Blog

Estée Lauder discloses data breach tied to Oracle EBS vulnerability

Cosmetics company Estée Lauder disclosed a data breach tied to a vulnerability in Oracle E-Business Suite (EBS) used for the company’s human resources operations. Estée Lauder is one of the largest beauty companies in the world, known for its prestige skincare, makeup, fragrance, and haircare brands. “We became aware of a cybersecurity issue involving a vulnerability in the Oracle E-Business Suite system which is used by the Estee Lauder Companies for HR management purposes,” the … More → The post Estée Lauder discloses data breach tied to Oracle EBS vulnerability appeared first on Help Net Security.
http://news.poseidon-us.com/TTdbWC

Open-source maintainers still work underfunded as sponsorship crosses $100 million

A maintainer patches a library late at night that ships inside thousands of products, and no invoice follows. Sebastián Ramírez and Caleb Porzio spent years in that position. Ramírez, known as tiangolo, builds tools that other Python projects depend on. Porzio built Livewire and Alpine.js, tools thousands of web developers reach for. That gap carries a cost. Critical projects lose their maintainers to salaried jobs elsewhere, security fixes slow down, and the software supply chain … More → The post Open-source maintainers still work underfunded as sponsorship crosses $100 million appeared first on Help Net Security.
http://news.poseidon-us.com/TTdbVw

The air gap is a myth and other OT security truths

Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. Bachmann covers how containment plans get negotiated before an incident, how to build visibility on old equipment through network monitoring, and how ransomware crews price their demands on downtime. He also questions the idea that people are … More → The post The air gap is a myth and other OT security truths appeared first on Help Net Security.
http://news.poseidon-us.com/TTdSrH

Nobody was checking the drives that encrypt your laptop

A drive ships with a label promising hardware encryption. You plug it in, set a password, and trust the chip inside to handle the rest. Millions of laptops and workstations run this way, on solid-state drives built to the TCG Opal2 standard. Milan Brož and three colleagues bought 38 of those drives and ran them through a test bench. Brož maintains cryptsetup, the tool that configures disk encryption on most Linux systems. The drives came … More → The post Nobody was checking the drives that encrypt your laptop appeared first on Help Net Security.
http://news.poseidon-us.com/TTdSrC

PR3TACK preemptive framework maps threats before attackers use them

Defensive frameworks in cybersecurity record what attackers have already done. Analysts study a breach, document the method, and build detections around confirmed activity. This cycle leaves a gap between the moment an attacker invents a technique and the moment defenders learn to catch it. PR3TACK, the Preemptive Tactics and Countermeasures Knowledgebase, aims to close that gap. Vishal Thakur of Atlassian built the open framework that catalogs plausible attacker tactics, techniques, and procedures that remain unobserved … More → The post PR3TACK preemptive framework maps threats before attackers use them appeared first on Help Net Security.
http://news.poseidon-us.com/TTdSqv

AI agents are still logging in as humans

Most large companies run more than one AI platform at the same time. Developers pull up coding assistants, marketing teams lean on writing tools, and analysts query enterprise search across separate vendors. Single-provider setups keep giving way to mixed stacks as companies keep their options open. Sanctioned tools and personal accounts sit side by side inside many organizations. Anonymized sign-on data from more than 20,000 organizations on the Okta tracked this spread from June 2022 … More → The post AI agents are still logging in as humans appeared first on Help Net Security.
http://news.poseidon-us.com/TTdN6h

Cybersecurity jobs available right now: July 21, 2026

Application Security Analyst Stellantis | USA | On-site – View job details As an Application Security Analyst, you will perform application security testing using SAST, DAST, IAST, and other assessment tools to identify vulnerabilities and support remediation efforts. You will integrate security controls into CI/CD pipelines, implement and manage web application firewall (WAF) protections, and help establish secure development practices. CRISO Trustyfy | UAE | On-site – View job details As a Chief Risk and … More → The post Cybersecurity jobs available right now: July 21, 2026 appeared first on Help Net Security.
http://news.poseidon-us.com/TTdN6g

AI-generated reports push GNOME to shorten its disclosure window

Volunteer maintainers of open source projects now receive a steady flow of security vulnerability reports produced with AI tools. Many arrive with no mention that a language model helped write them. The volume has grown enough that GNOME is revising the rules it uses to track and disclose vulnerabilities across its projects. The changes come from Michael Catanzaro, who has run GNOME’s security issue tracking since November 2020 with support from Red Hat. Under the … More → The post AI-generated reports push GNOME to shorten its disclosure window appeared first on Help Net Security.
http://news.poseidon-us.com/TTdN6Y