News

AI-driven phishing attacks deceive even the most aware users

Artificial Intelligence, cybersecurity, generative AI, News, phishing, report, survey, Zscaler /

AI-driven phishing attacks deceive even the most aware users 2024-05-02 at 06:33 By Help Net Security Vishing and deepfake phishing attacks are on the rise as attackers leverage GenAI to amplify social engineering tactics, according to Zscaler. AI automates and personalizes various aspects of the attack process AI-driven phishing attacks leverage AI tools to enhance […]

AI-driven phishing attacks deceive even the most aware users Read More »

Why cloud vulnerabilities need CVEs

Cloud, CVE, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, Nucleus Security, opinion, patching, vulnerability management /

Why cloud vulnerabilities need CVEs 2024-05-01 at 08:01 By Help Net Security When considering vulnerability management’s purpose in a modern world, it’s imperative to recognize the huge transition to new technologies and how you manage risk within these different paradigms and environments (e.g., the cloud). Patch network security isn’t applicable in the same way for

Why cloud vulnerabilities need CVEs Read More »

Making cybersecurity more appealing to women, closing the skills gap

cybersecurity, Don't miss, Features, Hot stuff, News, opinion, policy, professional, Sapphire, skill development, strategy /

Making cybersecurity more appealing to women, closing the skills gap 2024-05-01 at 07:31 By Mirko Zorz In this Help Net Security interview, Charly Davis, CCO at Sapphire, provides insights into the current challenges and barriers women face in the cybersecurity industry. Davis emphasizes the need for proactive strategies to attract diverse talent, improve mentorship opportunities,

Making cybersecurity more appealing to women, closing the skills gap Read More »

Cybersecurity jobs available right now: May 1, 2024

cybersecurity jobs, News /

Cybersecurity jobs available right now: May 1, 2024 2024-05-01 at 07:02 By Anamarija Pogorelec Adversary Simulation Specialist LyondellBasell | Poland | On-site – View job details The Adversary Simulation Specialist will be responsible for testing and evaluating the security of a LyondellBasell’s networks, systems, and applications. This role involves conducting application assessments, vulnerability assessments, penetration

Cybersecurity jobs available right now: May 1, 2024 Read More »

Essential steps for zero-trust strategy implementation

cybersecurity, Gartner, News, report, strategy, survey, zero trust /

Essential steps for zero-trust strategy implementation 2024-05-01 at 06:01 By Help Net Security 63% of organizations worldwide have fully or partially implemented a zero-trust strategy, according to Gartner. For 78% of organizations implementing a zero-trust strategy, this investment represents less than 25% of the overall cybersecurity budget. A fourth quarter 2023 Gartner survey of 303

Essential steps for zero-trust strategy implementation Read More »

Infosec products of the month: April 2024

Akamai, Bitdefender, CyberInt, Fastly, Forcepoint, IDnow, Immuta, Index Engines, Invicti Security, LogRhythm, Netwrix, News, Owl Cyber Defense Solutions, Privacera, Redgate, ShadowDragon, Siemens, Tanium, Trend Micro, TrueMedia.org, Veriato, WhyLabs, Zero Networks /

Infosec products of the month: April 2024 2024-05-01 at 05:01 By Help Net Security Here’s a look at the most interesting products from the past month, featuring releases from: Akamai, Bitdefender, CyberInt, Fastly, Forcepoint, IDnow, Immuta, Index Engines, Invicti Security, LogRhythm, Netwrix, Owl Cyber Defense Solutions, Privacera, Redgate, ShadowDragon, Siemens, Tanium, Trend Micro, TrueMedia.org, Veriato,

Infosec products of the month: April 2024 Read More »

FCC fines major wireless carriers over illegal location data sharing

AT&T, cybersecurity, fcc, Government, News, Privacy, Sprint, T-Mobile, USA /

FCC fines major wireless carriers over illegal location data sharing 2024-04-30 at 16:01 By Industry News The Federal Communications Commission (FCC) fined the nation’s largest wireless carriers for illegally sharing access to customers’ location information without consent and without taking reasonable measures to protect that information against unauthorized disclosure. Wireless carriers shared access to customers’

FCC fines major wireless carriers over illegal location data sharing Read More »

Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades

Don't miss, exploit, firewall, Hot stuff, News, Palo Alto Networks, PoC /

Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades 2024-04-30 at 15:47 By Zeljka Zorz There are proof-of-concept techniques allowing attackers to achieve persistence on Palo Alto Networks firewalls after CVE-2024-3400 has been exploited, the company has confirmed on Monday, but they are “not aware at this time of any malicious attempts to

Palo Alto firewalls: CVE-2024-3400 exploitation and PoCs for persistence after resets/upgrades Read More »

Triangulation fraud: The costly scam hitting online retailers

Artificial Intelligence, attacks, authentication, biometrics, cybersecurity, Don't miss, Features, fraud, Hot stuff, News, online payment, opinion, remote access, scams, Visa /

Triangulation fraud: The costly scam hitting online retailers 2024-04-30 at 08:01 By Mirko Zorz In this Help Net Security interview, Mike Lemberger, Visa’s SVP, Chief Risk Officer, North America, discusses the severe financial losses resulting from triangulation fraud, estimating monthly losses to range from $660 million to $1 billion among merchants. He also highlights the

