News

Phishing statistics that will make you think twice before clicking

Cofense, cybercrime, Don't miss, Egress, Hot stuff, Ironscales, LastPass, News, Osterman Research, phishing, Proofpoint, report, survey, VIPRE Security, Zscaler /

Phishing statistics that will make you think twice before clicking 2024-05-21 at 07:01 By Help Net Security This article includes excerpts from various reports that offer statistics and insights into the current phishing landscape. AI-driven phishing attacks deceive even the most aware users Zscaler | Zscaler ThreatLabz 2024 Phishing Report | May 2024 In 2023, […]

Phishing statistics that will make you think twice before clicking Read More »

YouTube has become a significant channel for cybercrime

Avast, cybercrime, cybersecurity, deepfakes, News, report, scams, social engineering, survey /

YouTube has become a significant channel for cybercrime 2024-05-21 at 06:31 By Help Net Security Social engineering threats – those which rely on human manipulation – account for most cyberthreats faced by individuals in 2024, according to Avast. According to the latest quarterly Avast Threat Report, which looks at the threat landscape from January-March 2024, […]

YouTube has become a significant channel for cybercrime Read More »

eBook: 10 reasons why demand for cloud security is sky-high

Don't miss, Hot stuff, ISC2, News, Whitepapers and webinars /

eBook: 10 reasons why demand for cloud security is sky-high 2024-05-21 at 05:46 By Help Net Security Current demand for cloud security specialists far exceeds available talent. Especially for companies seeking protection in multicloud environments, professionals with vendor-neutral knowledge and skills to their hiring wish lists. Find out how cloud security is evolving and why […]

eBook: 10 reasons why demand for cloud security is sky-high Read More »

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026)

Don't miss, endpoint management, enterprise, Hot stuff, Ivanti, News, PoC, Redline Cyber Security, vulnerability /

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026) 2024-05-20 at 14:02 By Zeljka Zorz Technical details about and a proof-of-concept (PoC) exploit for CVE-2024-22026, a privilege escalation bug affecting Ivanti EPMM, has been released by the vulnerability’s reporter. About CVE-2024-22026 Ivanti Endpoint Manager Mobile (formerly MobileIron Core) is used by enterprises to […]

PoC exploit for Ivanti EPMM privilege escalation flaw released (CVE 2024-22026) Read More »

SEC requires financial institutions to notify customers of breaches within 30 days

data, financial industry, News, regulation, USA /

SEC requires financial institutions to notify customers of breaches within 30 days 2024-05-20 at 13:01 By Help Net Security The Securities and Exchange Commission (SEC) announced the adoption of amendments to Regulation S-P to modernize and enhance the rules that govern the treatment of consumers’ nonpublic personal information by certain financial institutions. The amendments update […]

SEC requires financial institutions to notify customers of breaches within 30 days Read More »

The challenges of GenAI in fintech

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, financial industry, generative AI, Hot stuff, News, opinion, Portal26 /

The challenges of GenAI in fintech 2024-05-20 at 08:01 By Help Net Security Due to the cybersecurity disclosure rules the Securities and Exchange Commission (SEC) has adopted in 2023, public entities in the US are required to disclose any material cybersecurity incidents. Moving forward, these organizations will need in-depth knowledge of the impact, nature, scope […]

The challenges of GenAI in fintech Read More »

Grafana: Open-source data visualization platform

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, software /

Grafana: Open-source data visualization platform 2024-05-20 at 07:31 By Mirko Zorz Grafana is an open-source solution for querying, visualizing, alerting, and exploring metrics, logs, and traces regardless of where they are stored. Grafana provides tools to transform your time-series database (TSDB) data into meaningful graphs and visualizations. Additionally, its plugin framework lets you integrate various […]

Grafana: Open-source data visualization platform Read More »

Cybercriminals shift tactics to pressure more victims into paying ransoms

At-Bay, cybersecurity, News, Ransomware, report, survey /

Cybercriminals shift tactics to pressure more victims into paying ransoms 2024-05-20 at 07:01 By Help Net Security Ransomware didn’t just grow in the US in 2023, it evolved, with the frequency of ransomware claims jumping 64% year-over-year, according to At-Bay. This was primarily driven by an explosion in “indirect” ransomware incidents which increased by more […]

Cybercriminals shift tactics to pressure more victims into paying ransoms Read More »

Consumers continue to overestimate their ability to spot deepfakes

Artificial Intelligence, authentication, cybercrime, cybersecurity, deepfakes, fraud, generative AI, Government, identity, identity verification, Jumio, News, regulation, report /

Consumers continue to overestimate their ability to spot deepfakes 2024-05-20 at 06:31 By Help Net Security The Jumio 2024 Online Identity Study reveals significant consumer concerns about the risks posed by generative AI and deepfakes, including the potential for increased cybercrime and identity fraud. The study examined the views of more than 8,000 adult consumers, […]

Consumers continue to overestimate their ability to spot deepfakes Read More »

Week in review: New Black Basta’s social engineering campaign, passing the CISSP exam in 6 weeks

