News

Demand for STEM training skyrockets

Demand for STEM training skyrockets 20/06/2023 at 06:02 By Help Net Security The rapid pace of globalization, digital transformation, and AI advancements have created a renewed demand for digital and human skills among US learners, according to Coursera. “The rise of digital jobs and remote work is creating unprecedented opportunities for local talent to participate […]

React to this headline:

Loading spinner

Demand for STEM training skyrockets Read More »

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708)

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708) 19/06/2023 at 15:09 By Zeljka Zorz Progress Software has asked customers to update their MOVEit Transfer installations again, to fix a third SQL injection vulnerability (CVE-2023-35708) discovered in the web application in less that a month. Previously, the Cl0p cyber extortion gang exploited CVE-2023-34362 to

React to this headline:

Loading spinner

A third MOVEit vulnerability fixed, Cl0p lists victim organizations (CVE-2023-35708) Read More »

Microsoft confirms DDoS attacks against M365, Azure Portal

Microsoft confirms DDoS attacks against M365, Azure Portal 19/06/2023 at 14:02 By Helga Labus The Microsoft 365 and Azure Portal outages users expirienced this month were caused by Layer 7 DDoS attacks, Microsoft has confirmed on Friday. The DDoS attacks against Microsoft 365 and Azure Portal Throughout the first half June 2023 Microsoft confirmed, at

React to this headline:

Loading spinner

Microsoft confirms DDoS attacks against M365, Azure Portal Read More »

Three cybersecurity actions that make a difference

Three cybersecurity actions that make a difference 19/06/2023 at 06:02 By Help Net Security Organizations that closely align their cybersecurity programs to business objectives are 18% more likely to achieve target revenue growth and market share and improve customer satisfaction, as well as 26% more likely to lower the cost of cybersecurity breaches/incidents, on average,

React to this headline:

Loading spinner

Three cybersecurity actions that make a difference Read More »

Untangling the web of supply chain security with Tony Turner

Untangling the web of supply chain security with Tony Turner 19/06/2023 at 05:38 By Help Net Security Decades ago, Tony Turner, CEO of Opswright and author of Software Transparency: Supply Chain Security in an Era of a Software-Driven Society, faced an SQL Slammer worm. Having been one of the 75,000 infected users, he called upon

React to this headline:

Loading spinner

Untangling the web of supply chain security with Tony Turner Read More »

Week in review: Fortinet patches pre-auth RCE, Switzerland under cyberattack

Week in review: Fortinet patches pre-auth RCE, Switzerland under cyberattack 18/06/2023 at 11:03 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Building a culture of security awareness in healthcare begins with leadership In this Help Net Security interview, Ken Briggs, General Counsel at Salucro,

React to this headline:

Loading spinner

Week in review: Fortinet patches pre-auth RCE, Switzerland under cyberattack Read More »

Photos: BSidesLjubljana 0x7E7

Photos: BSidesLjubljana 0x7E7 16/06/2023 at 14:03 By Mirko Zorz BSidesLjubljana 0x7E7 is taking place today at the Computer History Museum, and Help Net Security is on site. Here’s a look at the event featuring Solar Designer (Openwall), Boris Sieklik (MongoDB), Darko Kukovec (Infinum), and Daniel Poposki. The post Photos: BSidesLjubljana 0x7E7 appeared first on Help

React to this headline:

Loading spinner

Photos: BSidesLjubljana 0x7E7 Read More »

New infosec products of the week: June 16, 2023

New infosec products of the week: June 16, 2023 16/06/2023 at 07:31 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from NETSCOUT, Okta, Quantinuum, Seceon, and Zilla Security. Okta Device Access enables businesses to secure access to both devices and applications As part of Okta’s

React to this headline:

Loading spinner

New infosec products of the week: June 16, 2023 Read More »

Cybercriminals return to business as usual in a post-pandemic world

Cybercriminals return to business as usual in a post-pandemic world 16/06/2023 at 06:31 By Help Net Security After two years of pandemic-induced disruption, 2022 was a return to business as usual for the world’s cybercriminals, according to Proofpoint. As COVID-19 medical and economic programs began to wind down, attackers had to find new ways to

React to this headline:

Loading spinner

Cybercriminals return to business as usual in a post-pandemic world Read More »

Cybersecurity culture improves despite the dark clouds of the past year

Cybersecurity culture improves despite the dark clouds of the past year 16/06/2023 at 06:00 By Help Net Security Despite a hardening economic climate, heightened global tensions and the onset of new technology making cybercrime easier, 76% of the CISOs, suggested that no material breaches had occurred and 60% said that no material cybersecurity incident had

React to this headline:

Loading spinner

Cybersecurity culture improves despite the dark clouds of the past year Read More »

VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887)

VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887) 15/06/2023 at 13:01 By Helga Labus VMware has fixed two critical (CVE-2023-20887, CVE-2023-20888) and one important vulnerability (CVE-2023-20889) in Aria Operations for Networks (formerly vRealize Network Insight), its popular enterprise network monitoring tool. About the vulnerabilities (CVE-2023-20887, CVE-2023-20888,CVE-2023-20889) CVE-2023-20887 is a pre-authentication command injection vulnerability

React to this headline:

Loading spinner

VMware fixes critical flaws in Aria Operations for Networks (CVE-2023-20887) Read More »

Fiddler Auditor: Open-source tool evaluates the robustness of large language models

Fiddler Auditor: Open-source tool evaluates the robustness of large language models 15/06/2023 at 07:17 By Help Net Security Fiddler Auditor is an open-source tool designed to evaluate the robustness of Large Language Models (LLMs) and Natural Language Processing (NLP) models. LLMs can sometimes produce unwarranted content, potentially create hostile responses, and may disclose confidential information

React to this headline:

Loading spinner

Fiddler Auditor: Open-source tool evaluates the robustness of large language models Read More »

Cyber debt levels reach tipping point

Cyber debt levels reach tipping point 15/06/2023 at 06:35 By Help Net Security The tension between difficult economic conditions and the pace of technology innovation, including the evolution of AI, is influencing the growth of identity-led cybersecurity exposure, according to CyberArk. The CyberArk’s report details how these issues – allied to an expected 240% growth

React to this headline:

Loading spinner

Cyber debt levels reach tipping point Read More »

Small organizations outpace large enterprises in MFA adoption

Small organizations outpace large enterprises in MFA adoption 15/06/2023 at 06:04 By Help Net Security The use of MFA has nearly doubled since 2020 and that phishing-resistant authenticators represent the best choice in terms of security and convenience for users, according to Okta. MFA authentication gains traction MFA authentication has steadily gained traction across organizations

React to this headline:

Loading spinner

Small organizations outpace large enterprises in MFA adoption Read More »

Switzerland under cyberattack

Switzerland under cyberattack 14/06/2023 at 14:18 By Helga Labus Swiss government websites are under DDoS attacks, but several ransomware gangs have also turned their sights on Swiss government organizations, cantonal governments, cities and companies in the last few months. Government sites under DDoS attacks “Several Federal Administration websites are/were inaccessible on Monday 12 June 2023,

React to this headline:

Loading spinner

Switzerland under cyberattack Read More »

Ignoring digital transformation is more dangerous than a recession

Ignoring digital transformation is more dangerous than a recession 14/06/2023 at 07:02 By Help Net Security Business leaders worldwide understand they need to invest in digital transformation to meet a new innovation imperative, despite ongoing macroeconomic pressures and an increasingly uncertain, competitive business environment, according to Insight. The pandemic accelerated transformation in every industry as

React to this headline:

Loading spinner

Ignoring digital transformation is more dangerous than a recession Read More »

IT providers become go-to for cybersecurity advice

IT providers become go-to for cybersecurity advice 14/06/2023 at 06:31 By Help Net Security 61% of SMBs have been hit by a successful cyberattack in the last year, according to BlackFog. The research study, which examined the business impact of cybersecurity for organizations in the US and UK, also revealed the growing importance of engaging

React to this headline:

Loading spinner

IT providers become go-to for cybersecurity advice Read More »

3 ways we’ve made the CIS Controls more automation-friendly

3 ways we’ve made the CIS Controls more automation-friendly 14/06/2023 at 06:02 By Help Net Security Compliance obligations that support data privacy and cyber risk are nearly ubiquitous. Not only that, but they’re expanding. According to Gartner, government regulations covering these areas of emphasis will apply to five billion citizens and more than 70% of

React to this headline:

Loading spinner

3 ways we’ve made the CIS Controls more automation-friendly Read More »

June 2023 Patch Tuesday: Critical patches for Microsoft Windows, SharePoint, Exchange

June 2023 Patch Tuesday: Critical patches for Microsoft Windows, SharePoint, Exchange 13/06/2023 at 21:48 By Zeljka Zorz For June 2023 Patch Tuesday, Microsoft has delivered 70 new patches but, for once, none of the fixed vulnerabilities are currently exploited by attackers nor were publicly known before today! Microsoft has previously fixed CVE-2023-3079, a type confusion

React to this headline:

Loading spinner

June 2023 Patch Tuesday: Critical patches for Microsoft Windows, SharePoint, Exchange Read More »

PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362)

PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362) 13/06/2023 at 14:18 By Zeljka Zorz As more victim organizations of Cl0p gang’s MOVEit rampage continue popping up, security researchers have released a PoC exploit for CVE-2023-34362, the RCE vulnerability exploited by the Cl0p cyber extortion group to plunder confidential data. CVE-2023-34362 PoC exploit released Horizon3 security

React to this headline:

Loading spinner

PoC exploit for exploited MOVEit vulnerability released (CVE-2023-34362) Read More »

Scroll to Top