Blog

CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042)

CISA has added CVE-2025-21042, a vulnerability affecting Samsung mobile devices, to its Known Exploited Vulnerabilities (KEV) catalog, and has ordered US federal civilian agencies to address it by the start of December. “This type of vulnerability is a frequent attack vector for malicious cyber actors and poses significant risks to the federal enterprise,” the Cybersecurity and Infrastructure Security Agency noted. In this particular case, the danger for federal agencies might be higher than usual, as … More → The post CISA: Patch Samsung flaw exploited to deliver spyware (CVE-2025-21042) appeared first on Help Net Security.
http://news.poseidon-us.com/TPCJm1

Action1 addresses Intune gaps with patching and risk-based vulnerability prioritization

Action1 announced new integrations that extend Microsoft Intune with advanced patching and vulnerability management. The enhancements close security and compliance gaps in Intune by adding comprehensive third-party application patching, risk-based vulnerability prioritization, and real-time visibility across Windows, macOS, and Linux. Microsoft Intune provides capabilities in device provisioning, mobile device management, and policy enforcement. Action1 builds on this foundation by delivering automated patching for hundreds of third-party applications, live dashboards showing real-time patch compliance, and actionable … More → The post Action1 addresses Intune gaps with patching and risk-based vulnerability prioritization appeared first on Help Net Security.
http://news.poseidon-us.com/TPCJlv

Red Hat OpenShift 4.20 unifies enterprise IT, from virtual machines to AI workloads

Red Hat has announced OpenShift 4.20, the latest version of its hybrid cloud application platform built on Kubernetes. Red Hat OpenShift 4.20 introduces capabilities for accelerating AI workloads, strengthening core platform security and enhancing virtualization strategies consistently from the datacenter, to public clouds, and the edge. As organizations navigate complexity and expanding regulatory requirements, they need a more consistent and reliable platform to bridge diverse applications and services across their entire IT footprint. There is … More → The post Red Hat OpenShift 4.20 unifies enterprise IT, from virtual machines to AI workloads appeared first on Help Net Security.
http://news.poseidon-us.com/TPCJkq

Brain-like learning found in bacterial nanopores

Scientists at EPFL have unraveled the mystery behind why biological nanopores, tiny molecular holes used in both nature and biotechnology, sometimes behave unpredictably. By experimenting with engineered versions of the bacterial pore aerolysin, they discovered that two key effects, rectification and gating, stem from the pore’s internal electrical charges and their interaction with passing ions. The team even built nanopores that imitate brain-like “learning,” hinting at future applications in bio-inspired computing and ion-based processors.
http://news.poseidon-us.com/TPCHwd

Germany takes first step toward quantum-secure national ID cards

Since its introduction in 2010, Germany’s national ID card with its built-in online identification feature has set a high standard for security. The next generation must now withstand potential quantum-computer attacks, covering both hardware and software, as each card will remain valid for ten years. In recent months, Bundesdruckerei and G+D have built a joint technical foundation for this transformation. Together with the German Federal Office for Information Security (BSI), they developed a demonstrator using … More → The post Germany takes first step toward quantum-secure national ID cards appeared first on Help Net Security.
http://news.poseidon-us.com/TPCCqC

GNU Coreutils 9.9 brings fixes and updates across essential tools

GNU Coreutils is the backbone of many enterprise Linux environments. It provides the basic file, shell, and text utilities that every GNU-based system depends on. The latest release, version 9.9, refines these tools with fixes and performance improvements. Several long-standing issues have been resolved. The basenc –base58 command now works properly with large inputs, correcting a bug introduced in version 9.8. The cksum utility improves support for base64 encoded input and tagged formats used with … More → The post GNU Coreutils 9.9 brings fixes and updates across essential tools appeared first on Help Net Security.
http://news.poseidon-us.com/TPCCq6

Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480)

Attackers have exploited a now-fixed vulnerability (CVE-2025-12480) in the Gladinet Triofox secure file sharing and remote access platform while it was still a zero-day, Mandiant revealed on Monday. CVE-2025-12480 exploitation and attack details Gladinet’s Triofox solution is used by medium and large businesses to securely share files and allow users to access them without a VPN. CVE-2025-12480 is an Improper Access Control flaw allowing unauthenticated attackers to access the solution’s configuration/setup page. According to Mandiant’s … More → The post Attackers exploited another Gladinet Triofox zero-day (CVE-2025-12480) appeared first on Help Net Security.
http://news.poseidon-us.com/TPCCp3

Firewalla unveils MSP 2.9 to simplify multi-device network management

Firewalla has announced the release of MSP 2.9, the latest update to its Managed Security Portal (MSP). The update is now available to all MSP Early Access users. Firewalla MSP is a web-based platform designed for security and infosec professionals to manage multiple Firewalla devices. Version 2.9 introduces new features and improvements to simplify network management, enhance security, and give IT teams greater control. New features in MSP 2.9: Search flows with FireAI: Users can … More → The post Firewalla unveils MSP 2.9 to simplify multi-device network management appeared first on Help Net Security.
http://news.poseidon-us.com/TPBvk1

To get funding, CISOs are mastering the language of money

In this Help Net Security interview, Chris Wheeler, CISO at Resilience, talks about how CISOs are managing changing cybersecurity budgets. While overall spending is up, many say the increases don’t match their most pressing needs. Wheeler explains how organizations are reallocating funds, measuring ROI, and linking cybersecurity plans to business goals. Many CISOs say cybersecurity budgets are rising overall, but not necessarily where they are most needed. From your experience, where are budgets increasing, and … More → The post To get funding, CISOs are mastering the language of money appeared first on Help Net Security.
http://news.poseidon-us.com/TPBr1x