News, Week in review /

Week in review: New Black Basta’s social engineering campaign, passing the CISSP exam in 6 weeks 2024-05-19 at 11:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Black Basta target orgs with new social engineering campaign Black Basta, one of the most prolific ransomware-as-a-service […]

Week in review: New Black Basta’s social engineering campaign, passing the CISSP exam in 6 weeks Read More »

US exposes scheme enabling North Korean IT workers to bypass sanctions

DOJ, Don't miss, enterprise, Hot stuff, News, North Korea, tips, USA /

US exposes scheme enabling North Korean IT workers to bypass sanctions 2024-05-17 at 14:46 By Zeljka Zorz The US Justice Department had unsealed charges against a US woman and an Ukranian man who, along with three unidentified foreign nationals, have allegedly helped North Korean IT workers work remotely for US companies under assumed US identities […]

US exposes scheme enabling North Korean IT workers to bypass sanctions Read More »

The importance of access controls in incident response

access control, authentication, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity, Incident Response, News, opinion, Rootly /

The importance of access controls in incident response 2024-05-17 at 12:31 By Help Net Security The worst time to find out your company doesn’t have adequate access controls is when everything is on fire. The worst thing that can happen during an incident is that your development and operations teams are blocked from solving the […]

The importance of access controls in incident response Read More »

The IT skills shortage situation is not expected to get any better

cybersecurity, IDC, News, report, skill development, survey /

The IT skills shortage situation is not expected to get any better 2024-05-17 at 07:31 By Help Net Security A growing IT skills shortage is impacting organizations in all industries and across all regions, according to IDC. In a recent IDC survey of North American IT leaders, nearly two thirds said that a lack of […]

The IT skills shortage situation is not expected to get any better Read More »

Too many ICS assets are exposed to the public internet

cybersecurity, networks, News, report, runZero, survey /

Too many ICS assets are exposed to the public internet 2024-05-17 at 06:31 By Help Net Security The enterprise attack surface is expanding in multiple ways, becoming more numerous and more specific, according to runZero. “Our research reveals alarming gaps and unexpected trends in enterprise infrastructure, including the decay of network segmentation, persistent challenges in […]

Too many ICS assets are exposed to the public internet Read More »

New infosec products of the week: May 17, 2024

Calix, FireMon, ManageEngine, News, OWASP /

New infosec products of the week: May 17, 2024 2024-05-17 at 06:01 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Calix, FireMon, ManageEngine, and OWASP Foundation. Calix strengthens SmartBiz security with automated alerts and anti-spam compliance tools Calix unveiled updates to SmartBiz, a purpose-built […]

New infosec products of the week: May 17, 2024 Read More »

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002)

DevOps, Don't miss, Git, GitHub, Hot stuff, News, open source, security update, vulnerability /

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) 2024-05-16 at 14:16 By Zeljka Zorz New versions of Git are out, with fixes for five vulnerabilities, the most critical (CVE-2024-32002) of which can be used by attackers to remotely execute code during a “clone” operation. About Git Git is a widely-popular distributed version […]

Critical Git vulnerability allows RCE when cloning repositories with submodules (CVE-2024-32002) Read More »

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947)

0-day, Chrome, Don't miss, exploit, Hot stuff, Kaspersky, News, security update /

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947) 2024-05-16 at 12:01 By Zeljka Zorz For the third time in the last seven days, Google has fixed a Chrome zero-day vulnerability (CVE-2024-4947) for which an exploit exists in the wild. About CVE-2024-4947 CVE-2024-4947 is a type confusion vulnerability in V8, Chrome’s JavaScript and WebAssembly […]

Google fixes third exploited Chrome zero-day in a week (CVE-2024-4947) Read More »

Is an open-source AI vulnerability next?

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Kusari, News, open source, opinion, software, supply chain /

Is an open-source AI vulnerability next? 2024-05-16 at 08:31 By Help Net Security AI has captured widespread interest and offers numerous benefits. However, its rapid advancement and widespread adoption raise concerns, especially for those of us in cybersecurity. With so much interest, there are lots of insecure applications finding their way onto our devices and […]

Is an open-source AI vulnerability next? Read More »

OWASP dep-scan: Open-source security and risk audit tool

AppThreat, Don't miss, GitHub, Hot stuff, News, open source, OWASP, risk assessment, software /

OWASP dep-scan: Open-source security and risk audit tool 2024-05-16 at 08:01 By Mirko Zorz OWASP dep-scan is an open-source security and risk assessment tool that leverages information on vulnerabilities, advisories, and licensing restrictions for project dependencies. It supports local repositories and container images as input sources, making it suitable for integration with ASPM/VM platforms and […]

OWASP dep-scan: Open-source security and risk audit tool Read More »

Ebury botnet compromises 400,000+ Linux servers

backdoor, botnet, cybercrime, Don't miss, ESET, Linux, Malware, News /

Ebury botnet compromises 400,000+ Linux servers 2024-05-16 at 07:31 By Help Net Security ESET researchers released its deep-dive investigation into one of the most advanced server-side malware campaigns. It is still growing and has seen hundreds of thousands of compromised servers in its at least 15-year-long operation. The Ebury group and botnet have been involved […]

Ebury botnet compromises 400,000+ Linux servers Read More »

Scroll to Top