News

Organizations are making email more secure, and it’s paying off

cybercrime, data breach, identity, News, Red Canary, report, survey, threat detection /

Organizations are making email more secure, and it’s paying off 2024-09-25 at 06:01 By Help Net Security Compromised identities have been a central component of countless costly breaches this year, according to Red Canary. Rise in identity and cloud-native attacks While most of the threats and techniques identified in the 2024 report remain consistent with […]

Organizations are making email more secure, and it’s paying off Read More »

Transportation, logistics companies targeted with lures impersonating fleet management software

Don't miss, Hot stuff, Malware, News, Proofpoint, social engineering, supply chain, transportation, USA /

Transportation, logistics companies targeted with lures impersonating fleet management software 2024-09-24 at 17:46 By Zeljka Zorz Financially motivated threat actors are targeting North American companies in the transportation and logistics sector with tailored lures, info-stealing malware, and a clever new trick. How the attack unfolds According to Proofpoint threat researchers, the attackers start by compromising […]

Transportation, logistics companies targeted with lures impersonating fleet management software Read More »

US-based Kaspersky users startled by unexpected UltraAV installation

antivirus, Don't miss, Hot stuff, Kaspersky, News, UltraAV, USA /

US-based Kaspersky users startled by unexpected UltraAV installation 2024-09-24 at 15:46 By Zeljka Zorz A poorly executed “handover” of US-based Kaspersky customers has led some users to panic when software named UltraAV popped up on their computers without any action on their part. What happened? Earlier this year, for national security reasons, the US Department […]

US-based Kaspersky users startled by unexpected UltraAV installation Read More »

Telegram will share IP addresses, phone numbers of criminal suspects with cops

cybercriminals, Don't miss, Hot stuff, law enforcement, News, Privacy Policy, social media, Telegram, Terms of Service /

Telegram will share IP addresses, phone numbers of criminal suspects with cops 2024-09-24 at 13:01 By Zeljka Zorz Telegram will start handing over the IP addresses and phone numbers of users who violate their Terms of Service “to relevant authorities in response to valid legal requests”, Telegram founder and CEO Pavel Durov has announced on […]

Telegram will share IP addresses, phone numbers of criminal suspects with cops Read More »

Future-proofing cybersecurity: Why talent development is key

certification, cybersecurity, Don't miss, Features, Hot stuff, how-to, ISC2, News, opinion, skill development, strategy, tips /

Future-proofing cybersecurity: Why talent development is key 2024-09-24 at 08:01 By Mirko Zorz In this Help Net Security interview, Jon France, CISO at ISC2, discusses cybersecurity workforce growth. He outlines organizations’ challenges, such as budget constraints and limited entry-level opportunities. France also points to the urgent need to upskill current employees and adopt inclusive hiring […]

Future-proofing cybersecurity: Why talent development is key Read More »

Discover how online fraud can impact your business

cybercrime, Enea, Experian, fraud, Jumio, News, Regula, report, Socure, survey, Trustpair /

Discover how online fraud can impact your business 2024-09-24 at 07:31 By Help Net Security Recent reports underscore increased fraud losses driven by both old methods and new technologies. As fraudsters exploit advancements in AI and other sophisticated tools, their methods have become more difficult to combat. From AI-driven scams and sophisticated phishing attacks to […]

Discover how online fraud can impact your business Read More »

How cyber compliance helps minimize the risk of ransomware infections

Compliance, cybersecurity, Cypago, framework, News, Ransomware /

How cyber compliance helps minimize the risk of ransomware infections 2024-09-24 at 07:01 By Help Net Security Over the past decade, ransomware has been cemented as one of the top cybersecurity threats. In 2023 alone, the FBI received 2,385 ransomware complaints, resulting in over $34 million in losses. To help businesses combat ransomware and other […]

How cyber compliance helps minimize the risk of ransomware infections Read More »

65% of websites are unprotected against simple bot attacks

bot, cybercrime, cybersecurity, DataDome, disinformation, News, report, survey /

65% of websites are unprotected against simple bot attacks 2024-09-24 at 06:31 By Help Net Security Companies across industries are seeing more bot-driven attacks, both basic and advanced, according to DataDome. An analysis of over 14,000 websites uncovered alarming gaps in protection against cyber fraud, particularly within consumer-centric industries. E-commerce and luxury industries are prime […]

65% of websites are unprotected against simple bot attacks Read More »

MFA bypass becomes a critical security issue as ransomware tactics advance

cybercrime, cybersecurity, News, Ransomware, report, SpyCloud, survey /

MFA bypass becomes a critical security issue as ransomware tactics advance 2024-09-24 at 06:01 By Help Net Security Ransomware is seen as the biggest cybersecurity threat across every industry, with 75% of organizations affected by ransomware more than once in the past 12 months – a jump from 61% in 2023, according to SpyCloud. Session […]

MFA bypass becomes a critical security issue as ransomware tactics advance Read More »

Windows Server 2025 gets hotpatching option, without reboots

data center, Don't miss, Hot stuff, Microsoft, News, patching, security update, Windows Server /

Windows Server 2025 gets hotpatching option, without reboots 2024-09-23 at 17:02 By Zeljka Zorz Organizations that plan to upgrade to Windows Server 2025 once it becomes generally available will be able to implement some security updates by hotpatching running processes. What is hotpatching? “Hotpatching has been around for years in Windows Server 2022 Azure Edition, […]

