News

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

Cisco, Don't miss, exploit, Hot stuff, News, PoC, security update, vulnerability, Windows /

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) 23/06/2023 at 17:19 By Helga Labus Proof-of-concept (PoC) exploit code for the high-severity vulnerability (CVE-2023-20178) in Cisco Secure Client Software for Windows and Cisco AnyConnect Secure Mobility Client Software for Windows has been published. About the vulnerability Cisco Secure Client Software – previously known as […]

React to this headline:

Loading spinner

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) Read More »

Microsoft Teams vulnerability allows attackers to deliver malware to employees

collaboration, Don't miss, enterprise, Hot stuff, Jumpsec, Malware, Microsoft 365, Microsoft Teams, News, red team, SMBs, vulnerability /

Microsoft Teams vulnerability allows attackers to deliver malware to employees 23/06/2023 at 15:24 By Zeljka Zorz Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox. “Organisations that use Microsoft Teams inherit Microsoft’s default configuration which allows users from outside of their organisation to reach out

React to this headline:

Loading spinner

Microsoft Teams vulnerability allows attackers to deliver malware to employees Read More »

New infosec products of the week: June 23, 2023

Cymulate, Edgescan, ESET, iStorage, Netskope, News /

New infosec products of the week: June 23, 2023 23/06/2023 at 07:39 By Industry News Here’s a look at the most interesting products from the past week, featuring releases from Cymulate, Edgescan, ESET, iStorage, and Netskope. iStorage launches datAshur PRO+C with Type-C USB interface iStorage’s new datAshur PRO+C is a user-friendly USB 3.2 (Gen 1)

React to this headline:

Loading spinner

New infosec products of the week: June 23, 2023 Read More »

Insurance companies neglect basic email security

EasyDMARC, Email, email security, News, survey /

Insurance companies neglect basic email security 23/06/2023 at 06:00 By Help Net Security Only 3.54% of of insurance companies have correctly implemented basic phishing and spoofing protection, according to EasyDMARC. DMARC standard adoption Insurers operate using highly sensitive, private information that they’ve been trusted by clients and customers to protect. They function in a highly

React to this headline:

Loading spinner

Insurance companies neglect basic email security Read More »

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435)

0-day, apple, Don't miss, Hot stuff, iOS, Kaspersky, macOS, News, security update, spyware /

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435) 22/06/2023 at 13:36 By Zeljka Zorz Apple has released patches for three zero-day vulnerabilities (CVE-2023-32434, CVE-2023-32435, CVE-2023-32439) exploited in the wild. The first two have been reported by Kaspersky researchers Georgy Kucherin, Leonid Bezvershenko and Boris Larin following their discovery of the iOS spyware implant

React to this headline:

Loading spinner

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435) Read More »

ChatGPT shows promise in detecting phishing sites

Artificial Intelligence, ChatGPT, Don't miss, Hot stuff, Kaspersky, News, NTT Security, phishing, research /

ChatGPT shows promise in detecting phishing sites 22/06/2023 at 08:24 By Helga Labus ChatGPT can be used to generate phishing sites, but could it also be used to reliably detect them? Security researchers have tried to answer that question. Can ChatGPT detect phishing sites based on URLs? Kaspersky researchers tested 5,265 (2322 phishing and 2943

React to this headline:

Loading spinner

ChatGPT shows promise in detecting phishing sites Read More »

Photos: Infosecurity Europe 2023, part 3

Adaptiva, conferences, Edgescan, FireTail, HackerOne, Infosecurity Europe 2023, News, Silverfort, Swimlane, Vulcan Cyber, Yubico /

Photos: Infosecurity Europe 2023, part 3 22/06/2023 at 08:06 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. The first gallery is available here, and the second gallery is here. Here’s a closer look at the conference featuring: Swimlane, Adaptiva, Vulcan

React to this headline:

Loading spinner

Photos: Infosecurity Europe 2023, part 3 Read More »

