Fileless attacks increase 1,400% 04/07/2023 at 07:11 By Help Net Security Aggregated honeypot data, over a six-month period, showed that more than 50% of the attacks focused on defense evasion, according to Aqua Security. Threat actors avoid detection These attacks included masquerading techniques, such as files executed from /tmp, and obfuscated files or information, such […]
React to this headline:
Fileless attacks increase 1,400% Read More »
53% of SaaS licenses remain unused 04/07/2023 at 06:38 By Help Net Security Enterprise leaders in procurement, IT, and finance need to take immediate action to rationalize their SaaS portfolios to prevent spending and governance challenges from spiraling out of control, according to Productiv. Productiv analyzed how nearly 100 million SaaS licenses were used over
React to this headline:
53% of SaaS licenses remain unused Read More »
IT leaders believe hybrid cloud solutions are the future of IT 04/07/2023 at 06:01 By Help Net Security IT leaders are losing sleep over improving overall IT performance (60%), data security (50%), process risk and compliance (46%), and the need to improve agility (41%), according to Rocket Software. To overcome these challenges, IT organizations are
React to this headline:
IT leaders believe hybrid cloud solutions are the future of IT Read More »
Cloud security: Sometimes the risks may outweigh the rewards 03/07/2023 at 07:32 By Help Net Security Threat actors are well-aware of the vulnerability of our cloud infrastructure. The internet we have today is not equipped to serve the data needs of the future. When data is stored in the cloud, it can end up across
React to this headline:
Cloud security: Sometimes the risks may outweigh the rewards Read More »
One third of security breaches go unnoticed by security professionals 03/07/2023 at 06:32 By Help Net Security While surface-level confidence around hybrid cloud security is high, with 94% of global respondents stating their security tools and processes provide them with complete visibility and insights into their IT infrastructure, the reality is nearly one third of
React to this headline:
One third of security breaches go unnoticed by security professionals Read More »
Short-staffed teams must find ways to do more with less 03/07/2023 at 06:02 By Help Net Security As more businesses experience resource and cost constraints, 86% of MSPs and MSSPs customers are outsourcing their security needs to consolidate security tools, according to OpenText. “Staffing issues that have plagued the security industry for years are getting
React to this headline:
Short-staffed teams must find ways to do more with less Read More »
Infosec products of the month: June 2023 03/07/2023 at 05:33 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: 1Password, Bitdefender, Cequence Security, ConnectSecure, Cymulate, Cytracom, Datadog, Delinea, Edgescan, Enveedo, ESET, Index Engines, Island, iStorage, Lacework, NetApp, Netscout, Netskope, NinjaOne, Okta, Permit.io, PingSafe, Quantinuum, Seceon,
React to this headline:
Infosec products of the month: June 2023 Read More »
Week in review: 5 free online cybersecurity courses, 8Base ransomware group leaks data 02/07/2023 at 11:02 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unlocking internet’s secrets via monitoring, data collection, and analysis In this Help Net Security interview, Ryan Woodley, CEO of Netcraft,
React to this headline:
Week in review: 5 free online cybersecurity courses, 8Base ransomware group leaks data Read More »
Nokod Security raises $8 million to enhance low-code/no-code app security 30/06/2023 at 15:03 By Industry News Nokod Security announced its $8 million seed round, which will be used to establish a presence in the United States market, as well as to expand the R&D teams and support novel research of security vulnerabilities in the low-code/no-code
React to this headline:
Nokod Security raises $8 million to enhance low-code/no-code app security Read More »
New infosec products of the week: June 30, 2023 30/06/2023 at 05:18 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Cequence Security, Delinea, Index Engines, and NetApp. Delinea Privilege Manager enhancements reduce phishing effectiveness Based on Delinea’s deep expertise and customer feedback, the new
React to this headline:
New infosec products of the week: June 30, 2023 Read More »
Unlocking internet’s secrets via monitoring, data collection, and analysis 30/06/2023 at 05:05 By Mirko Zorz In this Help Net Security interview, Ryan Woodley, CEO of Netcraft, discusses the importance of monitoring, collecting, and analyzing internet data to gain a profound understanding of the internet. This insight plays a vital role in protecting and empowering customers.
