Blog

Contrast Security AVM identifies application and API vulnerabilities in production

Contrast Security released Application Vulnerability Monitoring (AVM), a new capability of Application Detection and Response (ADR). AVM works within applications to find application and API vulnerabilities in production and correlate those vulnerabilities with attacks. Accurately identifying the issues in production with AVM results in lower overall cyber risk. Currently, companies are missing vulnerabilities in production because they are using traditional technologies like DAST, SCA, and SAST. AVM provides an alternative, allowing SecOps and DevOps teams … More → The post Contrast Security AVM identifies application and API vulnerabilities in production appeared first on Help Net Security.
http://news.poseidon-us.com/THP13m

Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them?

A threat actor has leaked configuration files (aka configs) for over 15,000 Fortinet Fortigate firewalls and associated admin and user credentials. The collection has been leaked on Monday and publicized on an underground forum by the threat actor that goes by “Belsen_Group”, supposedly as a free offering to solidify the name of the group in the forum users’ memory. The leaked 1.6 GB archive contains folders ordered by country, and inside each are folders named … More → The post Configuration files for 15,000 Fortinet firewalls leaked. Are yours among them? appeared first on Help Net Security.
http://news.poseidon-us.com/THP12R

Transportation secretary pick vows to buck any pressure to help Elon Musk in agency probes of Tesla

Transportation secretary nominee Sean Duffy promised to not interfere in ongoing agency investigations into Elon Musk’s electric car company if confirmed to head the department. Duffy said Wednesday that he would allow the Department of Transportation to follow the evidence regarding Tesla and not interfere — even in the face of political pressure to do so. A big Donald Trump ally, Musk has repeatedly clashed with the agency. Duffy also promised at his Senate confirmation hearing to “restore global confidence” in Boeing, hire more air traffic controllers and create federal rules for self-driving cars to help speed development of the technology. The post Transportation secretary pick vows to buck any pressure to help Elon Musk in agency probes of Tesla first appeared on Federal News Network.
http://news.poseidon-us.com/THP0z5

Trump’s pick for budget director won’t say whether he would release Ukraine aid

Russell Vought faced questions at his confirmation hearing Wednesday over his prior tenure as Trump’s budget director. The post Trump’s pick for budget director won’t say whether he would release Ukraine aid first appeared on Federal News Network.
http://news.poseidon-us.com/THP0wr

Is private cloud having a moment?

Faced with mounting hyperscaler bills, proliferating data and compute-hungry generative AI, enterprises are weighing alternatives to public cloud.
http://news.poseidon-us.com/THNzdL

Biden cyber EO seeks proof of security from software vendors

The new cybersecurity executive order seeks to put teeth behind the secure software development standards that federal vendors are supposed to be following. The post Biden cyber EO seeks proof of security from software vendors first appeared on Federal News Network.
http://news.poseidon-us.com/THNwJ9

New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344)

ESET researchers have identified a vulnerability (CVE-2024-7344) impacting most UEFI-based systems, which allows attackers to bypass UEFI Secure Boot. The issue was found in a UEFI application signed with Microsoft’s “Microsoft Corporation UEFI CA 2011” third-party certificate. Exploiting this vulnerability enables the execution of untrusted code during system boot, allowing attackers to deploy malicious UEFI bootkits, such as Bootkitty or BlackLotus, even on systems with UEFI Secure Boot enabled, regardless of the operating system. Impacted … More → The post New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344) appeared first on Help Net Security.
http://news.poseidon-us.com/THNsjC

Cisco AI Defense safeguards against the misuse of AI tools

Cisco announced Cisco AI Defense, a pioneering solution to enable and safeguard AI transformation within enterprises. As AI technology advances, new safety concerns and security threats are emerging at an unprecedented speed which existing security solutions are unprepared to protect against. Cisco AI Defense is purpose-built for enterprises to develop, deploy and secure AI applications with confidence. “Business and technology leaders can’t afford to sacrifice safety for speed when embracing AI,” said Jeetu Patel, EVP and … More → The post Cisco AI Defense safeguards against the misuse of AI tools appeared first on Help Net Security.
http://news.poseidon-us.com/THNshq

HarvestIQ.ai provides actionable insights for cybersecurity professionals

IT-Harvest launched HarvestIQ.ai, a platform featuring two AI assistants designed to redefine how professionals navigate the cybersecurity landscape. The Analyst AI provides access to IT-Harvest’s comprehensive database of 4,070 cybersecurity vendors, offering users instant insights into market players, trends, and innovations. Meanwhile, the Architect AI empowers users with tailored guidance on cybersecurity products, leveraging IT-Harvest’s in-depth analysis of over 11,300 products to help organizations make informed decisions about their cybersecurity strategies. “HarvestIQ.ai is a game-changer … More → The post HarvestIQ.ai provides actionable insights for cybersecurity professionals appeared first on Help Net Security.
http://news.poseidon-us.com/THNsgP

Regula enhances Document Reader SDK with full support for Digital Travel Credentials

Regula has updated its Regula Document Reader SDK. Now, the software fully supports the new Digital Travel Credential (DTC) format, aligned with the International Civil Aviation Organization (ICAO) standards. This enhancement enables governments, airlines, and border control authorities worldwide to process travel documents with security, efficiency, and ease—whether on-site or remotely. The DTC is a secure digital solution that streamlines travel experiences. It consolidates key personal information into a single virtual document that travelers can … More → The post Regula enhances Document Reader SDK with full support for Digital Travel Credentials appeared first on Help Net Security.
http://news.poseidon-us.com/THNp3V