Unraveling the multifaceted threats facing telecom companies

cyberattack, cybersecurity, Don't miss, ENISA, EU, Features, Hot stuff, Malware, News, opinion, telecommunications /

Unraveling the multifaceted threats facing telecom companies 22/06/2023 at 07:09 By Mirko Zorz In today’s interconnected world, telecom companies serve as gateways, connecting individuals, businesses, and governments. However, this role also makes them prime targets for cyberattacks. From DDoS attacks to sophisticated spyware infiltration, telecom providers face a wide range of threats that can disrupt

React to this headline:

Loading spinner

Unraveling the multifaceted threats facing telecom companies Read More »

Increased spending doesn’t translate to improved cybersecurity posture

CISO, cybersecurity, Gartner, investment, News, Panaseer, strategy, survey, tips /

Increased spending doesn’t translate to improved cybersecurity posture 22/06/2023 at 06:21 By Help Net Security Security teams are stretched, with not enough people, skills or budget to cope with all their priorities, according to Panaseer. Average cybersecurity budgets increase in 2023 The survey of over 400 cybersecurity decision makers and practitioners across the US and

React to this headline:

Loading spinner

Increased spending doesn’t translate to improved cybersecurity posture Read More »

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

Don't miss, enterprise, GreyNoise, Hot stuff, News, patch, VMWare, vulnerability /

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887) 21/06/2023 at 11:42 By Zeljka Zorz CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being exploited in the wild. There are no workarounds to mitigate the risk of exploitation – enterprise admins are

React to this headline:

Loading spinner

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887) Read More »

Infosecurity Europe 2023 video walkthrough

Absolute, Akamai, alphaMountain, Apricorn, Arctic Wolf Networks, Armis, Axonius, BitSight, conferences, CrowdStrike, Cybervadis, CYE, Darktrace, Devo Technology, Don't miss, EfficientIP, Egress, FireMon, HackTheBox, Hornetsecurity, Hoxhunt, Infosecurity Europe 2023, ISC2, Island, ManageEngine, Microsoft, NetSPI, News, One Identity, OpenText, Panorays, Pentera, Pentest People, Progress, Proofpoint, Rapid7, Senseon, Video, Vulcan Cyber, WatchGuard /

Infosecurity Europe 2023 video walkthrough 21/06/2023 at 11:24 By Help Net Security Infosecurity Europe 2023 is taking place in London this week, and this video provides a closer look at this year’s event. The post Infosecurity Europe 2023 video walkthrough appeared first on Help Net Security. This article is an excerpt from Help Net Security

React to this headline:

Loading spinner

Infosecurity Europe 2023 video walkthrough Read More »

Compromised ChatGPT accounts garner rapid dark web popularity

ChatGPT, credentials, dark web, Don't miss, Group-IB, News, report, Threat Intelligence /

Compromised ChatGPT accounts garner rapid dark web popularity 21/06/2023 at 09:06 By Help Net Security Compromised credentials were found within the logs of info-stealing malware traded on illicit dark web marketplaces over the past year, according to Group-IB. The number of available logs containing compromised ChatGPT accounts reached a peak of 26,802 in May 2023.

React to this headline:

Loading spinner

Compromised ChatGPT accounts garner rapid dark web popularity Read More »

Photos: Infosecurity Europe 2023, part 2

Adaptiva, Akamai, BrandShield, conferences, Egress, Infoblox, Infosecurity Europe 2023, Island, News, Noetic Cyber, Qualys, ThreatAware /

Photos: Infosecurity Europe 2023, part 2 21/06/2023 at 09:06 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. The first gallery is available here. Here’s a closer look at the conference featuring: Island, ThreatAware, Adaptiva, Infoblox, Noetic Cyber, BrandShield, Next, Qualys,

React to this headline:

Loading spinner

Photos: Infosecurity Europe 2023, part 2 Read More »

How to create SBOMs for container images

cybersecurity, Data Defenders Forum, Don't miss, Expert analysis, Expert corner, Kubernetes, News, opinion, supply chain, threats /

