Blog

Why we must go beyond tooling and CVEs to illuminate security blind spots

In April, the cybersecurity community held its breath as the Common Vulnerabilities and Exposures (CVE) program was plunged into a moment of existential crisis. In the end, an eleventh-hour reprieve saved the day. While CVEs do not encompass the full scope of network security issues, they are still a critical component to track as part of a security program. Over the last 25 years, the CVE program has evolved into a critical, shared, and global … More → The post Why we must go beyond tooling and CVEs to illuminate security blind spots appeared first on Help Net Security.
http://news.poseidon-us.com/TLzYzf

Making security and development co-owners of DevSecOps

In this Help Net Security interview, Galal Ibrahim Maghola, former Head of Cybersecurity at G42 Company, discusses strategic approaches to implementing DevSecOps at scale. Drawing on experience in regulated industries such as finance, telecom, and critical infrastructure, he offers tips on ownership models, automation, and compliance. His approach focuses on collaborative practices that balance speed, security, and developer productivity. How do you recommend companies structure ownership of DevSecOps? Should security teams drive it, or is … More → The post Making security and development co-owners of DevSecOps appeared first on Help Net Security.
http://news.poseidon-us.com/TLzYxn

AI adoption is booming but secure scaling not so much

96% of organizations are deploying AI models, and virtually no organization can move into the future without considering how ML and intelligent apps might soon affect its operations, according to F5. Only 2% of global organizations are highly ready to scale AI securely across operations. The report compiles insights from 650 global IT leaders and additional research with 150 AI strategists, representing organizations with at least $200 million in annual revenue. AI adoption outpaces governance … More → The post AI adoption is booming but secure scaling not so much appeared first on Help Net Security.
http://news.poseidon-us.com/TLzYxd

Buy Now, Pay Later… with your data

Buy Now, Pay Later (BNPL) apps are everywhere these days. Whether you’re buying sneakers or groceries, chances are you’ve seen the option to split your payments over time. It’s quick and easy. But behind the convenience is a growing privacy concern that most users know little about. A new study from Incogni digs into just how much personal information BNPL apps collect and share. The research looked at eight of the most popular BNPL apps … More → The post Buy Now, Pay Later… with your data appeared first on Help Net Security.
http://news.poseidon-us.com/TLzWzb

New infosec products of the week: July 18, 2025

Here’s a look at the most interesting products from the past week, featuring releases from At-Bay, Immersive, NETSCOUT, Socure, and Stellar Cyber. Stellar Cyber 6.0.0 enhances automation, workflow intelligence, and user experience The 6.0.0 release builds on Stellar Cyber’s vision of delivering intelligent, efficient, and decisive security operations through automation, AI, and integration, all while remaining open, flexible, and accessible for security teams of any size or skill level. NETSCOUT Adaptive Threat Analytics improves incident … More → The post New infosec products of the week: July 18, 2025 appeared first on Help Net Security.
http://news.poseidon-us.com/TLzWvR

ISC Stormcast For Friday, July 18th, 2025 https://isc.sans.edu/podcastdetail/9532, (Fri, Jul 18th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
http://news.poseidon-us.com/TLzVMJ

Microsoft Azure AI Foundry Models and Microsoft Security Copilot achieve ISO/IEC 42001:2023 certification

Microsoft has achieved ISO/IEC 42001:2023 certification—a globally recognized standard for Artificial Intelligence Management Systems for both Azure AI Foundry Models and Microsoft Security Copilot. The post Microsoft Azure AI Foundry Models and Microsoft Security Copilot achieve ISO/IEC 42001:2023 certification appeared first on Microsoft Azure Blog.
http://news.poseidon-us.com/TLzV1s

Poor Passwords Tattle on AI Hiring Bot Maker Paradox.ai

Security researchers recently revealed that the personal information of millions of people who applied for jobs at McDonald’s was exposed after they guessed the password (“123456”) for the fast food chain’s account at Paradox.ai, a company that makes artificial intelligence based hiring chatbots used by many Fortune 500 companies. Paradox.ai said the security oversight was an isolated incident that did not affect its other customers, but recent security breaches involving its employees in Vietnam tell a more nuanced story.
http://news.poseidon-us.com/TLzRhM

How to fit your whole government career and executive qualifications into a two-page resume

“There is going to be an adjustment for both the people doing the hiring and the individuals who are being hired,” Diane Hudson said. The post How to fit your whole government career and executive qualifications into a two-page resume first appeared on Federal News Network.
http://news.poseidon-us.com/TLzNml

How to fit your whole government career and executive qualifications into a two-page resume

“There is going to be an adjustment for both the people doing the hiring and the individuals who are being hired,” Diane Hudson said. The post How to fit your whole government career and executive qualifications into a two-page resume first appeared on Federal News Network.
http://news.poseidon-us.com/TLzNlf