Positive Technologies Adds Unified Console to PT X for Centralized Incident and Asset Management
Positive Technologies has added a unified console to its PT X platform, allowing customers to manage incidents and assets from a single interface. The new capability eliminates the need to switch between separate windows, reports, and host lists when tracking attacks, controlling response actions, and evaluating infrastructure security.
The service continuously displays attempted attacks, their potential causes, and the current status of incident handling. Events are automatically ranked by priority so that specialists can immediately focus on cases requiring their involvement while PT X handles routine matters independently.
Customers can predefine the assets on which Positive Technologies is permitted to perform response actions. For each node, an owner can be assigned and one of three response scenarios selected: the customer’s own team blocks attacker activity, PT X acts automatically, or the platform requests explicit approval before proceeding. Upon completion, the system generates a detailed report listing who performed each action and when.
A separate dashboard shows monitoring coverage completeness. Hosts protected by MaxPatrol EDR are clearly marked, while unprotected assets are highlighted as potential weak points that could be attractive to attackers.
Through the same personal cabinet, customers can download distribution packages and installation instructions for PT X. The update also expands the use of machine learning by combining large language models with classical ML techniques to speed up early-stage attack detection and response. Analysis of low- and medium-severity incidents is now automated, freeing experts to concentrate on more critical threats.
Another new feature provides analysis of the external attack surface. PT X shows internet-accessible resources from the viewpoint of a potential attacker and helps identify weaknesses before they can be exploited. According to Positive Technologies, the platform has already detected and helped stop serious attacks in half of the organizations where it has been deployed. The company also conducts regular cyber testing in which researchers attempt to achieve unacceptable events and receive rewards for successful findings, supplying customers with concrete recommendations for improving defenses.
Related articles
Rostelecom Refactors InfoSec Careers: Matching Employee Skills to Evolving Business Priorities
Rostelecom's information security block developed a systematic approach to reassess employee expertise and redirect talent to new roles when business structures change rapidly. In one case, an architect hired for a specific team was reassigned after the unit was disbanded, initially moving to a similar position that did not fully align with his broader competencies. HR-business partner Olga Lapshina examined the specialist's full background, including prior work in audits, methodology development, regulatory documentation, university teaching, and scientific research, plus strong mentoring abilities with younger staff. These skills matched the needs of the methodology department, leading to a transfer supported by an individual development plan and a mentor via the internal Tochka Rosta platform. Within two months the employee contributed improvements that accelerated preliminary InfoSec audits by 30 percent and risk assessments by 20 percent while expanding threat scenario coverage by 10 percent. The initiative demonstrates Rostelecom's emphasis on horizontal career movement and retention of experienced professionals through structured career tracks.
How to Avoid Becoming the Hero of 'My Program Deleted 800 GB': Safe Recursive Deletion in Bash and Python
A recent Habr article examines dangerous patterns in recursive file deletion scripts that have caused massive data loss incidents, including an 800 GB wipe triggered by Telegram Desktop on Windows. The piece analyzes classic mistakes such as empty variables in rm commands and extra spaces that turned single paths into multiple destructive arguments, referencing the 2015 Steam Linux bug and the 2011 Bumblebee installer error. It provides hardened Bash templates using set -euo pipefail, ${VAR:?} checks, realpath validation, and --one-file-system flags to prevent deletion of forbidden directories or symlinked targets. The Python section introduces a safe_rmtree wrapper that enforces root boundaries, rejects symlinks, uses resolve(strict=True), and checks shutil.rmtree.avoids_symlink_attacks before proceeding. Additional recommendations include dry-run modes, marker files, temporary directory usage, and logging to make deletion operations auditable and reversible where possible.
Hackers tamper with refrigeration units in European supermarkets, setting temperatures to +50 °C
Attackers gained unauthorized access to refrigeration and freezer control systems in supermarkets across several European countries, including Sweden, Belgium, Luxembourg, and Estonia. In multiple locations they altered temperature settings to +50 °C, risking widespread spoilage of perishable goods. The incidents primarily affected older, unpatched Danfoss controllers that had been connected to networks for remote maintenance. Estonian manufacturer Kitman Coldtech reported that one attack on a legacy Danfoss system was detected and stopped within approximately ten minutes, preventing any damage. Similar intrusions were confirmed by Swedish chains ICA and Coop, following earlier incidents in French supermarkets in October that resulted in product losses. Experts note that legacy industrial controllers remain attractive targets because they are often left exposed once placed online for convenience.
AmneziaWG Container for MikroTik Routers Delivers Top Performance Six Months After Launch
A developer released an AmneziaWG container for MikroTik devices in February 2026 and has since added major improvements in speed, protocol support, and stability. The lightweight container leverages the router's native WireGuard implementation for cryptography while handling AmneziaWG obfuscation in software. Performance now reaches 250-350 Mbit/s on models such as Hap Ax3 and RB5009B after switching to C code and increasing buffer sizes with RouterOS 7.24. New features include server mode for connecting multiple MikroTik devices, random port hopping, IPv6 support, dynamic DNS, and offline configuration. The project survived an early GitHub ban caused by test scripts and has grown to over 370 stars while remaining fully offline and privacy-focused.