News

Microsoft is working on a more secure print system for Windows

Don't miss, drivers, Hot stuff, Microsoft, News, software protection, Windows /

Microsoft is working on a more secure print system for Windows 18/12/2023 at 17:01 By Helga Labus After announcing a gradual elimination of third-party printer drivers on Windows earlier this year, Microsoft has now unveiled its plan for enhancing security by introducting Windows Protected Print Mode (WPP). The problem with the current Windows print system […]

Microsoft is working on a more secure print system for Windows Read More »

Qakbot returns in fresh assault on hospitality sector

botnet, Don't miss, hospitality industry, Hot stuff, Malware, Microsoft, News, phishing /

Qakbot returns in fresh assault on hospitality sector 18/12/2023 at 15:47 By Helga Labus The Qakbot botnet has been disrupted this summer, but cybercriminals are not ready to give up on the malware: Microsoft’s threat analysts have spotted a new phishing campaign attempting to deliver it to targets in the hospitality industry. Qakbot and its

Qakbot returns in fresh assault on hospitality sector Read More »

MongoDB corporate systems breached, customer data exposed

cyberattack, data breach, Don't miss, hacking, Hot stuff, MongoDB, News /

MongoDB corporate systems breached, customer data exposed 18/12/2023 at 13:31 By Helga Labus Database management company MongoDB has suffered a breach: attackers have gained access to some of its corporate systems and customer data and metadata. The MongoDB breach “We detected suspicious activity on Wednesday (Dec. 13th, 2023) evening US Eastern Standard Time, immediately activated

MongoDB corporate systems breached, customer data exposed Read More »

Correct bad network behavior to bolster application experience

cybersecurity, Don't miss, Expert analysis, Expert corner, firewall, Hot stuff, monitoring, network, News, opinion, Progress, software /

Correct bad network behavior to bolster application experience 18/12/2023 at 08:31 By Help Net Security Legacy hardware-based applications existed happily in isolation, untethered from a network. The thing that really mattered was the speed of the hard drive and having enough memory. Today, even the software running from personal hard drives relies on other applications

Correct bad network behavior to bolster application experience Read More »

Creating a formula for effective vulnerability prioritization

Compliance, CVE, CVSS, cybersecurity, Don't miss, Features, framework, Hot stuff, Morphisec, News, opinion, vulnerability management /

Creating a formula for effective vulnerability prioritization 18/12/2023 at 08:01 By Mirko Zorz In this Help Net Security interview, Michael Gorelik, CTO and Head of Malware Research at Morphisec, provides insights into the business impact of vulnerabilities. Gorelik discusses challenges posed by regulatory frameworks, incomplete asset inventories, and manual methods, while also exploring the role

Creating a formula for effective vulnerability prioritization Read More »

Information-blocking rule in 21st Century Cures Act redefines data exchange in healthcare

cybersecurity, data, data management, healthcare, News, standards, survey, Verato /

Information-blocking rule in 21st Century Cures Act redefines data exchange in healthcare 18/12/2023 at 07:31 By Help Net Security A Verato survey offers perspectives on the data management strategies of healthcare executives, highlighting the crucial role of Healthcare Master Data Management (hMDM) in addressing key gaps, facilitating seamless data exchange, and aligning with the mandates

Information-blocking rule in 21st Century Cures Act redefines data exchange in healthcare Read More »

Week in review: Apache Struts vulnerability exploit attempt, EOL Sophos firewalls get hotfix

News /

Week in review: Apache Struts vulnerability exploit attempt, EOL Sophos firewalls get hotfix 17/12/2023 at 12:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: SCS 9001 2.0 reveals enhanced controls for global supply chains In this Help Net Security interview, Mike Regan, VP of

Week in review: Apache Struts vulnerability exploit attempt, EOL Sophos firewalls get hotfix Read More »

OilRig targets Israel organizations with new lightweight downloaders

cyber espionage, cybercrime, cybersecurity, ESET, Israel, News /

OilRig targets Israel organizations with new lightweight downloaders 15/12/2023 at 14:55 By Help Net Security ESET researchers analyzed a growing series of new OilRig downloaders that the group used in several campaigns throughout 2022 to maintain access to target organizations of special interest, all located in Israel. They include an organization in the healthcare sector,

OilRig targets Israel organizations with new lightweight downloaders Read More »

New infosec products of the week: December 15, 2023

Censys, Confirm, Drata, News, SAFE Security, SpecterOps /

New infosec products of the week: December 15, 2023 15/12/2023 at 08:33 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Censys, Confirm, Drata, Safe Security, and SpecterOps. Nemesis: Open-source offensive data enrichment and analytic pipeline Nemesis is a centralized data processing platform that ingests,

New infosec products of the week: December 15, 2023 Read More »

Fortifying cyber defenses: A proactive approach to ransomware resilience

attacks, Cigent, cybersecurity, Don't miss, Expert analysis, Expert corner, Government, Hot stuff, investment, News, opinion, Ransomware, resilience, strategy, USA /

Fortifying cyber defenses: A proactive approach to ransomware resilience 15/12/2023 at 08:02 By Help Net Security Ransomware has become a pervasive threat, compromising the security and functionality of vital systems across the United States. While governmental pledges and public declarations of intent to fight cybercrime are foundational, they often lack the immediate and tangible impact

