News

Chinese APT40 group swifly leverages public PoC exploits

APT, Australia, China, CISA, Don't miss, Hot stuff, News, PoC, web application, web shell /

Chinese APT40 group swifly leverages public PoC exploits 2024-07-09 at 14:46 By Zeljka Zorz Chinese state-sponsored cyber group APT40 is amazingly fast at adapting public proof-of-concept (PoC) exploits for vulnerabilities in widely used software, an advisory released by intelligence and cybersecurity agencies from eight countries warns. The group, which is also known as Kryptonite Panda […]

Chinese APT40 group swifly leverages public PoC exploits Read More »

Microsoft’s cybersecurity dilemma: An open letter to Satya Nadella

attacks, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Mercury Risk And Compliance, News, opinion, regulation, risk, strategy /

Microsoft’s cybersecurity dilemma: An open letter to Satya Nadella 2024-07-09 at 07:31 By Help Net Security Microsoft is suffering cybersecurity failures due to systemic problems with strategic leadership. The world is witnessing an alarming trend of cybersecurity issues with Microsoft products and services. Over the past several years, Microsoft has suffered several serious attacks with […]

Microsoft’s cybersecurity dilemma: An open letter to Satya Nadella Read More »

Exploring the root causes of the cybersecurity skills gap

Artificial Intelligence, automation, certificates, cybersecurity, Don't miss, education, Features, Hot stuff, News, opinion, skill development, Skillsoft, training /

Exploring the root causes of the cybersecurity skills gap 2024-07-09 at 07:01 By Mirko Zorz In this Help Net Security interview, Koma Gandy, VP of Leadership and Business at Skillsoft, addresses the critical aspects of the cybersecurity skills gap, the need for diverse talent and continuous upskilling in areas like AI and cloud computing. Gandy […]

Exploring the root causes of the cybersecurity skills gap Read More »

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices

Compliance, cyber risk, cybersecurity, Don't miss, Endor Labs, Hot stuff, how-to, News, strategy, tips, Video /

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices 2024-07-09 at 06:31 By Help Net Security Shadow engineering is present in many organizations, and it can lead to security, compliance, and risk challenges. In this Help Net Security video, Darren Meyer, Staff Research Engineer at Endor Labs, discusses why it causes issues and how […]

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices Read More »

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack

APT, data breach, Don't miss, enterprise, Hot stuff, Microsoft, News, TeamViewer /

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack 2024-07-08 at 20:31 By Zeljka Zorz TeamViewer, the company developing the popular remote access/control software with the same name, has finished the investigation into the breach it detected in late June 2024, and has confirmed that it was limited to their internal corporate IT environment. “Neither our separated […]

TeamViewer: Network segmentation hobbled Midnight Blizzard’s attack Read More »

Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released

Avast, decryptor, Don't miss, Hot stuff, News, Ransomware /

Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released 2024-07-08 at 13:01 By Zeljka Zorz A cryptographic weakness in the DoNex ransomware and its previous incarnations – Muse, fake LockBit 3.0, and DarkRace – has allowed Avast researchers to create a decryptor for files encrypted by all those ransomware variants. DoNex ransom note (Source: […]

Decryptor for DoNex, Muse, DarkRace, (fake) LockBit 3.0 ransomware released Read More »

July 2024 Patch Tuesday forecast: The end of an AV giant in the US

Expert analysis, Microsoft, News, opinion, Patch Tuesday, predictions /

July 2024 Patch Tuesday forecast: The end of an AV giant in the US 2024-07-08 at 07:31 By Mirko Zorz The US celebrated Independence Day last week, providing many with a long weekend leading into patch week. With summer vacations underway, many developers must be out of the office because June was fairly quiet regarding […]

July 2024 Patch Tuesday forecast: The end of an AV giant in the US Read More »

How nation-state cyber attacks disrupt public services and undermine citizen trust

Broadcom, critical infrastructure, cyberattacks, cybersecurity, Don't miss, Features, Government, Hot stuff, News, opinion, public sector, Threat Intelligence /

How nation-state cyber attacks disrupt public services and undermine citizen trust 2024-07-08 at 07:01 By Mirko Zorz In this Help Net Security interview, Rob Greer, VP and GM of the Enterprise Security Group at Broadcom, discusses the impact of nation-state cyber attacks on public sector services and citizens, as well as the broader implications for […]

How nation-state cyber attacks disrupt public services and undermine citizen trust Read More »

Monocle: Open-source LLM for binary analysis search

Don't miss, GitHub, Hot stuff, LLMs, machine learning, News, open source, software /

Monocle: Open-source LLM for binary analysis search 2024-07-08 at 06:31 By Help Net Security Monocle is open-source tooling backed by a large language model (LLM) for performing natural language searches against compiled target binaries. Monocle can be provided with a binary and search criteria (authentication code, vulnerable code, password strings, etc.), and it will decompile […]

Monocle: Open-source LLM for binary analysis search Read More »

