Don’t miss

How passkeys are reshaping user security and convenience

1Password, authentication, CISO, cybersecurity, Don't miss, Features, Hot stuff, MFA, News, opinion, passwordless, passwords, strategy, tips /

How passkeys are reshaping user security and convenience 28/11/2023 at 08:34 By Mirko Zorz In this Help Net Security interview, Anna Pobletts, Head of Passwordless at 1Password, talks about passkey adoption and its acceleration in 2024. This trend is particularly notable among highly-regulated services like fintech and banking, where users seek a sign-in experience that […]

How passkeys are reshaping user security and convenience Read More »

Guarding the gateway: Securing dispersed networks

Cloud, cybersecurity, Don't miss, Hot stuff, Netography, network, Video /

Guarding the gateway: Securing dispersed networks 28/11/2023 at 08:00 By Help Net Security The network is at an inflection point, and organizations’ networks have become more dispersed amongst the cloud and on-prem, prompting a greater need for visibility today than ever. As the nature of the network shifts, teams face challenges securing their organization’s infrastructure, […]

Guarding the gateway: Securing dispersed networks Read More »

Product showcase: New ESET Home Security

antivirus, cybersecurity, Don't miss, ESET, News, Product showcase, software /

Product showcase: New ESET Home Security 28/11/2023 at 07:32 By Help Net Security ESET is thrilled to announce our new cutting-edge consumer solutions. Our consumer offering is more than just security – it is a comprehensive portfolio designed to keep our customers safe in today’s digital landscape. We are dedicated to advancing technology without compromising […]

Product showcase: New ESET Home Security Read More »

Report: The state of authentication security 2023

Don't miss, Enzoic, News, Whitepapers and webinars /

Report: The state of authentication security 2023 28/11/2023 at 06:48 By Help Net Security This survey set out to explore these challenges, to identify common practices, and to provide insight into how organizations can bolster their defenses. Key findings from the survey include: Current authentication practices Authentication-related cyberattacks Security incidents and impact Password management Security […]

Report: The state of authentication security 2023 Read More »

Released: AI security guidelines backed by 18 countries

Artificial Intelligence, CISA, Don't miss, Government, guidelines, Hot stuff, machine learning, NCSC, News /

Released: AI security guidelines backed by 18 countries 27/11/2023 at 17:32 By Zeljka Zorz The UK National Cyber Security Centre (NCSC) has published new guidelines that can help developers and providers of AI-powered systems “build AI systems that function as intended, are available when needed, and work without revealing sensitive data to unauthorised parties.” How […]

Released: AI security guidelines backed by 18 countries Read More »

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)

data analytics, Don't miss, enterprise, Hot stuff, News, PoC, Splunk, vulnerability /

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214) 27/11/2023 at 13:47 By Zeljka Zorz A proof-of-concept (PoC) exploit for a high-severity flaw in Splunk Enterprise (CVE-2023-46214) that can lead to remote code execution has been made public. Users are advised to implement the provided patches or workarounds quickly. About CVE-2023-46214 Splunk Enterprise is a solution […]

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214) Read More »

Security leaders on high alert as GenAI poses privacy and security risks

Artificial Intelligence, cybersecurity, data security, Don't miss, generative AI, Hot stuff, Portal26, Privacy, risk, Video /

Security leaders on high alert as GenAI poses privacy and security risks 27/11/2023 at 08:32 By Help Net Security Companies need help to get visibility into the operations of their AI programs, potentially reducing productivity while creating significant risks around governance, data security, and more. In this Help Net Security video, Neil Cohen, Head of […]

Security leaders on high alert as GenAI poses privacy and security risks Read More »

Why it’s the perfect time to reflect on your software update policy

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Jamf, News, opinion, policy, security update, software, strategy, update /

Why it’s the perfect time to reflect on your software update policy 27/11/2023 at 08:04 By Help Net Security The threat landscape is evolving by the minute, with both malicious actors and well-intentioned researchers constantly on the hunt for new attack vectors that bypass security controls and gain control of systems and applications. In fact, […]

Why it’s the perfect time to reflect on your software update policy Read More »

Vulnerability disclosure: Legal risks and ethical considerations for researchers

cybersecurity, data breach, Don't miss, exploit, extortion, Features, Government, Hot stuff, law, News, opinion, Privacy, Project Black, regulation, remediation, risk assessment, strategy, vulnerability disclosure /

Vulnerability disclosure: Legal risks and ethical considerations for researchers 27/11/2023 at 07:32 By Mirko Zorz In this Help Net Security interview, Eddie Zhang, Principal Consultant at Project Black, explores the complex and often controversial world of vulnerability disclosure in cybersecurity. Zhang explores the intricate balancing act that researchers must perform when navigating the interests of […]

Vulnerability disclosure: Legal risks and ethical considerations for researchers Read More »

NIS2 and its global ramifications

Compliance, cyber resilience, cybersecurity, Don't miss, EU, Expert analysis, Expert corner, Hot stuff, LogPoint, News, opinion, risk assessment /

NIS2 and its global ramifications 24/11/2023 at 08:31 By Help Net Security The Network and Information Systems Directive (NIS2), due to come into effect in October 2024, seeks to improve cyber resilience in the European Union (EU). Its effects are likely to be wider reaching, though, bringing in more stringent processes and controls and redefining […]

NIS2 and its global ramifications Read More »

1 in 5 executives question their own data protection programs

Compliance, cybersecurity, Data Protection, Deloitte, Don't miss, Hot stuff, Privacy, risk, Video /