Fortifying cyber defenses: A proactive approach to ransomware resilience Read More »

Multi-cloud computing offers benefits but makes IT far more complex

Cloud, cybersecurity, ISG, News, report, survey /

Multi-cloud computing offers benefits but makes IT far more complex 15/12/2023 at 07:38 By Help Net Security Demand for public cloud-related solutions is rising as organizations seek tools to manage and optimize complex, multi-cloud environments, according to ISG. The report finds that many enterprises worldwide migrated some or all on-premises applications to multiple public clouds

Multi-cloud computing offers benefits but makes IT far more complex Read More »

CIOs shape long-term success with GenAI expertise

Artificial Intelligence, automation, CIO, cybersecurity, data analytics, digital transformation, generative AI, IDC, investment, News, report /

CIOs shape long-term success with GenAI expertise 15/12/2023 at 07:11 By Help Net Security Today’s CIOs have evolved from managing IT infrastructure and ensuring systems’ efficiency to becoming key business strategists, according to IDC. They stand at the intersection of technology and business, leveraging innovations to shape organizational directions, create value, and boost revenue for

CIOs shape long-term success with GenAI expertise Read More »

Russian hackers target unpatched JetBrains TeamCity servers

APT, CISA, cyber espionage, Don't miss, enterprise, exploit, Fortinet, Hot stuff, JetBrains, National Cyber Security Centre, News, Shadowserver, vulnerability /

Russian hackers target unpatched JetBrains TeamCity servers 14/12/2023 at 16:04 By Helga Labus Russian state-sponsored hackers have been exploiting CVE-2023-42793 to target unpatched, internet-facing JetBrains TeamCity servers since September 2023, US, UK and Polish cybersecurity and law enforcement authorities have warned. The targets APT 29 (aka CozyBear, aka Midnight Blizzard), believed to be associated with

Russian hackers target unpatched JetBrains TeamCity servers Read More »

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164)

Akamai, Apache Struts, Don't miss, exploit, Hot stuff, News, PoC, Shadowserver, vulnerability /

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164) 14/12/2023 at 13:32 By Zeljka Zorz Attackers are trying to leverage public proof-of-exploit (PoC) exploit code for CVE-2023-50164, the recently patched path traversal vulnerability in Apache Struts 2. “Attackers aim to deploy webshells, with some cases targeting the parameter ‘fileFileName’ – a deviation from the original

Attackers are trying to exploit Apache Struts vulnerability (CVE-2023-50164) Read More »

Cybercrime operation that sold millions of fraudulent Microsoft accounts disrupted

Arkose Labs, cybercrime, cybercriminals, cybersecurity, Don't miss, law enforcement, Microsoft, News /

Cybercrime operation that sold millions of fraudulent Microsoft accounts disrupted 14/12/2023 at 12:19 By Help Net Security Microsoft disrupted an alleged threat actor group that built viable cybercrime-as-a-service (CaaS) businesses. Dubbed Storm-1152 by Microsoft, the group bilked enterprises and consumers globally out of millions of dollars. Images of Storm-1152’s illicit websites. Source: Microsoft Cybercrime-as-a-service is

Cybercrime operation that sold millions of fraudulent Microsoft accounts disrupted Read More »

GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models

Artificial Intelligence, News, Opaque, open source, PreVeil /

GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models 14/12/2023 at 10:32 By Help Net Security GuardRail OSS is an open-source project delivering practical guardrails to ensure responsible AI development and deployment. GuardRail: Tailored to an organization’s AI needs GuardRail OSS offers an API-driven framework for advanced data analysis, bias mitigation,

GuardRail: Open-source tool for data analysis, AI content generation using OpenAI GPT models Read More »

Digital ops and ops management security predictions for 2024

Artificial Intelligence, attacks, automation, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity verification, News, opinion, PagerDuty, phishing, social media /

Digital ops and ops management security predictions for 2024 14/12/2023 at 08:32 By Help Net Security CISOs don’t need a crystal ball – they already know that 2024 will be another tough year, especially with AI at everyone’s mind. Instead of playing catch-up regarding the security of emerging tech like generative AI, organizations will prioritize

Digital ops and ops management security predictions for 2024 Read More »

Microsoft ICSpector: A leap forward in industrial PLC metadata analysis

GitHub, Microsoft, News, open source, software /

Microsoft ICSpector: A leap forward in industrial PLC metadata analysis 14/12/2023 at 07:33 By Help Net Security Microsoft ICSpector is an open-source forensics framework that enables the analysis of industrial PLC metadata and project files. Architecture The framework provides investigators with a convenient way to scan for PLCs and identify any suspicious artifacts within ICS

Microsoft ICSpector: A leap forward in industrial PLC metadata analysis Read More »

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain

BlueVoyant, data breach, News, report, supply chain, supply chain compromise, survey /

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain 14/12/2023 at 07:02 By Help Net Security The number of cyber breaches targeting organizations’ supply chains continues to rise, with an average 4.16 breaches reported to be negatively impacting operations this year — a 26% increase from the mean number

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain Read More »

Scroll to Top