Organizations change recruitment strategies to find cyber talent

cybersecurity, Fortinet, News, report, skill development, survey /

Organizations change recruitment strategies to find cyber talent 2024-07-08 at 06:01 By Help Net Security An estimated 4 million professionals are needed to fill the growing cybersecurity workforce gap, according to Fortinet. At the same time, Fortinet’s 2024 Global Cybersecurity Skills Gap Report found that 70% of organizations indicated that the cybersecurity skills shortage creates […]

Organizations change recruitment strategies to find cyber talent Read More »

Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development

News, Week in review /

Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development 2024-07-07 at 11:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 4 key steps to building an incident response plan In this Help Net Security interview, Mike Toole, […]

Week in review: A need for a DDoS response plan, human oversight in AI-enhanced software development Read More »

Infostealing malware masquerading as generative AI tools

cybercrime, ESET, generative AI, Malware, News, report, survey /

Infostealing malware masquerading as generative AI tools 2024-07-05 at 08:01 By Help Net Security Over the past six months, there has been a notable surge in Android financial threats – malware targeting victims’ mobile banking funds, whether in the form of ‘traditional’ banking malware or, more recently, cryptostealers, according to ESET. Vidar infostealer targets Windows […]

Infostealing malware masquerading as generative AI tools Read More »

99% of IoT exploitation attempts rely on previously known CVEs

Bitdefender, cybersecurity, IoT, Netgear, News, report, survey /

99% of IoT exploitation attempts rely on previously known CVEs 2024-07-05 at 07:31 By Help Net Security The explosion of Internet of Things (IoT) devices has brought about a wide range of security and privacy challenges, according to Bitdefender and NETGEAR. The report is based on global telemetry of 3.8 million homes and 50 million […]

99% of IoT exploitation attempts rely on previously known CVEs Read More »

47% of corporate data stored in the cloud is sensitive

Cloud, cybersecurity, data, News, report, survey, Thales /

47% of corporate data stored in the cloud is sensitive 2024-07-05 at 07:01 By Help Net Security As the use of the cloud continues to be strategically vital to many organizations, cloud resources have become the biggest targets for cyberattacks, with SaaS applications (31%), cloud storage (30%) and cloud management infrastructure (26%) cited as the […]

47% of corporate data stored in the cloud is sensitive Read More »

Organizations weigh the risks and rewards of using AI

AuditBoard, cyber risk, cybersecurity, News, report, survey /

Organizations weigh the risks and rewards of using AI 2024-07-05 at 06:31 By Help Net Security 78% of organizations are tracking AI as an emerging risk while simultaneously adopting the technology themselves, according to AuditBoard. Organizations prioritize AI risk assessment The report, based on a survey of over 400 security professionals in the US involved […]

Organizations weigh the risks and rewards of using AI Read More »

New infosec products of the week: July 5, 2024

LogRhythm, News, NordVPN, Regula, Scythe /

New infosec products of the week: July 5, 2024 2024-07-05 at 06:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from LogRhythm, NordVPN, Regula, and Scythe. LogRhythm’s enhancements boost analyst efficiency This quarter, LogRhythm is highlighting its Machine Data Intelligence (MDI) Fabric for the AI-ready […]

New infosec products of the week: July 5, 2024 Read More »

4 key steps to building an incident response plan

Blumira, Cloud, Compliance, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, opinion, resilience, strategy /

4 key steps to building an incident response plan 2024-07-04 at 07:01 By Mirko Zorz In this Help Net Security interview, Mike Toole, head of security and IT at Blumira, discusses the components of an effective security incident response strategy and how they work together to ensure organizations can address cybersecurity issues. What are the […]

4 key steps to building an incident response plan Read More »

Organizations use outdated approaches to secure APIs

Cloudflare, cyber risk, cybersecurity, News, report, survey /

Organizations use outdated approaches to secure APIs 2024-07-04 at 06:31 By Help Net Security Security teams are struggling to keep pace with the risks posed by organizations’ dependency on modern applications—the technology that underpins all of today’s most used sites, according to Cloudflare. The report underscores that the volume of threats stemming from issues in […]

Organizations use outdated approaches to secure APIs Read More »

Only 13% of organizations are cyber mature

Commvault, cybersecurity, GigaOm, News, report, strategy, survey, threats /

Only 13% of organizations are cyber mature 2024-07-04 at 06:01 By Help Net Security A staggering 83% of organizations have suffered a material security breach recently, with over half occurring in the past year alone, underscoring the critical need for advanced preparedness and agile response strategies, according to Commvault. For security and IT professionals, the […]

Only 13% of organizations are cyber mature Read More »

Maintaining human oversight in AI-enhanced software development

Artificial Intelligence, automation, code, cybersecurity, DevOps, Don't miss, Features, generative AI, Harness, Hot stuff, News, opinion, software development /

Maintaining human oversight in AI-enhanced software development 2024-07-03 at 07:31 By Mirko Zorz In this Help Net Security, Martin Reynolds, Field CTO at Harness, discusses how AI can enhance the security of software development and deployment. However, increased reliance on AI-generated code introduces new risks, requiring human oversight and integrated security practices to ensure safe […]

Maintaining human oversight in AI-enhanced software development Read More »

Scroll to Top