Blog

Military spouses want clarity on return-to-office orders

“We are just looking for clarity from organizations and agencies about what the expectations will be and how they will implement the order,” said Eileen Huck. The post Military spouses want clarity on return-to-office orders first appeared on Federal News Network.
http://news.poseidon-us.com/THrLL3

Military spouses want clarity on return-to-office orders

“We are just looking for clarity from organizations and agencies about what the expectations will be and how they will implement the order,” said Eileen Huck. The post Military spouses want clarity on return-to-office orders first appeared on Federal News Network.
http://news.poseidon-us.com/THrLK7

Attackers compromise IIS servers by leveraging exposed ASP.NET machine keys

A ViewState code injection attack spotted by Microsoft threat researchers in December 2024 could be easily replicated by other attackers, the company warned. “In the course of investigating, remediating, and building protections against this activity, we observed an insecure practice whereby developers have incorporated various publicly disclosed ASP.NET machine keys from publicly accessible resources, such as code documentation and repositories, which threat actors have used to perform malicious actions on target servers.” The attack ASP.NET … More → The post Attackers compromise IIS servers by leveraging exposed ASP.NET machine keys appeared first on Help Net Security.
http://news.poseidon-us.com/THrKKf

Senate confirms Project 2025 architect Russell Vought to lead powerful White House budget office

He is planning to use one of the most powerful positions in federal government to zealously expand the president’s power. The post Senate confirms Project 2025 architect Russell Vought to lead powerful White House budget office first appeared on Federal News Network.
http://news.poseidon-us.com/THrJXM

After 30 years of code, Java remains an enterprise cornerstone

Despite major changes in licensing and costs, the programming language is still a dominant force in software development.
http://news.poseidon-us.com/THrGln

SSL 2.0 turns 30 this Sunday… Perhaps the time has come to let it die?, (Fri, Feb 7th)

The SSL 2.0 protocol was originally published back in February of 1995[1], and although it was quickly found to have significant security weaknesses, and a more secure alternative was released only a year later[2], it still received a fairly wide adoption.
http://news.poseidon-us.com/THrD5c

Self-sovereign identity could transform fraud prevention, but…

The way we manage digital identity is fundamentally broken. The root of the problem lies in traditional, centralized identity models, where a single organization holds and controls a user’s credentials, creating an attractive target for attackers. The bigger the database, the bigger the prize. Self-sovereign identity (SSI) presents a radical shift in how we think about digital identity. Instead of relying on centralized authorities, SSI puts control directly into the hands of individuals. Users store … More → The post Self-sovereign identity could transform fraud prevention, but… appeared first on Help Net Security.
http://news.poseidon-us.com/THr2zv

Ghidra 11.3 released: New features, performance improvements, bug fixes

NSA’s Research Directorate released version 11.3 of Ghidra, an open-source software reverse engineering (SRE) framework. It offers advanced analysis tools, enabling users to dissect and examine compiled code across multiple platforms, including Windows, macOS, and Linux. Ghidra 11.3 is fully backward compatible with project data from previous versions. However, programs and data type archives created or modified in 11.3 will not be compatible with earlier versions of Ghidra. Visual Studio Code Ghidra 11.3 replaces the … More → The post Ghidra 11.3 released: New features, performance improvements, bug fixes appeared first on Help Net Security.
http://news.poseidon-us.com/THqzYG

Infosec pros struggle under growing compliance

The implementation of new regulatory measures that impact the UK, EU, and beyond are driving organizations to enhance vigilance in addressing evolving cybersecurity and operational risks, according to AuditBoard. The research showed 91% of respondents report feeling concerned about cybersecurity threats to their organization, and 86% are aware of incidents within their industry in the past year. Compliance pressure grows among organizations Organizations are under constant pressure to adopt more proactive and strategic approaches to … More → The post Infosec pros struggle under growing compliance appeared first on Help Net Security.
http://news.poseidon-us.com/THqzXF

Overconfident execs are making their companies vulnerable to fraud

Cyber fraud (which includes activity such as hacking, deepfakes, voice cloning and highly sophisticated phishing schemes) rose by 14% year over year, according to Trustpair. US faces cyber fraud growth The proprietary research, which is based on a survey of 200 senior finance, treasury, and accounts payable executives, reveals that 90% of US companies were targeted by cyber fraud in the past year, compared to 79% of companies in 2023. The surge in fraud is … More → The post Overconfident execs are making their companies vulnerable to fraud appeared first on Help Net Security.
http://news.poseidon-us.com/THqwhn