News

Trustwave, Telarus Announce Strategic Global Partnership

News /

Trustwave, Telarus Announce Strategic Global Partnership 2024-04-23 at 16:06 By Trustwave is partnering with Telarus, a leading technology services distributor (TSD), which will allow it to leverage Trustwave’s comprehensive offensive and defensive cybersecurity portfolio and give Trustwave a direct line to Telarus’ vast network of technology advisors. This article is an excerpt from Trustwave Blog View Original […]

Trustwave, Telarus Announce Strategic Global Partnership Read More »

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040)

Censys, CrowdStrike, CrushFTP, CVE, Don't miss, enterprise, exploit, FTP, Hot stuff, News /

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040) 2024-04-23 at 13:01 By Zeljka Zorz A vulnerability (CVE-2024-4040) in enterprise file transfer solution CrushFTP is being exploited by attackers in a targeted fashion, according to Crowdstrike. The vulnerability allows attackers to escape their virtual file system and download system files (i.e., configuration files), but only if

CrushFTP zero-day exploited by attackers, upgrade immediately! (CVE-2024-4040) Read More »

The rising influence of AI on the 2024 US election

Artificial Intelligence, cybersecurity, deepfakes, Don't miss, election security, Expert analysis, Expert corner, Hot stuff, News, opinion, Sentra, social media /

The rising influence of AI on the 2024 US election 2024-04-23 at 08:01 By Help Net Security We stand at a crossroads for election misinformation: on one side our election apparatus has reached a higher level of security and is better defended from malicious attackers than ever before. On the other side, the rise of

The rising influence of AI on the 2024 US election Read More »

10 colleges and universities shaping the future of cybersecurity education

Berkeley, Carnegie Mellon University, cybersecurity, Don't miss, education, Hot stuff, MIT, News, skill development, University of Cambridge /

10 colleges and universities shaping the future of cybersecurity education 2024-04-23 at 07:01 By Help Net Security Institutions featured on this list often provide undergraduate and graduate degrees, courses, as well as certificate programs tailored to meet the growing demand for cybersecurity professionals in various industries. Some notable colleges and universities renowned for their cybersecurity

10 colleges and universities shaping the future of cybersecurity education Read More »

People doubt their own ability to spot AI-generated deepfakes

Artificial Intelligence, cybercrime, cybersecurity, deepfakes, election security, McAfee, News, report, scams, survey /

People doubt their own ability to spot AI-generated deepfakes 2024-04-23 at 07:01 By Help Net Security 23% of Americans said they recently came across a political deepfake they later discovered to be fake, according to McAfee. The actual number of people exposed to political and other deepfakes is expected to be much higher given many

People doubt their own ability to spot AI-generated deepfakes Read More »

Behavioral patterns of ransomware groups are changing

cybercrime, cybersecurity, GuidePoint Security, News, Ransomware, report, survey /

Behavioral patterns of ransomware groups are changing 2024-04-23 at 06:01 By Help Net Security Q1 saw substantial shifts in activity from some of the most prolific Ransomware-as-a-Service (RaaS) groups, according to GuidePoint Security. RaaS groups attempt to recruit disaffected or displaced affiliates In addition to revealing a nearly 20% year-over-year increase in the number of

Behavioral patterns of ransomware groups are changing Read More »

MITRE breached by nation-state threat actor via Ivanti zero-days

data breach, Don't miss, Hot stuff, Incident Response, Ivanti, Mandiant, MITRE, News, Volexity /

MITRE breached by nation-state threat actor via Ivanti zero-days 2024-04-22 at 15:16 By Zeljka Zorz MITRE has been breached by attackers via two zero-day vulnerabilities (CVE-2023-46805, CVE-2024-21887) in Ivanti’s Connect Secure VPN devices. The attackers have also managed to move laterally and compromise the company network’s VMware infrastructure, MITRE confirmed late last week. What is

MITRE breached by nation-state threat actor via Ivanti zero-days Read More »

The first steps of establishing your cloud security strategy

Center for Internet Security, Don't miss, Hot stuff, News /

The first steps of establishing your cloud security strategy 2024-04-22 at 10:02 By Help Net Security In this article, we’ll identify some first steps you can take to establish your cloud security strategy. We’ll do so by discussing the cloud security impact of individual, concrete actions featured within the CIS Critical Security Controls (CIS Controls)

The first steps of establishing your cloud security strategy Read More »

How to optimize your bug bounty programs

Artificial Intelligence, bug bounty, cybersecurity, Don't miss, Features, hacker, Hot stuff, machine learning, News, opinion, policy, regulation, risk assessment, Risk Management, strategy, tips, Zoom /

How to optimize your bug bounty programs 2024-04-22 at 08:02 By Mirko Zorz In this Help Net Security interview, Roy Davis, Manager – Vulnerability Management & Bug Bounty at Zoom, discusses the role bug bounty programs play in identifying security vulnerabilities and facilitating collaboration with researchers. He offers advice to organizations, stressing the importance of

