cybersecurity

Cybercriminals replace familiar tactics to exfiltrate sensitive data

cybercrime, cybersecurity, Data exfiltration, Delinea, News, Ransomware, report, survey /

Cybercriminals replace familiar tactics to exfiltrate sensitive data 2024-01-31 at 06:35 By Help Net Security Ransomware attacks are increasing again as cybercriminals’ motivation shifts to data exfiltration, according to Delinea. The familiar tactics of crippling a company and holding it hostage have been replaced by new strategies that use stealth to exfiltrate private and sensitive […]

Cybercriminals replace familiar tactics to exfiltrate sensitive data Read More »

Hundreds of network operators’ credentials found circulating in Dark Web

cybercrime, cybersecurity, dark web, News, Resecurity /

Hundreds of network operators’ credentials found circulating in Dark Web 2024-01-30 at 10:44 By Help Net Security After the recent incident involving Orange España and the leakage of credentials from the RIPE NCC portal, which led to a major outage, the cybersecurity community needs to reconsider the digital identity protection for staff engaged in network […]

Hundreds of network operators’ credentials found circulating in Dark Web Read More »

Great security or great UX? Both, please

authentication, biometrics, cybersecurity, Don't miss, Expert analysis, Frontegg, Hot stuff, News, opinion, passwords, SaaS /

Great security or great UX? Both, please 2024-01-30 at 08:02 By Help Net Security A new user is signing up for a SaaS application. On the one hand, UX teams want that user to get into the app as quickly as possible. On the other hand, security teams want the user to strongly validate their […]

Great security or great UX? Both, please Read More »

Ransomware recap 2023 highlights cybersecurity crisis

CyberInt, cybersecurity, Don't miss, extortion, Hot stuff, Ransomware, supply chain attacks, Video /

Ransomware recap 2023 highlights cybersecurity crisis 2024-01-30 at 07:02 By Help Net Security In this Help Net Security video, Yochai Corem, CEO of Cyberint, explores the ransomware environment’s development, effects, and emerging patterns throughout the previous year. 2023 marked a historic high for ransomware groups, with a 55.5% increase in attacks, reaching 4,368 victims globally, […]

Ransomware recap 2023 highlights cybersecurity crisis Read More »

Unlocking sustainable security practices with secure coding education

Application Security, code, cybersecurity, education, News, patching, report, Security Journey, survey, training /

Unlocking sustainable security practices with secure coding education 2024-01-30 at 06:31 By Help Net Security Despite stringent regulations and calls for ‘security by design’, organizations are still failing to equip teams with the knowledge to secure code, according to Security Journey. In fact, only 20% of respondents were confident in their ability to detect a […]

Unlocking sustainable security practices with secure coding education Read More »

Balancing AI benefits with security and privacy risks in healthcare

Artificial Intelligence, Compliance, cybersecurity, generative AI, healthcare, Kodiak, News, report, risk assessment, survey /

Balancing AI benefits with security and privacy risks in healthcare 2024-01-30 at 06:01 By Help Net Security To manage an environment of increasing risks and limited resources, healthcare internal audit and compliance departments must align their risk assessments and audit work plans to areas most vital to achieving the strategic goals and business objectives of […]

Balancing AI benefits with security and privacy risks in healthcare Read More »

Prioritizing cybercrime intelligence for effective decision-making in cybersecurity

access control, CISO, cybercrime, cybersecurity, Don't miss, Features, Hot stuff, Hudson Rock, News, opinion, risk assessment, strategy, Threat Intelligence, tips /

Prioritizing cybercrime intelligence for effective decision-making in cybersecurity 2024-01-29 at 07:32 By Mirko Zorz In this Help Net Security interview, Alon Gal, CTO at Hudson Rock, discusses integrating cybercrime intelligence into existing security infrastructures. Our discussion will cover a range of essential aspects, from the importance of continuous adaptation in cybersecurity strategies to practical advice […]

Prioritizing cybercrime intelligence for effective decision-making in cybersecurity Read More »

Global critical infrastructure faces relentless cyber activity

critical infrastructure, cybercrime, cybersecurity, Forescout, News, report, survey /

Global critical infrastructure faces relentless cyber activity 2024-01-29 at 07:01 By Help Net Security In the last year, the world’s critical infrastructure – the medical, power, communications, waste, manufacturing, and transportation equipment that connects people and machines – has been under near-constant attack, according to Forescout. Despite the formidable challenges posed by the ongoing surge […]

Global critical infrastructure faces relentless cyber activity Read More »

Cybercriminals embrace smarter strategies, less effort

cybercriminals, cybersecurity, data breach, Experian, hacker, News, report, supply chain attacks, third party compromise, threats /

Cybercriminals embrace smarter strategies, less effort 2024-01-29 at 06:33 By Help Net Security 2024 is shaping up to be a record-breaking year for data breaches, according to Experian. Despite 2023 being labeled as a ‘successful’ year for malicious actors, the upcoming months may bring forth developments that could further disrupt the cybersecurity landscape. Supply chain […]

Cybercriminals embrace smarter strategies, less effort Read More »

Longer passwords aren’t safe from intensive cracking efforts

cybercrime, cybersecurity, data breach, News, passwords, report, Specops Software, survey /

Longer passwords aren’t safe from intensive cracking efforts 2024-01-26 at 08:02 By Help Net Security 88% of organizations still use passwords as their primary method of authentication, according to Specops Software. The report found that 31.1 million breached passwords had over 16 characters, showing longer passwords aren’t safe from being cracked. 40,000 admin portal accounts […]

Longer passwords aren’t safe from intensive cracking efforts Read More »

