Blog

Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks

Here’s an overview of some of last week’s most interesting news, articles and interviews: Apple fixes security feature bypass in macOS (CVE-2021-30892) Apple has delivered a barrage of security updates for most of its devices this week, and among the vulnerabilities fixed are CVE-2021-30892, a System Integrity Protection (SIP) bypass in macOS, and CVE-2021-30883, an iOS flaw that’s actively exploited by attackers. SolarWinds hackers are going after cloud, managed and IT service providers Nobelium, the … More → The post Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risks appeared first on Help Net Security.
http://news.poseidon-us.com/SBcp3P

ITOCHU invests $31.5M in SilverSky to improve the cybersecurity programs of its subsidiary companies

SilverSky announced that ITOCHU International, Inc., the North American company of Tokyo-based ITOCHU Corporation, has signed an agreement to invest $31.5 million in SilverSky. Significantly bolstering SilverSky’s ability to scale its operations worldwide, the ITOCHU investment broadens the company’s access to the Japanese market as well as all of APAC. Additionally, ITOCHU is set to leverage SilverSky’s service capabilities to improve the cybersecurity programs of its around 290 subsidiary companies around the globe. Founded in … More → The post ITOCHU invests $31.5M in SilverSky to improve the cybersecurity programs of its subsidiary companies appeared first on Help Net Security.
http://news.poseidon-us.com/SBc1rQ

Every day is Turkey Day at this tavern

Local restaurateur Hakkan Ilhan tells us there’s more to a Turkish breakfast than Turkish coffee.
http://news.poseidon-us.com/SBbfTB

Remote Desktop Protocol (RDP) Discovery, (Sat, Oct 30th)

I have noticed a surge in probe against the RDP service in the past 2 weeks. In August, a remote code execution (RCE) critical patch was released to fix an exploit related to CVE-2021-34535 which include a POC to exploit this vulnerability. This vulnerability is also affecting Microsoft Hyper-V Manager “Enhanced Session Mode” [5] and Microsoft Defender&#x27s Application Guard (WDAG) [6].
http://news.poseidon-us.com/SBbTmX

Fun stuff: frightful fun

Federal News Network’s Jory Heckman speaks with Recreation News Publisher Karl Teel about interesting things to do in and near the nation’s capital.
http://news.poseidon-us.com/SBZdRP

Vanguard CIO John Marcante on the startup mentality

With disruption accelerating across every industry, IT leaders are pressed constantly by the question: How can we leverage emerging technologies to ensure our organization thrives in the years ahead? CIO.com’s Maryfran Johnson sat down with John Marcante, global CIO and managing director at Vanguard, to discuss just that. A 28-year veteran of the investment management firm, Marcante has held executive roles across many of Vanguard’s businesses, including its high net worth business, asset management, and financial advice, giving him a unique, cross-functional perspective on organizational innovation, which he brings to bear on his role as a member of Vanguard’s Innovation Board and as a founding member of its Innovation Studio. To read this article in full, please click here
http://news.poseidon-us.com/SBZRys

Vanguard CIO John Marcante on the startup mentality

With disruption accelerating across every industry, IT leaders are pressed constantly by the question: How can we leverage emerging technologies to ensure our organization thrives in the years ahead? CIO.com’s Maryfran Johnson sat down with John Marcante, global CIO and managing director at Vanguard, to discuss just that. A 28-year veteran of the investment management firm, Marcante has held executive roles across many of Vanguard’s businesses, including its high net worth business, asset management, and financial advice, giving him a unique, cross-functional perspective on organizational innovation, which he brings to bear on his role as a member of Vanguard’s Innovation Board and as a founding member of its Innovation Studio. To read this article in full, please click here
http://news.poseidon-us.com/SBZRys

New features coming to the TSP – here’s what you need to know

The Thrift Savings Plan will roll out a suite of new security tools and digital features, including a mobile app, mutual fund window and online customer service options, for participants next summer. Here’s a preview of what to expect.
http://news.poseidon-us.com/SBYKR7

Agencies look toward new emergency networks when disaster strikes

Agencies are eyeing a range of possibilities to take advantage of 5G advances, but perhaps no application is more urgent than ensuring and even boosting connectivity to aide disaster response. “Through mechanisms in 4G and 5G, we can prioritize access and bandwidth in such way that wireless priority service can be given to first responders,” said Mark McDiarmid, senior vice president for radio network engineering and development at T-Mobile USA.
http://news.poseidon-us.com/SBYJGg

Agencies look toward new emergency networks when disaster strikes

Agencies are eyeing a range of possibilities to take advantage of 5G advances, but perhaps no application is more urgent than ensuring and even boosting connectivity to aide disaster response. “Through mechanisms in 4G and 5G, we can prioritize access and bandwidth in such way that wireless priority service can be given to first responders,” said Mark McDiarmid, senior vice president for radio network engineering and development at T-Mobile USA.
http://news.poseidon-us.com/SBYJGg