News

Too many ICS assets are exposed to the public internet

cybersecurity, networks, News, report, runZero, survey /

Too many ICS assets are exposed to the public internet 2024-05-17 at 06:31 By Help Net Security The enterprise attack surface is expanding in multiple ways, becoming more numerous and more specific, according to runZero. “Our research reveals alarming gaps and unexpected trends in enterprise infrastructure, including the decay of network segmentation, persistent challenges in […]

Too many ICS assets are exposed to the public internet Read More »

New infosec products of the week: May 17, 2024

Calix, FireMon, ManageEngine, News, OWASP /

New infosec products of the week: May 17, 2024 2024-05-17 at 06:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Calix, FireMon, ManageEngine, and OWASP Foundation. Calix strengthens SmartBiz security with automated alerts and anti-spam compliance tools Calix unveiled updates to SmartBiz, a purpose-built

New infosec products of the week: May 17, 2024 Read More »

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

DevOps, Don't miss, Git, GitHub, Hot stuff, News, open source, security update, vulnerability /

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) 2024-05-16 at 14:16 By Zeljka Zorz New versions of Git are out, with fixes for five vulnerabilities, the most critical (CVE-2024-32002) of which can be used by attackers to remotely execute code during a “clone” operation. About Git Git is a widely-popular distributed version

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) Read More »

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)

0-day, Chrome, Don't miss, exploit, Hot stuff, Kaspersky, News, security update /

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947) 2024-05-16 at 12:01 By Zeljka Zorz For the third time in the last seven days, Google has fixed a Chrome zero-day vulnerability (CVE-2024-4947) for which an exploit exists in the wild. About CVE-2024-4947 CVE-2024-4947 is a type confusion vulnerability in V8, Chrome’s JavaScript and WebAssembly

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947) Read More »

Is an open-source AI vulnerability next?

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Kusari, News, open source, opinion, software, supply chain /

Is an open-source AI vulnerability next? 2024-05-16 at 08:31 By Help Net Security AI has captured widespread interest and offers numerous benefits. However, its rapid advancement and widespread adoption raise concerns, especially for those of us in cybersecurity. With so much interest, there are lots of insecure applications finding their way onto our devices and

Is an open-source AI vulnerability next? Read More »

OWASP dep-scan: Open-source security and risk audit tool

AppThreat, Don't miss, GitHub, Hot stuff, News, open source, OWASP, risk assessment, software /

OWASP dep-scan: Open-source security and risk audit tool 2024-05-16 at 08:01 By Mirko Zorz OWASP dep-scan is an open-source security and risk assessment tool that leverages information on vulnerabilities, advisories, and licensing restrictions for project dependencies. It supports local repositories and container images as input sources, making it suitable for integration with ASPM/VM platforms and

OWASP dep-scan: Open-source security and risk audit tool Read More »

Ebury botnet compromises 400,000+ Linux servers

backdoor, botnet, cybercrime, Don't miss, ESET, Linux, Malware, News /

Ebury botnet compromises 400,000+ Linux servers 2024-05-16 at 07:31 By Help Net Security ESET researchers released its deep-dive investigation into one of the most advanced server-side malware campaigns. It is still growing and has seen hundreds of thousands of compromised servers in its at least 15-year-long operation. The Ebury group and botnet have been involved

Ebury botnet compromises 400,000+ Linux servers Read More »

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb

ad, cookies, data breach, Don't miss, extension, Hot stuff, Malware, News, Product showcase, Surfshark, trackers /

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb 2024-05-16 at 07:01 By Help Net Security A study by PageFair revealed that ad blocker usage surged by 30% in 2016 alone, reflecting a growing public concern for privacy and uninterrupted browsing. Fast-forward to today, and the numbers are even more dramatic. According to Forbes, Americans

Product showcase: Block ads, cookie pop-ups, trackers with CleanWeb Read More »

Cloud security incidents make organizations turn to AI-powered prevention

Check Point, cloud security, cybersecurity, News, report, survey /

Cloud security incidents make organizations turn to AI-powered prevention 2024-05-16 at 06:31 By Help Net Security Cloud security incidents are alarmingly on the rise, with 61% of organizations reporting breaches within the last year, marking a significant increase from 24% the year before, according to Check Point. This trend underscores the escalating risk landscape in

Cloud security incidents make organizations turn to AI-powered prevention Read More »

How attackers deliver malware to Foxit PDF Reader users

Check Point, Don't miss, Foxit, Hot stuff, Malware, News, PDF /

How attackers deliver malware to Foxit PDF Reader users 2024-05-15 at 16:31 By Zeljka Zorz Threat actors are taking advantage of the flawed design of Foxit PDF Reader’s alerts to deliver malware via booby-trapped PDF documents, Check Point researchers have warned. Exploiting the issue The researchers have analyzed several campaigns using malicious PDF files that

How attackers deliver malware to Foxit PDF Reader users Read More »

Core security measures to strengthen privacy and data protection programs

Artificial Intelligence, Compliance, cybersecurity, Data Protection, Don't miss, Features, Hot stuff, law, News, OneTrust, opinion, physical security, Privacy, regulation, strategy /

Core security measures to strengthen privacy and data protection programs 2024-05-15 at 08:01 By Mirko Zorz As privacy laws evolve globally, organizations face increasing complexity in adapting their data protection strategies to stay compliant. In this Help Net Security interview, Kabir Barday, CEO at OneTrust, emphasizes that embracing privacy by design enables organizations to navigate