How to create SBOMs for container images 21/06/2023 at 09:06 By Help Net Security The importance of software bills of materials (SBOMs) has grown substantially in recent years as organizations recognize the need for greater transparency in the software supply chain. This focus on SBOMs is a response to increasing cybersecurity threats and legislative efforts

React to this headline:

Loading spinner

How to create SBOMs for container images Read More »

US and European IT decision-makers have different cloud security priorities

automation, cloud adoption, cloud security, News, report, SUSE /

US and European IT decision-makers have different cloud security priorities 21/06/2023 at 07:40 By Help Net Security The growing adoption of cloud has elevated cloud security fear for IT teams, as they grapple with the challenges and concerns arising from the widespread use of complex cloud environments while diligently addressing them, according to SUSE. Cloud

React to this headline:

Loading spinner

US and European IT decision-makers have different cloud security priorities Read More »

Empowering Google security and networking solutions with AI

Artificial Intelligence, cybersecurity, Don't miss, Features, framework, Google, Google Cloud, Hot stuff, Mandiant, News, opinion, threats /

Empowering Google security and networking solutions with AI 21/06/2023 at 06:47 By Mirko Zorz In this Help Net Security interview, Sunil Potti, VP and GM, Cloud Security Google Cloud, talks about how new security and networking solutions powered by AI help improve security so Google customers can address their most pressing security challenges and remain

React to this headline:

Loading spinner

Empowering Google security and networking solutions with AI Read More »

Organizations actively embrace zero trust, integration remains a hurdle

Fortinet, hybrid workforce, News, policy, remote working, report, SASE, zero trust /

Organizations actively embrace zero trust, integration remains a hurdle 21/06/2023 at 06:09 By Help Net Security IT teams have made security efforts and progress in zero-trust implementation strategies to establish a new sense of normalcy following the network upheaval caused by the start of the global pandemic. They have also addressed the need to secure

React to this headline:

Loading spinner

Organizations actively embrace zero trust, integration remains a hurdle Read More »

Photos: Infosecurity Europe 2023

CensorNet, Cobalt, conferences, CrowdStrike, Infosecurity Europe 2023, Intruder, Island, ManageEngine, Mazebolt, News, Panorays, Source Photonics, TikTok /

Photos: Infosecurity Europe 2023 20/06/2023 at 17:37 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. Here’s a closer look at the conference featuring: Island, Crowdstrike, Panorays, ManageEngine, Mazebolt, Cobalt, Intruder, TikTok, and CensorNet. The post Photos: Infosecurity Europe 2023 appeared

React to this headline:

Loading spinner

Photos: Infosecurity Europe 2023 Read More »

Compromised Linux SSH servers engage in DDoS attacks, cryptomining

AhnLab, backdoor, bot, DDoS, Don't miss, Hot stuff, Linux, Malware, News /

Compromised Linux SSH servers engage in DDoS attacks, cryptomining 20/06/2023 at 13:36 By Helga Labus Poorly managed Linux SSH servers are getting compromised by unknown attackers and instructed to engage in DDoS attacks while simultaneously mining cryptocurrency in the background. The Tsunami DDoS bot Tsunami, also known as Kaiten, is a type of DDoS bot

React to this headline:

Loading spinner

Compromised Linux SSH servers engage in DDoS attacks, cryptomining Read More »

Zyxel patches critical vulnerability in NAS devices (CVE-2023-27992)

Don't miss, NAS, News, security update, vulnerability, Zyxel /

Zyxel patches critical vulnerability in NAS devices (CVE-2023-27992) 20/06/2023 at 13:05 By Zeljka Zorz Zyxel has released firmware patches for a critical vulnerability (CVE-2023-27992) in some of its consumer network attached storage (NAS) devices. About CVE-2023-27992 CVE-2023-27992 is an OS command injection flaw that could be triggered remotely by an unauthenticated attacker, via a specially

React to this headline:

Loading spinner

Zyxel patches critical vulnerability in NAS devices (CVE-2023-27992) Read More »

Scroll to Top