Emerging trends and strategies in digital forensics

Artificial Intelligence, Compliance, cybersecurity, data analysis, digital forensics, Don't miss, Features, Hot stuff, News, opinion, Paraben, Privacy /

Emerging trends and strategies in digital forensics 2024-01-26 at 07:01 By Mirko Zorz In this Help Net Security interview, Amber Schroader, CEO at Paraben Corporation, discusses the challenges posed by the complexity of modern computer systems and networks on digital evidence collection. Schroader talks about the impact of exponential data growth on forensic practices, the […]

Emerging trends and strategies in digital forensics Read More »

Automated Emulation: Open-source breach and attack simulation lab

cybersecurity, Don't miss, GitHub, News, open source, software, Terraform /

Automated Emulation: Open-source breach and attack simulation lab 2024-01-25 at 07:31 By Mirko Zorz Automated Emulation is an open-source Terraform template designed to create a customizable, automated breach and attack simulation lab. The solution automatically constructs the following resources hosted on AWS: One Linux server deploying Caldera, Prelude Operator Headless, and VECTR One Windows Client […]

Automated Emulation: Open-source breach and attack simulation lab Read More »

CISOs’ role in identifying tech components and managing supply chains

Artificial Intelligence, CISO, cybersecurity, Don't miss, Eclypsium, Features, hardware, Hot stuff, News, opinion, regulation, software, strategy, supply chain /

CISOs’ role in identifying tech components and managing supply chains 2024-01-25 at 07:01 By Mirko Zorz In this Help Net Security interview, Nate Warfield, Director of Threat Research and Intelligence at Eclypsium, outlines the crucial tasks for CISOs in protecting supply chains and achieving comprehensive visibility. Warfield also discusses the vital collaboration between security and […]

CISOs’ role in identifying tech components and managing supply chains Read More »

In 2024, AI and ML shift from flashy to functional

Archive360, Artificial Intelligence, cybersecurity, Don't miss, Hot stuff, machine learning, regulation, Video /

In 2024, AI and ML shift from flashy to functional 2024-01-25 at 06:31 By Help Net Security AI and ML deserve the hype they get, but the focus can’t always be on the glitz. As these advances to deliver real benefits, there’s a slew of more mundane actions that have to be taken—and in 2024, […]

In 2024, AI and ML shift from flashy to functional Read More »

45% of critical CVEs left unpatched in 2023

Armis, attacks, CVE, cybercrime, cybersecurity, News, report, survey /

45% of critical CVEs left unpatched in 2023 2024-01-25 at 06:01 By Help Net Security Global attack attempts more than doubled in 2023, increasing 104%, according to Armis. Blind spots and critical vulnerabilities are worsening, with 45% of critical CVEs remaining unpatched. Utilities (over 200% increase) and manufacturing (165% increase) were the most at risk […]

45% of critical CVEs left unpatched in 2023 Read More »

The effect of omission bias on vulnerability management

cyber resilience, cybersecurity, data, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, patching, remediation, trackd, vulnerability management /

The effect of omission bias on vulnerability management 2024-01-24 at 08:31 By Help Net Security Whether we’d like to admit it to ourselves or not, all humans harbor subconscious biases that powerfully influence our behavior. One of these is the omission bias, which has interesting ramifications in the world of cyber security, specifically vulnerability management. […]

The effect of omission bias on vulnerability management Read More »

Prioritizing CIS Controls for effective cybersecurity across organizations

Center for Internet Security, CISO, cybersecurity, Don't miss, Features, framework, GRC, Hot stuff, News, opinion, standards, strategy, tips, Virginia Tech /

Prioritizing CIS Controls for effective cybersecurity across organizations 2024-01-24 at 07:32 By Mirko Zorz In this Help Net Security interview, Randy Marchany, CISO at Virginia Tech, discusses the challenges and strategies associated with implementing CIS Controls in organizations of varying sizes. Marchany explores the importance of securing top-level management support, breaking down data silos, and […]

Prioritizing CIS Controls for effective cybersecurity across organizations Read More »

Why resilience leaders must prepare for polycrises

cyber resilience, cybersecurity, Don't miss, Hot stuff, hybrid workforce, Infinite Blue, supply chain, threats, Video /

Why resilience leaders must prepare for polycrises 2024-01-24 at 07:02 By Help Net Security In this Help Net Security video, Frank Shultz, CEO of Infinite Blue, discusses how more frequent and severe disruptions and our increasingly interconnected world collide to create a new threat for resilience leaders to manage: polycrises. These multiple concurrent or cascading […]

Why resilience leaders must prepare for polycrises Read More »

Organizations invest more in data protection but recover less

cyberattacks, cybersecurity, Data Protection, News, Ransomware, report, survey, Veeam Software /

Organizations invest more in data protection but recover less 2024-01-24 at 06:32 By Help Net Security 92% of organizations will increase 2024 data protection spend, to achieve cyber resilience amidst continued threats of ransomware and cyberattacks, according to Veeam Software. Respondents shared that cyberattacks remain the top cause of outages and that while organizations are […]

Organizations invest more in data protection but recover less Read More »

Software supply chain attacks are getting easier

cybercrime, cybersecurity, Don't miss, News, open source, report, ReversingLabs, software, supply chain attacks, survey /

Software supply chain attacks are getting easier 2024-01-24 at 06:03 By Help Net Security ReversingLabs identified close to 11,200 unique malicious packages across three major open-source software platforms in 2023: npm, PyPI, and RubyGems. These findings mark an astounding 1,300% increase in malicious packages from 2020 and an increase of 28% over 2022 when a […]

Software supply chain attacks are getting easier Read More »

Scroll to Top