1 in 5 executives question their own data protection programs 24/11/2023 at 08:01 By Help Net Security In this Help Net Security video, Tanneasha Gordon, Deloitte Risk & Financial Advisory’s data & privacy leader, discusses how many executives realize that trust is crucial to driving brand value and earning sustained customer loyalty. Privacy programs, data […]

1 in 5 executives question their own data protection programs Read More »

New horizons in cyber protection with 2024 trends to watch

attacks, cybersecurity, data breach, Don't miss, Hot stuff, predictions, supply chain, SUSE, Video /

New horizons in cyber protection with 2024 trends to watch 23/11/2023 at 08:02 By Help Net Security 2023 proved to be another challenging year for companies combating supply chain security and breaches. The 2024 outlook could be worse as attacks become increasingly sophisticated. In this Help Net Security video, Fei Huang, VP of Security Strategy […]

New horizons in cyber protection with 2024 trends to watch Read More »

How LockBit used Citrix Bleed to breach Boeing and other targets

ACSC, CISA, Citrix, Don't miss, FBI, Hot stuff, NetScaler, News, Ransomware, vulnerability /

How LockBit used Citrix Bleed to breach Boeing and other targets 22/11/2023 at 16:47 By Zeljka Zorz CVE-2023-4966, aka “Citrix Bleed”, has been exploited by LockBit 3.0 affiliates to breach Boeing’s parts and distribution business, and “other trusted third parties have observed similar activity impacting their organization,” cybersecurity and law enforcement officials have confirmed on […]

How LockBit used Citrix Bleed to breach Boeing and other targets Read More »

Microsoft announces Defender bug bounty program

bug bounty, Don't miss, Hot stuff, Microsoft, Microsoft Defender, News, Vulnerabilities /

Microsoft announces Defender bug bounty program 22/11/2023 at 14:47 By Helga Labus Microsoft has announced a new bug bounty program aimed at unearthing vulnerabilities in Defender-related products and services, and is offering participants the possibility to earn up to $20,000 for the most critical bugs. The Microsoft Defender bug bounty program Microsoft Defender includes various […]

Microsoft announces Defender bug bounty program Read More »

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector

CISA, critical infrastructure, cyber risk, Don't miss, Hot stuff, News, USA /

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector 22/11/2023 at 12:47 By Helga Labus The Cybersecurity and Infrastructure Security Agency (CISA) has announced a pilot program that aims to offer cybersecurity services to critical infrastructure entities as they have become a common target in cyberattacks. “In alignment with CISA’s ‘Target Rich, Resource […]

CISA offers cybersecurity services to non-federal orgs in critical infrastructure sector Read More »

CISOs can marry security and business success

CISO, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, strategy, WithSecure /

CISOs can marry security and business success 22/11/2023 at 08:33 By Help Net Security With an endless string of cyber fires to be put out, it’s easy to forget that the cybersecurity function in an organization doesn’t exist in a vacuum. Its main purpose is to ensure the organization succeeds, and that’s the reason CISOs […]

CISOs can marry security and business success Read More »

Why boards must prioritize cybersecurity expertise

boardroom, cybersecurity, Don't miss, Hot stuff, Kudelski Security, threats, Video /

Why boards must prioritize cybersecurity expertise 22/11/2023 at 08:02 By Help Net Security In this Help Net Security video, Graeme Payne, US Advisory Service Leader at Kudelski Security, discusses how, with the incredible number of complex threats facing modern businesses, board members must take an increased role in cybersecurity decisions – or face the consequences. […]

Why boards must prioritize cybersecurity expertise Read More »

Apache ActiveMQ bug exploited to deliver Kinsing malware

Apache ActiveMQ, cryptojacking, Don't miss, exploit, Hot stuff, Linux, Malware, News, Trend Micro, vulnerability /

Apache ActiveMQ bug exploited to deliver Kinsing malware 21/11/2023 at 15:02 By Helga Labus Attackers are exploiting a recently fixed vulnerability (CVE-2023-46604) in Apache ActiveMQ to install Kinsing malware and cryptocurrency miners on targeted Linux systems. CVE-2023-46604 exploitation Apache ActiveMQ is a popular Java-based open source message broker that allows communication between applications and services […]

Apache ActiveMQ bug exploited to deliver Kinsing malware Read More »

The shifting sands of the war against cyber extortion

Analyst1, CISA, Don't miss, extortion, FBI, Government, Hot stuff, law enforcement, News, Ransomware /

The shifting sands of the war against cyber extortion 21/11/2023 at 14:33 By Zeljka Zorz Ransomware and cyber extortion attacks aimed at organizations are not letting up. Occasionally, they even come in pairs. The often large and sometimes massive ransomware recovery costs companies incur when they decide not to meet the demands deter many other […]

The shifting sands of the war against cyber extortion Read More »

PolarDNS: Open-source DNS server tailored for security evaluations

cybersecurity, DNS, Don't miss, GitHub, News, open source, Oryxlabs, software /

PolarDNS: Open-source DNS server tailored for security evaluations 21/11/2023 at 08:36 By Mirko Zorz PolarDNS is a specialized authoritative DNS server that allows the operator to produce custom DNS responses suitable for DNS protocol testing purposes. What can you do with PolarDNS? PolarDNS can be used for testing of: DNS resolvers (server-side) DNS clients DNS […]

PolarDNS: Open-source DNS server tailored for security evaluations Read More »

Scroll to Top