React to this headline:
Unlocking internet’s secrets via monitoring, data collection, and analysis Read More »
Businesses are ignoring third-party security risks 30/06/2023 at 05:05 By Help Net Security In the dynamic business landscape where third-party relationships assume a critical role, organizations confront various risks that can profoundly affect their security and compliance requirements, according to Panorays. Even amidst tough economic times, the crucial nature of these risks necessitates proactive management.
React to this headline:
Businesses are ignoring third-party security risks Read More »
Employees worry less about cybersecurity best practices in the summer 30/06/2023 at 04:17 By Help Net Security IT teams are struggling to monitor and enforce BYOD (Bring Your Own Device) policies during summer months when more employees are often traveling or working remotely, according to ThreatX. With more endpoints and applications in use, and often
React to this headline:
Employees worry less about cybersecurity best practices in the summer Read More »
PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258) 29/06/2023 at 14:17 By Zeljka Zorz An authentication bypass vulnerability (CVE-2023-26258) in the Arcserve Unified Data Protection (UDP) enterprise data protection solution can be exploited to compromise admin accounts and take over vulnerable instances, MDSec researchers Juan Manuel Fernández and Sean Doherty have found – and
React to this headline:
PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258) Read More »
Popular generative AI projects pose serious security threat 29/06/2023 at 07:48 By Help Net Security Many popular generative AI projects are an increased security threat and open-source projects that utilize insecure generative AI and LLMs also have poor security posture, resulting in an environment with substantial risk for organizations, according to Rezilion. Advancements in LLMs
React to this headline:
Popular generative AI projects pose serious security threat Read More »
Global rise in DDoS attacks threatens digital infrastructure 29/06/2023 at 06:35 By Help Net Security In 2022, the total number of DDoS attacks worldwide increased by 115.1% over the amount observed in 2021, according to Nexusguard. The data also showed that cyber attackers continued to alter their threat vectors by targeting the application platforms, online
React to this headline:
Global rise in DDoS attacks threatens digital infrastructure Read More »
Businesses count the cost of network downtime 29/06/2023 at 06:06 By Help Net Security Fewer than one in ten CIOs can claim that they have avoided a network outage, according to Opengear. This finding is among new research by Opengear of both CIOs and network engineers globally. The scale and frequency of network outages is
React to this headline:
Businesses count the cost of network downtime Read More »
Guide: Attack Surface Management (ASM) 29/06/2023 at 05:50 By Help Net Security Attack surface expansion is a byproduct of doing business today, especially for enterprises that rely on the cloud. As businesses adapt and scale, the assets and platforms they use inevitably grow and change. This can result in attack surface exposures, both known and
React to this headline:
Guide: Attack Surface Management (ASM) Read More »
8Base ransomware group leaks data of 67 victim organizations 28/06/2023 at 16:47 By Helga Labus Lockbit 3.0 is currently the most active ransomware group, NCC Group says in its most recent Threat Pulse report, but new ransomware groups like 8Base and Akira are rising in prominence. Collectively, the various ransomware groups revealed 436 victim organizations
React to this headline:
8Base ransomware group leaks data of 67 victim organizations Read More »
Preparing health systems for cyber risks and insurance coverage 28/06/2023 at 07:32 By Mirko Zorz Our healthcare systems are at risk of infiltration by threat actors, potentially disrupting services, compromising sensitive data, and even jeopardizing patient outcomes. Among the people addressing these challenges is Dennis Fridrich, VP of Cybersecurity at TRIMEDX, who not only understands
React to this headline:
Preparing health systems for cyber risks and insurance coverage Read More »