How to optimize your bug bounty programs Read More »

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity

AWS, cloud security, Don't miss, GitHub, Hot stuff, News, Permiso, software /

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity 2024-04-22 at 07:32 By Mirko Zorz Cloud Console Cartographer is an open-source tool that maps noisy log activity into highly consolidated, succinct events to help security practitioners cut through the noise and understand console behavior in their environment. “Infrastructure as code has replaced a

Cloud Console Cartographer: Open-source tool helps security teams transcribe log activity Read More »

Uncertainty is the most common driver of noncompliance

Compliance, cybersecurity, Gartner, News, report, survey /

Uncertainty is the most common driver of noncompliance 2024-04-22 at 06:31 By Help Net Security Most compliance leaders tend to focus on building an ethical culture in their organizations to improve employee behavior, but it has a limited impact on addressing uncertainty about how to be compliant, according to a survey by Gartner. Three primary

Uncertainty is the most common driver of noncompliance Read More »

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack

News, Week in review /

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack 2024-04-21 at 11:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation While it initially seemed that protecting Palo Alto Network

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack Read More »

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware!

Coveware, cybercriminals, Don't miss, extortion, GuidePoint Security, Hot stuff, News, Ransomware, SMBs, Sophos /

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware! 2024-04-19 at 15:46 By Zeljka Zorz More organizations hit by ransomware gangs are starting to realize that it doesn’t pay to pay up: “In Q1 2024, the proportion of victims that chose to pay touched a new record low of 28%,” ransomware incident

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware! Read More »

LastPass users targeted by vishing attackers

Don't miss, Hot stuff, LastPass, Lookout, News, password manager, phishing, vishing /

LastPass users targeted by vishing attackers 2024-04-19 at 13:01 By Zeljka Zorz The CryptoChameleon phishing kit is being leveraged by vishing attackers looking to trick LastPass users into sharing their master password. “Initially, we learned of a new parked domain (help-lastpass[.]com) and immediately marked the website for monitoring should it go live and start serving

LastPass users targeted by vishing attackers Read More »

Protobom: Open-source software supply chain tool

CISA, DHS, Don't miss, GitHub, News, open source, OpenSSF, software /

Protobom: Open-source software supply chain tool 2024-04-19 at 07:31 By Mirko Zorz Protobom is an open-source software supply chain tool that enables all organizations, including system administrators and software development communities, to read and generate Software Bill of Materials (SBOMs), file data, and translate this data across standard industry SBOM formats. “he Protobom project was

Protobom: Open-source software supply chain tool Read More »

51% of enterprises experienced a breach despite large security stacks

CISO, cyber risk, cybersecurity, News, penetration testing, Pentera, report, survey /

51% of enterprises experienced a breach despite large security stacks 2024-04-19 at 06:31 By Help Net Security Threat actors are continuing to successfully breach across the entire attack surface and the stakes are only getting higher: 93% of enterprises who admitted a breach reported unplanned downtime, data exposure, or financial loss as a result, according

51% of enterprises experienced a breach despite large security stacks Read More »

New infosec products of the week: April 19, 2024

IDnow, Immuta, News, Privacera, Redgate, ShadowDragon, Tanium /

New infosec products of the week: April 19, 2024 2024-04-19 at 06:02 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from IDnow, Immuta, Privacera, Redgate, ShadowDragon, and Tanium. ShadowDragon Horizon enhancements help users conduct investigations from any device Horizon is accessible with any internet connection

New infosec products of the week: April 19, 2024 Read More »

Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)

CVE, Don't miss, Hot stuff, Ivanti, News, remote management, Tenable, vulnerability /

Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204) 2024-04-18 at 15:02 By Zeljka Zorz The newest version of Ivanti Avalanche – the company’s enterprise mobile device management (MDM) solution – carries fixes for 27 vulnerabilities, two of which (CVE-2024-29204, CVE-2024-24996) are critical and may allow a remote unauthenticated attacker to execute arbitrary

Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204) Read More »

Authorities take down LabHost, phishing-as-a-service platform

attacks, cybercrime, cybercriminals, Europol, law enforcement, News, phishing /

Authorities take down LabHost, phishing-as-a-service platform 2024-04-18 at 12:01 By Help Net Security Law enforcement from 19 countries severely disrupted one of the world’s largest phishing-as-a-service platform, known as LabHost. This year-long operation, coordinated at the international level by Europol, resulted in the compromise of LabHost’s infrastructure. International investigation disrupts phishing-as-a-service platform LabHost Between Sunday

Authorities take down LabHost, phishing-as-a-service platform Read More »

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

cybercrime, dark web, Don't miss, Malware, News, Ransomware, Sophos, threat /

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate 2024-04-18 at 08:01 By Help Net Security Since June 2023, Sophos X-Ops has discovered 19 junk gun ransomware variants — cheap, independently produced, and crudely constructed — on the dark web. The developers of these junk gun variants are attempting to

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate Read More »

Scroll to Top