security

In this Help Net Security interview, Stephanie Domas, CISO at Canonical, discusses common misconceptions about open-source security and how the community can work to dispel them. She explains how open-source solutions, contrary to myths, offer enterprise-grade maturity, reliability, and transparency. Domas also shares key factors organizations should prioritize in open-source adoption to enhance security and balance innovation with stability. What are the biggest misconceptions about open-source security, and how can community members and professionals work … More → The post Debunking myths about open-source security appeared first on Help Net Security.
http://news.poseidon-us.com/TGH6Cl