News

Organizations rethink cybersecurity investments to meet NIS Directive requirements

cybersecurity, ENISA, EU, investment, News, report, skill development, survey, vulnerability management /

Organizations rethink cybersecurity investments to meet NIS Directive requirements 22/11/2023 at 07:07 By Help Net Security Despite a 25% increase of the cost of major cyber incidents in 2022 compared to 2021, the new report on cybersecurity investment from ENISA reveals a slight increase of 0,4% of IT budget dedicated to cybersecurity by EU operators […]

Organizations rethink cybersecurity investments to meet NIS Directive requirements Read More »

FreeBSD 14.0 released, OpenSSH and OpenSSL updated

Absolute Software, FreeBSD, FreeBSD Foundation, News, open source /

FreeBSD 14.0 released, OpenSSH and OpenSSL updated 21/11/2023 at 17:17 By Help Net Security FreeBSD 14.0 is now available for the amd64, aarch64, i386, powerpc, powerpc64, powerpc64le, powerpcspe, armv7, and riscv64 architectures. FreeBSD provides sophisticated features in networking, performance, security, and compatibility. It serves as an excellent choice for an Internet or Intranet server. It

FreeBSD 14.0 released, OpenSSH and OpenSSL updated Read More »

Apache ActiveMQ bug exploited to deliver Kinsing malware

Apache ActiveMQ, cryptojacking, Don't miss, exploit, Hot stuff, Linux, Malware, News, Trend Micro, vulnerability /

Apache ActiveMQ bug exploited to deliver Kinsing malware 21/11/2023 at 15:02 By Helga Labus Attackers are exploiting a recently fixed vulnerability (CVE-2023-46604) in Apache ActiveMQ to install Kinsing malware and cryptocurrency miners on targeted Linux systems. CVE-2023-46604 exploitation Apache ActiveMQ is a popular Java-based open source message broker that allows communication between applications and services

Apache ActiveMQ bug exploited to deliver Kinsing malware Read More »

The shifting sands of the war against cyber extortion

Analyst1, CISA, Don't miss, extortion, FBI, Government, Hot stuff, law enforcement, News, Ransomware /

The shifting sands of the war against cyber extortion 21/11/2023 at 14:33 By Zeljka Zorz Ransomware and cyber extortion attacks aimed at organizations are not letting up. Occasionally, they even come in pairs. The often large and sometimes massive ransomware recovery costs companies incur when they decide not to meet the demands deter many other

The shifting sands of the war against cyber extortion Read More »

8 free AI and GenAI courses from AWS

Artificial Intelligence, AWS, generative AI, Industry news, News, skill development /

8 free AI and GenAI courses from AWS 21/11/2023 at 14:02 By Industry News Amazon’s AI Ready initiative aims to provide free AI skills training and education to 2 million people globally by 2025. “Artificial intelligence is the most transformative technology of our generation. If we are going to unlock the full potential of AI

8 free AI and GenAI courses from AWS Read More »

PolarDNS: Open-source DNS server tailored for security evaluations

cybersecurity, DNS, Don't miss, GitHub, News, open source, Oryxlabs, software /

PolarDNS: Open-source DNS server tailored for security evaluations 21/11/2023 at 08:36 By Mirko Zorz PolarDNS is a specialized authoritative DNS server that allows the operator to produce custom DNS responses suitable for DNS protocol testing purposes. What can you do with PolarDNS? PolarDNS can be used for testing of: DNS resolvers (server-side) DNS clients DNS

PolarDNS: Open-source DNS server tailored for security evaluations Read More »

Organizations’ serious commitment to software risk management pays off

Application Security, cybercrime, cybersecurity, News, open source, penetration testing, report, software, survey, Synopsys, Vulnerabilities /

Organizations’ serious commitment to software risk management pays off 21/11/2023 at 07:32 By Industry News There has been a significant decrease in vulnerabilities found in target applications – from 97% in 2020 to 83% in 2022 – an encouraging sign that code reviews, automated testing and continuous integration are helping to reduce common programming errors,

Organizations’ serious commitment to software risk management pays off Read More »

The hidden obstacles to integrating AI into your business

Artificial Intelligence, Cisco, Compliance, cybersecurity, data security, generative AI, News, policy, Privacy, regulation, report, skill development, strategy /

The hidden obstacles to integrating AI into your business 21/11/2023 at 07:02 By Help Net Security A mere 14% of organizations globally are fully prepared to deploy and leverage AI-powered technologies, according to Cisco. The report highlights companies’ preparedness to utilize and deploy AI, showcasing critical gaps across key business pillars and infrastructures that pose

The hidden obstacles to integrating AI into your business Read More »

A Hacker Faked His Own Death–Then Claimed To Have Sold Marriott Customer Data To Russians, FBI Says

Breaking, breaking-news, cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

A Hacker Faked His Own Death–Then Claimed To Have Sold Marriott Customer Data To Russians, FBI Says 20/11/2023 at 19:32 By Thomas Brewster, Forbes Staff A hacker told the FBI earlier this year that he sold access to the personal data of Marriott hotel customers on a Russian forum, according to a search warrant obtained…

A Hacker Faked His Own Death–Then Claimed To Have Sold Marriott Customer Data To Russians, FBI Says Read More »

Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)

CISA, Don't miss, enterprise, exploit, Hot stuff, News, PoC, Sophos, vulnerability /

Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671) 20/11/2023 at 14:47 By Helga Labus CISA has added three vulnerabilities to its Known Exploited Vulnerabilities catalog, among them a critical vulnerability (CVE-2023-1671) in Sophos Web Appliance that has been patched by the company in April 2023. About CVE-2023-1671 CVE-2023-1671 is a pre-auth command injection vulnerability

Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671) Read More »

9 Black Friday cybersecurity deals you don’t want to miss

Aurea Software, cybersecurity, Don't miss, guide, News, skill development, training /

9 Black Friday cybersecurity deals you don’t want to miss 20/11/2023 at 09:31 By Help Net Security PortDroid PortDroid is a trusted app for all network analysis tasks. Designed with network administrators, penetration testers, and technology enthusiasts in mind, this app brings a collection of essential networking tools right at your fingertips. Deal: 50% off

9 Black Friday cybersecurity deals you don’t want to miss Read More »

How effective compensation makes a difference with cyber talent retention

Artico Search, CISO, cybersecurity, cybersecurity talent, IANS, News, report, survey /

How effective compensation makes a difference with cyber talent retention 20/11/2023 at 09:01 By Help Net Security Aligning cybersecurity organization models with business objectives enables talent retention and security program success, according to IANS and Artico Search. CISOs’ role in organizational and staffing decisions Fortune firms with annual revenues exceeding $6 billion generally operate large

How effective compensation makes a difference with cyber talent retention Read More »

Smaller businesses embrace GenAI, overlook security measures

Artificial Intelligence, awareness, cybersecurity, data loss prevention, generative AI, monitoring, News, report, risk assessment, zero trust, Zscaler /

Smaller businesses embrace GenAI, overlook security measures 20/11/2023 at 08:02 By Help Net Security Organizations are feeling the pressure to rush into generative AI (GenAI) tool usage, despite significant security concerns, according to Zscaler. More than 900 global IT decision makers, although 89% of organizations consider GenAI tools like ChatGPT to be a potential security

Smaller businesses embrace GenAI, overlook security measures Read More »

Only 9% of IT budgets are dedicated to security

automation, Compliance, cyber risk, cybersecurity, data management, generative AI, News, regulation, report, survey, Vanta /

Only 9% of IT budgets are dedicated to security 20/11/2023 at 07:31 By Help Net Security Despite their best efforts, 67% of businesses say they need to improve security and compliance measures with 24% rating their organization’s security and compliance strategy as reactive, according to Vanta. The expansion of attack surfaces in a post-pandemic hybrid

Only 9% of IT budgets are dedicated to security Read More »

Week in review: Juniper devices compromised, great corporate security blogs, MITRE D3FEND

News, Week in review /

Week in review: Juniper devices compromised, great corporate security blogs, MITRE D3FEND 19/11/2023 at 12:31 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: The real cost of healthcare cybersecurity breaches In this Help Net Security interview, Taylor Lehmann, Director, Office of the CISO, Google

Week in review: Juniper devices compromised, great corporate security blogs, MITRE D3FEND Read More »

Why cyber war readiness is critical for democracies

conferences, critical infrastructure, cyber war, cybersecurity, Cyberwarfare, Don't miss, Features, Forescout, ICS/SCADA, IRISSCON, News, opinion, Russian Federation, Ukraine /

Why cyber war readiness is critical for democracies 17/11/2023 at 14:02 By Zeljka Zorz Once the war in Ukraine ends, Russia’s offensive cyber capabilities will be directed towards other targets, Rik Ferguson, VP Security Intelligence for Forescout, predicted at IRISSCON on Thursday. Rik Ferguson on stage at IRISSCON 2023 The skills employed, the hacktivists and

Why cyber war readiness is critical for democracies Read More »

Wireshark 4.2.0 released, open-source packet analysis gets even better

News, open source, packet analysis, software, Wireshark /

Wireshark 4.2.0 released, open-source packet analysis gets even better 17/11/2023 at 11:49 By Help Net Security Wireshark, the popular network protocol analyzer, has reached version 4.2.0. Wireshark 4.2.0: Notable changes Wireshark supports dark mode on Windows. Packet list sorting has been improved. Wireshark and TShark are now better about generating valid UTF-8 output. A new

Wireshark 4.2.0 released, open-source packet analysis gets even better Read More »

Internal audit leaders are wary of key tech investments

AuditBoard, automation, cyber risk, cybersecurity, data security, digital transformation, ESG, generative AI, News, report, survey /

Internal audit leaders are wary of key tech investments 17/11/2023 at 11:49 By Help Net Security As the digital transformation of business accelerates, risk and internal audit leaders shift their focus to managing technology-driven risk, according to AuditBoard. The report reveals a growing gap between risk and assurance teams’ capacity to manage risks effectively and

Internal audit leaders are wary of key tech investments Read More »

New infosec products of the week: November 17, 2023

Devo Technology, Illumio, Kasada, Lacework, News, OneSpan, ThreatModeler /

New infosec products of the week: November 17, 2023 17/11/2023 at 09:32 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Devo Technology, Illumio, Kasada, Lacework, OneSpan, and ThreatModeler. OneSpan DIGIPASS FX1 BIO protects against social engineering and account takeover attacks OneSpan introduced its latest

New infosec products of the week: November 17, 2023 Read More »

Traditional cloud security isn’t up to the task

Cloud, cloud security, cybersecurity, data, data breach, Illumio, News, report, strategy, survey, zero trust /

Traditional cloud security isn’t up to the task 17/11/2023 at 09:02 By Help Net Security In the last year, 47% of all data breaches originated in the cloud, and more than 6 in 10 respondents believe cloud security is lacking and poses a severe risk to their business operations, according to Illumio. The average organization

Traditional cloud security isn’t up to the task Read More »

Scroll to Top