433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | [email protected] | Office: (813) 563-2652

June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft

May 2024 Patch Tuesday was unusual because we had security updates from Adobe, Apple, Google, Mozilla, and Microsoft on the same day. While individually from each vendor, the updates weren’t that large, managing them together was more challenging. On the Microsoft front, the only Critical update was for Sharepoint Server, but there were important updates for Windows 11 with 41 CVEs addressed and Windows 10 with 47 CVEs addressed. Microsoft has been busy this month, … More → The post June 2024 Patch Tuesday forecast: Multiple announcements from Microsoft appeared first on Help Net Security.
http://news.poseidon-us.com/T7xnwL

Accelerating the R&D of wearable tech: Combining collaborative robotics, AI

Engineers have developed a model that combines machine learning and collaborative robotics to accelerate the design of aerogel materials used in wearable heating applications.
http://news.poseidon-us.com/T7w19N

Malicious Python Script with a “Best Before” Date, (Thu, Jun 6th)

When you buy some fresh food, it's always a good idea to keep an eye on the best-before date. I found a funny piece of malicious Python script that implements the same technique. It will execute only before a specified date (Jun 10th in this case). The script purpose is classic: it will fetch a payload from a remote site, inject it in memory and start a new thread. Such payload are usually related to CobaltStike. I think that the script is still being developed and the attacker tested its score on VT because the payload is fetched from an RFC1918 IP address.
http://news.poseidon-us.com/T7vs8d

HYPR raises $30 million to combat threats posed by generative AI

HYPR secures $30 million in funding from Silver Lake Waterman to drive accelerated advancements in technologies to combat the rising threat of generative AI-driven credential-based attacks. This investment validates the expanded adoption of HYPR’s passwordless authentication solutions and support for its policy risk and identity verification products – evidenced with recent large-scale deployments by leading enterprises and strategic partnerships between HYPR and key technology leaders. Recent research findings from HYPR reveal that 60% of organizations … More → The post HYPR raises $30 million to combat threats posed by generative AI appeared first on Help Net Security.
http://news.poseidon-us.com/T7vYW2

Sniffnet: Free, open-source network monitoring

Sniffnet is a free, open-source network monitoring tool to help you easily track your Internet traffic. What sets it apart is its strong focus on user experience. Unlike most network analyzers, Sniffnet is built to be easily usable by everyone, regardless of technical expertise. “There are different features that make Sniffnet stand out. First, it’s very rare to see a GUI application entirely developed in Rust. From a usability standpoint, the tool is unique in … More → The post Sniffnet: Free, open-source network monitoring appeared first on Help Net Security.
http://news.poseidon-us.com/T7v9hN

Appdome SDKProtect reduces third-party mobile supply chain risk

Appdome released a new mobile SDK protection and mobile threat streaming service, called Appdome SDKProtect. Appdome SDKProtect is designed to end third-party, mobile supply chain risk and democratize mobile threat intelligence and telemetry data among mobile SDK developers. The new service enables mobile SDK developers to quickly and easily create protected and threat-aware versions of their mobile SDKs, reducing fraud and ensuring compliance. Mobile SDKs play a critical role in the mobile app economy, enabling … More → The post Appdome SDKProtect reduces third-party mobile supply chain risk appeared first on Help Net Security.
http://news.poseidon-us.com/T7s6Q1

N2WS launches cross-cloud volume restore for AWS and Azure

N2WS has introduced several new features to its cloud-native backup and disaster recovery (BDR) platform to help enterprises and managed service providers (MSPs) with combatting the increasing number of cybersecurity attacks on organizations while also ensuring data sovereignty, enhancing data security, and optimizing costs. The most significant update to the company’s platform includes new cross-cloud BDR capabilities between Amazon Web Services (AWS) and Microsoft Azure. These allow enterprises and MSPs to back up servers in … More → The post N2WS launches cross-cloud volume restore for AWS and Azure appeared first on Help Net Security.
http://news.poseidon-us.com/T7s6PC

No summer break for cybercrime: Why educational institutions need better cyber resilience

The education system isn’t equipped to handle today’s cyberthreats. I’m not just talking about cybersecurity education in schools shaping the technical workforce of the future – America’s schools themselves are prime targets for cybercrime today. In fact, according to some reports, attacks – from ransomware and phishing, to denial-of-service and more – on these institutions are growing each year. Support on the federal and state level, like stimulus to help schools upgrade their hardware and … More → The post No summer break for cybercrime: Why educational institutions need better cyber resilience appeared first on Help Net Security.
http://news.poseidon-us.com/T7rc00