Blog

Week in review: Electronic warfare, cybersecurity career plan, Patch Tuesday forecast

Here’s an overview of some of last week’s most interesting news, articles and interviews: October 2021 Patch Tuesday forecast: Halloween came early this year Halloween is not until the end of the month, but there has already been a lot of scary activity leading up to this patch Tuesday. PrintNightmare and Apple zero-days are just a few that have made the news. Security and trust in software remains top priority for buyers Faster decision making, … More → The post Week in review: Electronic warfare, cybersecurity career plan, Patch Tuesday forecast appeared first on Help Net Security.
http://news.poseidon-us.com/S9FZWy

Scanning for Previous Oracle WebLogic Vulnerabilities, (Sat, Oct 9th)

In the past few weeks, I have captured multiple instance of traffic related to some past Oracle vulnerabilities that have already been patched. The first is related to a RCE (CVE-2017-10271) that can be triggered to execute commands remotely by bypassing the CVE-2017-3506 patch's limitations. The POST contains an init.sh script which doesn't appear to be available for download.
http://news.poseidon-us.com/S9Dnm8

Scanning for Previous Oracle WebLogic Vulnerabilities, (Sat, Oct 9th)

In the past few weeks, I have captured multiple instance of traffic related to some past Oracle vulnerabilities that have already been patched. The first is related to a RCE (CVE-2017-10271) that can be triggered to execute commands remotely by bypassing the CVE-2017-3506 patch's limitations. The POST contains an init.sh script which doesn't appear to be available for download.
http://news.poseidon-us.com/S9Dnm8

Engineers 3D-print personalized, wireless wearables that never need a charge

Engineers have developed a new type of wearable with several unprecedented benefits. Not only are the devices custom 3D-printed based on body scans of wearers, but they can operate continuously using a combination of wireless power transfer and compact energy storage.
http://news.poseidon-us.com/S9DgV4

Fun stuff: there’s a beer fest on a corner in Indiana, Pennsylvania

Federal News Network’s Jory Heckman speaks with Recreation News Publisher Karl Teel about interesting things to do in and near the nation’s capital.
http://news.poseidon-us.com/S9CYpj

Sontiq Digital Safety and Security features help families tackle identity crimes and cyberthreats

With the ongoing vulnerability of families succumbing to the exponential volume and velocity of identity crimes and cyberthreats, Sontiq announced an exclusive set of Digital Safety and Security features. These new features will be included in Sontiq’s Identity Theft Protection plans for families, including those under the IdentityForce product brand. With more than 1 million children having their identity stolen each year, identity and child safety experts agree that protecting the information of all family … More → The post Sontiq Digital Safety and Security features help families tackle identity crimes and cyberthreats appeared first on Help Net Security.
http://news.poseidon-us.com/S9BjFt

Skyflow Fintech Privacy Vault accelerates product development for software teams

Skyflow announced a new zero trust data privacy vault that allows software teams to build and ship next-generation financial apps and systems faster. The new Fintech Privacy Vault removes the data security, privacy and compliance challenges associated with personal identity and financial data. The vault is delivered as a simple API and supports a broad set of financial services workflows and compliance requirements, including money movement, customer onboarding, customer data management, card issuance, and card … More → The post Skyflow Fintech Privacy Vault accelerates product development for software teams appeared first on Help Net Security.
http://news.poseidon-us.com/S9Bg7H

IT orgs partner on apprenticeships, aiming to diversify tech pipeline

SNS Technologies joined CompTIA Apprenticeships for Tech, an initiative to expand and diversify the information technology workforce.
http://news.poseidon-us.com/S9B7jZ

3 strategies for securing federal mobile data against unintentional collection, leaks

Government users have to be ever vigilant when it comes to smartphone security threats, even when those threats may be posed by well-meaning technological advancements, such as Apple’s efforts to crack down on child sexual abuse.
http://news.poseidon-us.com/S99WCf

TuxCare DatabaseCare provides live patching service for open-source enterprise-grade databases

TuxCare released DatabaseCare, its live patching service for the most common open-source enterprise-grade databases, MySQL, MariaDB and PostgreSQL. With this service, TuxCare eliminates one of the biggest hurdles in maintaining up-to-date databases – the difficulty of taking down one of the core services in today’s enterprise IT infrastructure. While most IT teams understand the risks associated with an unpatched database, they struggle to find the right maintenance window opportunities to deploy security patches and fixes … More → The post TuxCare DatabaseCare provides live patching service for open-source enterprise-grade databases appeared first on Help Net Security.
http://news.poseidon-us.com/S97LCr