433 Central Ave., 4th Floor, St. Petersburg, FL 33701 | info@poseidon-us.com | Office: (813) 563-2652

Industry Exchange Cyber 2025: Zimperium’s Kern Smith on why securing mobile devices doesn’t necessarily mean locking them down

With the right continuous monitoring of mobile activity and apps, agencies can avoid restrictive device policies, advises Zimperium’s solutions engineering VP. The post Industry Exchange Cyber 2025: Zimperium’s Kern Smith on why securing mobile devices doesn’t necessarily mean locking them down first appeared on Federal News Network.
http://news.poseidon-us.com/THlhRf

Industry Exchange Cyber 2025: Tanium’s Melissa Bischoping on why autonomous is new watchword in endpoint security

Tanium product research director describes autonomous endpoint security as akin to techie “colleague” that can help cyber team keep ahead of threats. The post Industry Exchange Cyber 2025: Tanium’s Melissa Bischoping on why autonomous is new watchword in endpoint security first appeared on Federal News Network.
http://news.poseidon-us.com/THlhN4

USAID staffers told to stay out of Washington headquarters after Musk said Trump agreed to close it

USAID staffers say they tracked 600 employees who reported being locked out of the agency’s computer systems overnight. The post USAID staffers told to stay out of Washington headquarters after Musk said Trump agreed to close it first appeared on Federal News Network.
http://news.poseidon-us.com/THlg34

Qualys TotalAppSec enables organizations to address risks across web applications and APIs

Qualys announced TotalAppSec, its new AI-powered application risk management solution to enable organizations to monitor and mitigate cyber risk from critical web applications and APIs. Qualys TotalAppSec unifies API security, web application scanning, and web malware detection across on-premises to hybrid and multi-cloud environments, providing companies with a comprehensive view of their application security risk and posture. This allows organizations to immediately assess and prioritize their most critical application risks across the entire enterprise and … More → The post Qualys TotalAppSec enables organizations to address risks across web applications and APIs appeared first on Help Net Security.
http://news.poseidon-us.com/THlfxS

DeepSeek’s popularity exploited to push malicious packages via PyPI

Two malicious packages leveraging the DeepSeek name have been published to the Python Package Index (PyPI) package repository, and in the 30 minutes or so they were up, they have been downloaded 36 times. The malicious packages The attack started on January 29, 2025, when an existing account published two packages. Named deepseeek and deepseekai, the packages were ostensibly client libraries for access to and interacting with the DeepSeek AI API, but they contained functions … More → The post DeepSeek’s popularity exploited to push malicious packages via PyPI appeared first on Help Net Security.
http://news.poseidon-us.com/THlfww

Crypto Wallet Scam, (Mon, Feb 3rd)

Johannes noticed a SPAM comment on his YouTube channel:
http://news.poseidon-us.com/THlHzC

The hidden dangers of a toxic cybersecurity workplace

In this Help Net Security interview, Rob Lee, Chief of Research and Head of Faculty at SANS Institute, discusses what a toxic environment looks like and how professionals can recognize red flags such as high turnover, burnout, and a pervasive fear of mistakes. Addressing these issues early is key to maintaining a healthy and effective team. Can you describe what a “toxic cybersecurity environment” looks like? What are some of the red flags professionals should … More → The post The hidden dangers of a toxic cybersecurity workplace appeared first on Help Net Security.
http://news.poseidon-us.com/THl93h

BadDNS: Open-source tool checks for subdomain takeovers

BadDNS is an open-source Python DNS auditing tool designed to detect domain and subdomain takeovers of all types. BadDNS modules cname – Check for dangling CNAME records and interrogate them for subdomain takeover opportunities ns – Check for dangling NS records and interrogate them for takeover opportunities mx – Check for dangling MX records and assess their base domains for availability nsec – Enumerate subdomains by NSEC-walking references – Check HTML content for links or … More → The post BadDNS: Open-source tool checks for subdomain takeovers appeared first on Help Net Security.
http://news.poseidon-us.com/THl67P

Only 3% of organizations have a dedicated budget for SaaS security

Mid-market organizations are grappling with managing the large volume of SaaS applications, both sanctioned and unsanctioned, with actual numbers often exceeding expectations, according to Cloud Security Alliance. Security teams are struggling with a growing attack surface Disconcertingly, 44% of organizations prioritize protecting all their sanctioned applications, and a mere 17% include unsanctioned ones in this priority. Given that limited visibility into these applications results in significant security gaps, specialized tools and automation are essential to … More → The post Only 3% of organizations have a dedicated budget for SaaS security appeared first on Help Net Security.
http://news.poseidon-us.com/THl660