Core security measures to strengthen privacy and data protection programs Read More »

Cybersecurity jobs available right now: May 15, 2024

cybersecurity jobs, News /

Cybersecurity jobs available right now: May 15, 2024 2024-05-15 at 07:31 By Anamarija Pogorelec Associate / Pentester (Red Team) – Cybersecurity Audit Siemens | Germany | Hybrid – View job details As an Associate / Pentester (Red Team) – Cybersecurity Audit, you will be responsible for conducting cybersecurity assessments across the entire Siemens landscape, including

Cybersecurity jobs available right now: May 15, 2024 Read More »

Ransomware statistics that reveal alarming rate of cyber extortion

Arctic Wolf Networks, Cohesity, Corvus Insurance, Delinea, Don't miss, Group-IB, GuidePoint Security, Hot stuff, IBM, Malwarebytes, News, NTT Security, Ransomware, report, Rubrik, Sophos, survey, Veeam Software /

Ransomware statistics that reveal alarming rate of cyber extortion 2024-05-15 at 07:01 By Help Net Security In this article, you will find excerpts from various reports that offer statistics and insights about the current ransomware landscape. Global ransomware crisis worsens NTT Security Holdings | 2024 Global Threat Intelligence Report | May 2024 Ransomware and extortion

Ransomware statistics that reveal alarming rate of cyber extortion Read More »

Cybersecurity analysis exposes high-risk assets in power and healthcare sectors

Claroty, cybersecurity, News, report, survey, vulnerability management /

Cybersecurity analysis exposes high-risk assets in power and healthcare sectors 2024-05-15 at 06:01 By Help Net Security Traditional approaches to vulnerability management result in a narrow focus of the enterprise attack surface area that overlooks a considerable amount of risk, according to Claroty. Organizations must take a holistic approach to exposure management To understand the

Cybersecurity analysis exposes high-risk assets in power and healthcare sectors Read More »

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040)

0-day, Don't miss, Hot stuff, Kaspersky, Mandiant, Microsoft, News, Patch Tuesday, security update, SharePoint, Trend Micro, vulnerability /

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) 2024-05-14 at 22:02 By Zeljka Zorz For May 2024 Patch Tuesday, Microsoft has released fixes for 59 CVE-numbered vulnerabilities, including two zero-days (CVE-2024-30051, CVE-2024-30040) actively exploited by attackers. CVE-2024-30051 and CVE-2024-30040 CVE-2024-30051 is a heap-based buffer overflow vulnerability affecting the Windows DWM Core Library that

May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) Read More »

Apple backports iOS zero-day patch, adds Bluetooth tracker alert

apple, Don't miss, Google, Hot stuff, iOS, iPad, macOS, Mysk, News, Privacy, security update, trackers, vulnerability /

Apple backports iOS zero-day patch, adds Bluetooth tracker alert 2024-05-14 at 16:32 By Zeljka Zorz Apple has backported the patch for CVE-2024-23296 to the iOS 16 branch and has fixed a bug (CVE-2024-27852) in MarketplaceKit that may allow maliciously crafted webpages to distribute a script that tracks iOS users on other webpages. The company has

Apple backports iOS zero-day patch, adds Bluetooth tracker alert Read More »

How a GRC consultant passed the CISSP exam in six weeks

certification, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Infoedge, ISC2, News, skill development, strategy, tips /

How a GRC consultant passed the CISSP exam in six weeks 2024-05-14 at 08:01 By Help Net Security Ask any IT security professional which certification they would consider to be the “gold standard” in terms of prestige, credibility, or difficulty, and almost invariably they will answer: the CISSP. If an organization is seeking some peace

How a GRC consultant passed the CISSP exam in six weeks Read More »

BLint: Open-source tool to check the security properties of your executables

Android, AppThreat, Don't miss, GitHub, Linux, mobile apps, News, open source, programming, software, Windows /

BLint: Open-source tool to check the security properties of your executables 2024-05-14 at 07:31 By Mirko Zorz BLint is a Binary Linter designed to evaluate your executables’ security properties and capabilities, utilizing LIEF for its operations. From version 2, BLint can also produce Software Bill-of-Materials (SBOM) for compatible binaries. BLint features “Several source code analysis

BLint: Open-source tool to check the security properties of your executables Read More »

Tailoring responsible AI: Defining ethical guidelines for industry-specific use

Artificial Intelligence, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, regulation, Smartsheet, standards, strategy, threats /

Tailoring responsible AI: Defining ethical guidelines for industry-specific use 2024-05-14 at 07:01 By Mirko Zorz In this Help Net Security interview, Chris Peake, CISO & SVP at Smartsheet, explains how responsible AI should be defined by each organization to guide their AI development and usage. Peake emphasizes that implementing responsible AI requires balancing ethical considerations,

Tailoring responsible AI: Defining ethical guidelines for industry-specific use Read More »

Log4J shows no sign of fading, spotted in 30% of CVE exploits

Cato Networks, cybersecurity, network, News, report, survey /

Log4J shows no sign of fading, spotted in 30% of CVE exploits 2024-05-14 at 06:01 By Help Net Security Organizations continue to run insecure protocols across their wide access networks (WAN), making it easier for cybercriminals to move across networks, according to a Cato Networks survey. Enterprises are too trusting within their networks The Cato

Log4J shows no sign of fading, spotted in 30% of CVE exploits Read More »

Scroll to Top