Blog

Fortinet patches pre-auth RCE, update your Fortigate firewalls ASAP! (CVE-2023-27997)

Fortinet has released several versions of FortiOS, the OS/firmware powering its Fortigate firewalls, without mentioning that they include a fix for CVE-2023-27997, a remote code execution (RCE) flaw that does not require the attacker to be logged in to exploit it. The vulnerability has been fixed in FortiOS versions 7.2.5, 7.0.12, 6.4.13, 6.2.15 and, apparently also in v6.0.17 (even though Fortinet officially stopped supporting the 6.0 branch last year). Enterprise admins are advised to upgrade … More → The post Fortinet patches pre-auth RCE, update your Fortigate firewalls ASAP! (CVE-2023-27997) appeared first on Help Net Security.
http://news.poseidon-us.com/SqWSRl

DShield Honeypot Activity for May 2023 , (Sun, Jun 11th)

It is always interesting to review what my DShield honeypot has stored the previous month, what is also interesting is how the activity vary from week to week. Beside the graph, it is the Top 10 IPs for May.
http://news.poseidon-us.com/SqW9SC

Week in review: 9 free cybersecurity whitepapers, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Cl0p announces rules for extortion negotiation after MOVEit hack The Cl0p cyber extortion crew says that the many organizations whose data they have pilfered by exploiting a vulnerability in the MOVEit Transfer solution have until June 14 to get in contact with them – or they will post their name on their dedicated leak page. 0mega ransomware gang changes tactics … More → The post Week in review: 9 free cybersecurity whitepapers, Patch Tuesday forecast appeared first on Help Net Security.
http://news.poseidon-us.com/SqVVn2

Agencies finding DEIA programs an ‘incredibly important retention strategy’

As the federal government struggles to find ways to recruit new talent and retain current employees, some agencies are finding success through diversity, equity, inclusion and accessibility (DEIA) working groups.
http://news.poseidon-us.com/SqRPC0

South Korean Government Agencies, NIST Sign MOU to Cooperate on Automated Vehicle R&D

On April 24, 2023, representatives of NIST and the Republic of Korea’s government agencies – the Korea Institute for Advancement of Technology and Korea Automotive Technology Institute – signed a memorandum of understanding to cooperate on research
http://news.poseidon-us.com/SqRHWw

How 6 tech execs solve big digital dilemmas

Leaders can shape how companies approach their most pressing digital challenges — whether it means relying on past experiences or keeping customers at the center.
http://news.poseidon-us.com/SqQkqw

GSA’s DiMartini to become top human capital official at IRS

Traci DiMartini, stepping down from her role as chief human capital officer at the General Services Administration, will move to IRS at the end of June.
http://news.poseidon-us.com/SqQhbG

CFO-CIO teamwork key to IT spend results: Gartner

Digital investments tend to require collaboration due to their complexity and cross-functional nature, according to Gartner Analyst Emily Riley.
http://news.poseidon-us.com/SqPwfp

Microsoft partners with PwC and EY to promote AI safety

Microsoft acknowledged its commitments to safety must adapt to evolving technology and regulatory conditions.
http://news.poseidon-us.com/SqNNgW

Flip the script on zero trust: Think of it as end-to-end IT modernization, suggests SAIC cyber leader

Zero trust is far more than a cyber initiative, says SAIC’s Shawn Kingsberry, who encourages agencies to tackle it as an IT modernization effort. He shares three ways agencies can accelerate that journey.
http://news.poseidon-us.com/SqNF6z