Blog

OPM delays FEVS timeline, removes DEIA survey questions

OPM said this year’s FEVS will also bring back a question on poor performers that had previously been removed from the survey. The post OPM delays FEVS timeline, removes DEIA survey questions first appeared on Federal News Network.
http://news.poseidon-us.com/TJFVPY

OPM delays FEVS timeline, removes DEIA survey questions

OPM said this year’s FEVS will also bring back a question on poor performers that had previously been removed from the survey. The post OPM delays FEVS timeline, removes DEIA survey questions first appeared on Federal News Network.
http://news.poseidon-us.com/TJFVBM

If you held out for a RIF rather than taking the fork in the road, you may have an extra layer of protection

Some federal employees may be considering resigning rather than waiting to be told they’ve been terminated. But that may not be the best route. The post If you held out for a RIF rather than taking the fork in the road, you may have an extra layer of protection first appeared on Federal News Network.
http://news.poseidon-us.com/TJFS4h

OT/ICS cyber threats escalate as geopolitical conflicts intensify

Ransomware attacks against industrial organizations surged by 87% over the past year, while new malware families designed specifically for OT environments emerged. These findings highlight a troubling trend: OT systems are increasingly becoming mainstream targets, and even sophisticated threat actors use relatively unsophisticated tactics to infiltrate and disrupt industrial operations. State-sponsored groups embed themselves in critical infrastructure, while hacktivists and cybercriminals exploit known vulnerabilities, weak remote access configurations, and exposed OT assets. A persistent lack … More → The post OT/ICS cyber threats escalate as geopolitical conflicts intensify appeared first on Help Net Security.
http://news.poseidon-us.com/TJFNpd

MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Users of the MITRE Caldera cyber security platform have been urged to plug a critical hole (CVE-2025–27364) that may allow unauthenticated attackers to achieve remote code execution. About MITRE Caldera MITRE Caldera is a platform built on the MITRE ATT&CK framework and is used by cybersecurity teams for adversary emulation, to evaluate detections and defensive tools, train red and blue teamers, testing cyber ranges, and so on. It consists of a core system (including a … More → The post MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364) appeared first on Help Net Security.
http://news.poseidon-us.com/TJFNp8

2024 Malicious Infrastructure Report

Explore key 2024 cybercrime trends, including the rise of malware-as-a-service (MaaS), mobile malware, and Chinese and Russian state-sponsored threats. Learn how Insikt Group’s expanded tracking enhances threat detection and strengthens security defenses against evolving malicious infrastructure.
http://news.poseidon-us.com/TJFM1H

OSPS Baseline: Practical security best practices for open source software projects

The Open Source Security Foundation (OpenSSF), a cross-industry initiative by the Linux Foundation, has announced the initial release of the Open Source Project Security Baseline (OSPS Baseline), a tiered framework of security practices that evolve with the maturity of open source projects. About the OSPS Baseline The OSPS Baseline compiles existing guidance from OpenSSF and other expert groups, outlining tasks, processes, artifacts, and configurations that enhance software development and consumption security and, in general, should … More → The post OSPS Baseline: Practical security best practices for open source software projects appeared first on Help Net Security.
http://news.poseidon-us.com/TJFHBn

Understanding the AI Act and its compliance challenges

In this Help Net Security interview, David Dumont, Partner at Hunton Andrews Kurth, discusses the implications of the EU AI Act and how organizations can leverage existing GDPR frameworks while addressing new obligations such as conformity assessments and transparency requirements. Dumont also outlines strategies for mitigating risks from national-level enforcement variations and third-party AI vendors. The impact of the AI Act is often compared to that of the GDPR. Do you perceive any fundamental compliance … More → The post Understanding the AI Act and its compliance challenges appeared first on Help Net Security.
http://news.poseidon-us.com/TJDwdz

Announcing new models, customization tools, and enterprise agent upgrades in Azure AI Foundry 

We are excited to announce major updates to Azure AI Foundry, our integrated platform for designing, customizing, and managing enterprise-grade AI applications. The post Announcing new models, customization tools, and enterprise agent upgrades in Azure AI Foundry  appeared first on Microsoft Azure Blog.
http://news.poseidon-us.com/TJDwDC

The art of balancing data security with business goals

In this Help Net Security video, Nathan Parks, Senior Research Specialist at Gartner, discusses their recent research, revealing that only 14% of security leaders effectively balance data security with business goals. 35% of leaders are focused on securing data, while 21% prioritize using data for business objectives. Only one in seven organizations can do both effectively, risking increased vulnerability to cyber threats and operational inefficiencies. Gartner recommends that security and risk management leaders take five … More → The post The art of balancing data security with business goals appeared first on Help Net Security.
http://news.poseidon-us.com/TJDrZQ