News

GoSearch: Open-source OSINT tool for uncovering digital footprints

digital forensics, Don't miss, GitHub, Hudson Rock, News, OSINT, penetration testing, software /

GoSearch: Open-source OSINT tool for uncovering digital footprints 2025-04-28 at 08:01 By Help Net Security GoSearch is an open-source OSINT tool built to uncover digital footprints linked to specific usernames. Designed for speed and accuracy, it lets users quickly track someone’s online presence across multiple platforms. GoSearch incorporates data from Hudson Rock’s Cybercrime Database, offering […]

GoSearch: Open-source OSINT tool for uncovering digital footprints Read More »

Ransomware attacks are getting smarter, harder to stop

backup, cybersecurity, News, Ransomware, report, resilience, strategy, Veeam Software /

Ransomware attacks are getting smarter, harder to stop 2025-04-28 at 07:36 By Help Net Security Ransomware attacks are becoming more refined and pervasive, posing significant challenges to organizations globally. A Veeam report reveals that while the percentage of companies impacted by ransomware attacks has slightly declined from 75% to 69%, the threat remains substantial. This […]

Ransomware attacks are getting smarter, harder to stop Read More »

Most critical vulnerabilities aren’t worth your attention

cyber risk, cybersecurity, Datadog, News, report, survey, vulnerability /

Most critical vulnerabilities aren’t worth your attention 2025-04-28 at 07:03 By Help Net Security Web applications face a wide range of risks, including known-exploitable vulnerabilities, supply chain attacks, and insecure identity configurations in CI/CD, according to the Datadog State of DevSecOps 2025 report. 14% of Java services still contain at least one vulnerability By analyzing […]

Most critical vulnerabilities aren’t worth your attention Read More »

Week in review: MITRE ATT&CK v17.0 released, PoC for Erlang/OTP SSH bug is public

News, Week in review /

Week in review: MITRE ATT&CK v17.0 released, PoC for Erlang/OTP SSH bug is public 2025-04-27 at 11:06 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs MITRE has released the latest version of its ATT&CK framework, […]

Week in review: MITRE ATT&CK v17.0 released, PoC for Erlang/OTP SSH bug is public Read More »

Rack Ruby vulnerability could reveal secrets to attackers (CVE-2025-27610)

Don't miss, Hot stuff, News, OPSWAT, Ruby, security update, vulnerability, web application security /

Rack Ruby vulnerability could reveal secrets to attackers (CVE-2025-27610) 2025-04-25 at 12:39 By Zeljka Zorz Researchers have uncovered three serious vulnerabilities in Rack, a server interface used by most Ruby web app frameworks (Ruby on Rails, Sinatra, Hanami, Roda, and others). Two of the flaws – CVE-2025-25184 and CVE-2025-27111 – could allow attackers to manipulate […]

Rack Ruby vulnerability could reveal secrets to attackers (CVE-2025-27610) Read More »

BreachLock AEV simulates Real attacks to validate and prioritize exposures

BreachLock, News, RSAC 2025 /

BreachLock AEV simulates Real attacks to validate and prioritize exposures 2025-04-25 at 11:22 By Industry News BreachLock AEV automates multistep, threat-intelligence-led attack scenarios—helping security teams uncover real exposures and prioritize what matters most. Going beyond just showing security teams their risk, BreachLock Adversarial Exposure Validation simulates how real-world adversaries would exploit it by mirroring their […]

BreachLock AEV simulates Real attacks to validate and prioritize exposures Read More »

Flexible working models fuel surge in device theft

data breach, IBM, Kensington, News, report, survey /

Flexible working models fuel surge in device theft 2025-04-25 at 08:34 By Help Net Security 76% of respondents have been impacted by incidents of device theft in the past two years, with incidents more common in organizations with more flexible working models, according to Kensington. For instance, research revealed that 85% of organizations with flexible […]

Flexible working models fuel surge in device theft Read More »

Exposure validation emerges as critical cyber defense component

automation, cyber resilience, cybersecurity, Cymulate, News, report /

Exposure validation emerges as critical cyber defense component 2025-04-25 at 08:13 By Help Net Security Organizations have implemented various aspects of threat exposure validation, including security control validation (51%) and filtering threat exposures based on the effectiveness of security controls to mitigate threats (48%), according to Cymulate. At the same time, nearly all respondents say […]

Exposure validation emerges as critical cyber defense component Read More »

13 core principles to strengthen AI cybersecurity

Artificial Intelligence, ETSI, framework, News, security standard, standards /

13 core principles to strengthen AI cybersecurity 2025-04-25 at 07:55 By Help Net Security The new ETSI TS 104 223 specification for securing AI provides reliable and actionable cybersecurity guidance aimed at protecting end users. Adopting a whole-lifecycle approach, the framework outlines 13 core principles that expand into 72 detailed, trackable principles across five key […]

13 core principles to strengthen AI cybersecurity Read More »

Top must-visit companies at RSAC 2025

Aurva, Chainloop, Don't miss, Enkrypt AI, Ivanti, Microsoft, News, PlexTrac, PowerDMARC, RSAC 2025, Simbian, SkyHawk Security, ThriveDX /

Top must-visit companies at RSAC 2025 2025-04-25 at 07:34 By Help Net Security RSAC 2025 Conference is taking place at the Moscone Center in San Francisco from April 28 – May 1. With hundreds of booths, countless product demos, and nonstop buzz, navigating RSAC can be overwhelming. That’s why we’ve done the legwork to highlight […]

Top must-visit companies at RSAC 2025 Read More »