Triangulation fraud: The costly scam hitting online retailers Read More »

Tracecat: Open-source SOAR

automation, cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, SOAR, software /

Tracecat: Open-source SOAR 2024-04-30 at 07:31 By Mirko Zorz Tracecat is an open-source automation platform for security teams. The developers believe security automation should be accessible to everyone, especially understaffed small- to mid-sized teams. Core features, user interfaces, and day-to-day workflows are based on existing best practices from best-in-class security teams. Use specialized AI models

Tracecat: Open-source SOAR Read More »

Passwords under seven characters can be easily cracked

cybersecurity, Hive Systems, News, passwords, report, survey /

Passwords under seven characters can be easily cracked 2024-04-30 at 06:31 By Help Net Security Any password under seven characters can be cracked within a matter of hours, according to Hive Systems. The time it takes to crack passwords increases Due to the widespread use of stronger password hashing algorithms to protect data, the time

Passwords under seven characters can be easily cracked Read More »

Security analysts believe more than half of tasks could be automated

Anomali, Artificial Intelligence, automation, CISO, cybersecurity, News, report, SOC, strategy, survey /

Security analysts believe more than half of tasks could be automated 2024-04-30 at 06:01 By Help Net Security Security industry leaders believe that AI and automation technologies are critical to addressing the complexities of modern security operations, according to Anomali. AI expected to boost threat detection In fact, security analysts maintain that up to 57%

Security analysts believe more than half of tasks could be automated Read More »

eBook: Do you have what it takes to lead in cybersecurity?

Don't miss, Hot stuff, ISC2, News, Whitepapers and webinars /

eBook: Do you have what it takes to lead in cybersecurity? 2024-04-30 at 05:31 By Help Net Security Organizations worldwide need talented, experienced, and knowledgeable cybersecurity teams who understand the advantages and risks of emerging technologies. Aspiring leaders in the cybersecurity field need more than just job experience. They need a diverse and robust set

eBook: Do you have what it takes to lead in cybersecurity? Read More »

UK enacts IoT cybersecurity law

consumer, Don't miss, Hot stuff, Internet of Things, legislation, News, smart home, smart lock, smart toys, smart tv, smartphone, UK, USA /

UK enacts IoT cybersecurity law 2024-04-29 at 17:01 By Zeljka Zorz The Product Security and Telecommunications Infrastructure (PSTI) Act has come into effect today, requiring manufacturers of consumer-grade IoT products sold in the UK to stop using guessable default passwords and have a vulnerability disclosure policy. “Most smart devices are manufactured outside the UK, but

UK enacts IoT cybersecurity law Read More »

Researchers unveil novel attack methods targeting Intel’s conditional branch predictor

attacks, chip, cybersecurity, hardware, Intel, News, software /

Researchers unveil novel attack methods targeting Intel’s conditional branch predictor 2024-04-29 at 13:46 By Help Net Security Researchers have found two novel types of attacks that target the conditional branch predictor found in high-end Intel processors, which could be exploited to compromise billions of processors currently in use. The multi-university and industry research team led

Researchers unveil novel attack methods targeting Intel’s conditional branch predictor Read More »

DHS establishes AI Safety and Security Board to protect critical infrastructure

Artificial Intelligence, critical infrastructure, cybersecurity, DHS, Government, News, USA /

DHS establishes AI Safety and Security Board to protect critical infrastructure 2024-04-29 at 12:31 By Help Net Security The Department of Homeland Security announced the establishment of the Artificial Intelligence Safety and Security Board (the Board). The Board will advise the Secretary, the critical infrastructure community, other private sector stakeholders, and the broader public on

DHS establishes AI Safety and Security Board to protect critical infrastructure Read More »

Prompt Fuzzer: Open-source tool for strengthening GenAI apps

Artificial Intelligence, Don't miss, generative AI, GitHub, Hot stuff, News, open source, software /

Prompt Fuzzer: Open-source tool for strengthening GenAI apps 2024-04-29 at 08:01 By Mirko Zorz Prompt Fuzzer is an open-source tool that evaluates the security of your GenAI application’s system prompt against dynamic LLM-based threats. Prompt Fuzzer features Simulation of over a dozen types of GenAI attacks The tool contextualizes itself automatically based on the system

Prompt Fuzzer: Open-source tool for strengthening GenAI apps Read More »

AI is creating a new generation of cyberattacks

Artificial Intelligence, cybersecurity, Netacea, News, report, survey /

AI is creating a new generation of cyberattacks 2024-04-29 at 07:01 By Help Net Security Most businesses see offensive AI fast becoming a standard tool for cybercriminals, with 93% of security leaders expecting to face daily AI-driven attacks, according to Netacea. Offensive AI in cyberattacks The research, “Cyber security in the age of offensive AI”,

AI is creating a new generation of cyberattacks Read More »

Closing the cybersecurity skills gap with upskilling programs

cybersecurity, News, Pluralsight, report, skill development, survey /

Closing the cybersecurity skills gap with upskilling programs 2024-04-29 at 06:31 By Help Net Security The list of skills technologists and organizations need to succeed grows with each new tech advancement, according to Pluralsight. But for many organizations, budgets and staff continue to shrink. This survey asked 1,400 executives and IT professionals how organizations can

Closing the cybersecurity skills gap with upskilling programs Read More »

Scroll to Top