Windows Server 2025 gets hotpatching option, without reboots Read More »

Organizations are changing cybersecurity providers in wake of Crowdstrike outage

business continuity, CrowdStrike, cyber risk, cybersecurity, disruption, Don't miss, Europe, Germany, Hot stuff, Incident Response, News, procurement /

Organizations are changing cybersecurity providers in wake of Crowdstrike outage 2024-09-23 at 15:46 By Zeljka Zorz More often than not, a cyber attack or a cyber incident that results in business disruption will spur organizations to make changes to improve their cybersecurity and cyber resilience – and sometimes that means changing cybersecurity providers. The recent […]

Organizations are changing cybersecurity providers in wake of Crowdstrike outage Read More »

Certainly: Open-source offensive security toolkit

Don't miss, GitHub, Hot stuff, News, open source, software /

Certainly: Open-source offensive security toolkit 2024-09-23 at 07:31 By Mirko Zorz Certainly is an open-source offensive security toolkit designed to capture extensive traffic across various network protocols in bit-flip and typosquatting scenarios. Built-in protocols: DNS, HTTP(S), IMAP(S), SMTP(S). “The reason why we created Certainly was to simplify the process of capturing and collecting requests that […]

Certainly: Open-source offensive security toolkit Read More »

Offensive cyber operations are more than just attacks

Artificial Intelligence, cybersecurity, Don't miss, Features, Hot stuff, News, Nightwing, opinion, quantum computing, strategy /

Offensive cyber operations are more than just attacks 2024-09-23 at 07:01 By Mirko Zorz In this Help Net Security interview, Christopher Jones, Chief Technology Officer and Chief Data Officer at Nightwing, talks about some key misconceptions and complexities surrounding offensive cyber operations. Many myths stem from a simplistic view of these operations, ranging from direct […]

Offensive cyber operations are more than just attacks Read More »

Paid open-source maintainers spend more time on security

cybersecurity, Don't miss, News, open source, report, software, supply chain, survey, Tidelift /

Paid open-source maintainers spend more time on security 2024-09-23 at 06:31 By Help Net Security Paid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to implementing security practices like those included in industry standards like the OpenSSF Scorecard and the NIST Secure Software […]

Paid open-source maintainers spend more time on security Read More »

The surge in cyber insurance and what it means for your business

Arctic Wolf Networks, Coalition, CyberCube, Don't miss, Hornetsecurity, News, Optiv Security, Proofpoint, report, survey, Veeam Software /

The surge in cyber insurance and what it means for your business 2024-09-23 at 06:01 By Help Net Security The cyber insurance market is set for explosive growth as organizations increasingly seek financial protection against rising cyber threats. This surge in demand reflects a broader shift in how businesses approach risk management, viewing cyber insurance […]

The surge in cyber insurance and what it means for your business Read More »

Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18

News, Week in review /

Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18 2024-09-22 at 11:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical VMware vCenter Server bugs fixed (CVE-2024-38812) Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can […]

Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18 Read More »

How to detect and stop bot activity

access management, authentication, bot, cybersecurity, device fingerprinting, Don't miss, Expert analysis, Expert corner, Fingerprint, Hot stuff, News, opinion, strategy /

How to detect and stop bot activity 2024-09-20 at 07:46 By Help Net Security Bad bot traffic continues to rise year-over-year, accounting for nearly a third of all internet traffic in 2023. Bad bots access sensitive data, perpetrate fraud, steal proprietary information, and degrade site performance. New technologies are enabling fraudsters to strike faster and […]

How to detect and stop bot activity Read More »

Striking the balance between cybersecurity and operational efficiency

CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy /

Striking the balance between cybersecurity and operational efficiency 2024-09-20 at 07:31 By Mirko Zorz In this Help, Net Security interview, Michael Oberlaender, ex-CISO, and book author, discusses how to strike the right balance between security and operational efficiency. Oberlaender advises companies starting their cybersecurity journey and stresses the importance of aligning with various frameworks. He […]

Striking the balance between cybersecurity and operational efficiency Read More »

Rising identity security risks: Why organizations must act now

ConductorOne, CyberArk, Don't miss, Expel, identity, IDSA, Jumio, News, Ping Identity, Regula, report, survey /

Rising identity security risks: Why organizations must act now 2024-09-20 at 07:01 By Help Net Security As the priority for managing digital identities intensifies, organizations are encountering severe identity security risks. Recent findings indicate that many businesses are struggling with frequent breaches and inadequate security measures, particularly concerning machine identities. Despite increased efforts and awareness, […]

Rising identity security risks: Why organizations must act now Read More »

New infosec products of the week: September 20, 2024

anecdotes, F5 Networks, Gcore, News, Rapid7, Strivacity, Veritas Technologies /

New infosec products of the week: September 20, 2024 2024-09-20 at 06:31 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from anecdotes, F5 Networks, Gcore, Rapid7, Strivacity, and Veritas Technologies. Veritas unveils AI-driven features to simplify cyber recovery Veritas Technologies unveiled new AI-driven capabilities to […]

New infosec products of the week: September 20, 2024 Read More »

Scroll to Top