New infosec products of the week: April 25, 2025

Bitdefender, News, PowerDMARC, SkyHawk Security, Stellar Cyber, Swimlane, Veracode /

New infosec products of the week: April 25, 2025 2025-04-25 at 07:06 By Sinisa Markovic Here’s a look at the most interesting products from the past week, featuring releases from Bitdefender, PowerDMARC, Skyhawk Security, Stellar Cyber, Swimlane, and Veracode. Email authentication simplified: How PowerDMARC makes DMARC effortless With PowerDMARC, users can generate and publish DMARC, […]

New infosec products of the week: April 25, 2025 Read More »

Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028)

backup, Commvault, Data Protection, Don't miss, Hot stuff, News, PoC, vulnerability, WatchTowr /

Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028) 2025-04-24 at 15:35 By Zeljka Zorz If your organization is using Commvault Command Center for your data protection, backup creation, configuration and restoration needs, you should check whether your on-premise installation has been upgraded to patch a critical vulnerability (CVE-2025-34028) that could allow unauthenticated remote code execution. […]

Critical Commvault RCE vulnerability fixed, PoC available (CVE-2025-34028) Read More »

Skyhawk Security brings preemptive cloud app defense to RSAC 2025

Don't miss, News, RSAC 2025, SkyHawk Security /

Skyhawk Security brings preemptive cloud app defense to RSAC 2025 2025-04-24 at 14:32 By Mirko Zorz Skyhawk Security is adding new protection for custom-built cloud applications. The company announced the update to its AI-powered Autonomous Purple Team for RSAC 2025 Conference, which starts April 28 in San Francisco. The AI-based purple team identifies security weaknesses […]

Skyhawk Security brings preemptive cloud app defense to RSAC 2025 Read More »

Understanding 2024 cyber attack trends

cloud security, cyberattacks, Don't miss, Hot stuff, Insider Threat, Mandiant, News, Ransomware, tips, trends /

Understanding 2024 cyber attack trends 2025-04-24 at 13:04 By Zeljka Zorz Mandiant has released the M-Trends 2025 report, which outlines global cyber attack trends based on their own incident response engagements from 2024. Key trends and insights In 2024, Mandiant handled more incidents in the financial sector than in any other industry: 17.4%. Other popular […]

Understanding 2024 cyber attack trends Read More »

Coaching AI agents: Why your next security hire might be an algorithm

Artificial Intelligence, cybersecurity, Don't miss, Dropzone AI, Expert analysis, Expert corner, Hot stuff, News, opinion, SOC /

Coaching AI agents: Why your next security hire might be an algorithm 2025-04-24 at 08:31 By Help Net Security Security teams are drowning in alerts. The sheer volume of threats, suspicious activity, and false positives makes it nearly impossible for analysts to investigate everything effectively. Enter agentic AI, capable of completing hundreds of tasks simultaneously […]

Coaching AI agents: Why your next security hire might be an algorithm Read More »

A new era of cyber threats is approaching for the energy sector

cybersecurity, Darktrace, energy sector, News, report, survey /

A new era of cyber threats is approaching for the energy sector 2025-04-24 at 08:17 By Sinisa Markovic Cyber threats targeting the energy sector come in many forms, including state-sponsored actors seeking to disrupt national infrastructure, cybercriminals motivated by profit, and insiders intentionally causing damage. The consequences of a successful attack can be severe, potentially […]

A new era of cyber threats is approaching for the energy sector Read More »

Review: Artificial Intelligence for Cybersecurity

Artificial Intelligence, book, cybersecurity, Don't miss, News, Review, Reviews /

Review: Artificial Intelligence for Cybersecurity 2025-04-24 at 07:39 By Mirko Zorz Artificial Intelligence for Cybersecurity is a practical guide to how AI and machine learning are changing the way we defend digital systems. The book aims to explain how AI can help solve real cybersecurity problems. It does that well, but it’s not for everyone. […]

Review: Artificial Intelligence for Cybersecurity Read More »

One in three security teams trust AI to act autonomously

Artificial Intelligence, CISO, cybersecurity, Exabeam, News, report, survey /

One in three security teams trust AI to act autonomously 2025-04-24 at 07:39 By Help Net Security While AI adoption is widespread, its impact on productivity, trust, and team structure varies sharply by role and region, according to Exabeam. The findings confirm a critical divide: 71% of executives believe AI has significantly improved productivity across […]

One in three security teams trust AI to act autonomously Read More »

Trustwave MDR Named SC Media Awards Finalist for Best Managed Security Service

Managed Detection and Response, News, Spotlights /

Trustwave MDR Named SC Media Awards Finalist for Best Managed Security Service 2025-04-23 at 16:13 By Trustwave MDR Recognized: Named a finalist for SC Media’s Best Managed Security Service award. Leading MDR Solution: Delivers rapid threat detection, response, and fast onboarding. Enhanced Cybersecurity: Leverages threat intelligence for proactive threat hunting and eradication. SC Media and SC Media Europe […]

Trustwave MDR Named SC Media Awards Finalist for Best Managed Security Service Read More »

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs

attack lifecycle, attack tools, Don't miss, ESXi, Hot stuff, Incident Response, MITRE, MITRE ATT&CK, News, threat modeling /

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs 2025-04-23 at 16:13 By Zeljka Zorz MITRE has released the latest version of its ATT&CK framework, which now also includes a new section (“matrix”) to cover the tactics, techniques and procedures (TTPs) used to target VMware ESXi hypervisors. About MITRE ATT&CK MITRE ATT&CK is a regularly […]

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs Read More »

Scroll to Top