News

Outdated cryptographic protocols put vast amounts of network traffic at risk

cryptographic attack, cybersecurity, data breach, Encryption, News, Quantum Xchange, report, survey /

Outdated cryptographic protocols put vast amounts of network traffic at risk 07/11/2023 at 07:01 By Help Net Security Cryptography is largely taken for granted – rarely evaluated or checked – a practice that could have devastating consequences for businesses as attack surfaces continue to expand, the cost of a data breach rises year-over-year, and the […]

Outdated cryptographic protocols put vast amounts of network traffic at risk Read More »

eBook: Keeping Active Directory out of hackers’ cross-hairs

Don't miss, Enzoic, News, Whitepapers and webinars /

eBook: Keeping Active Directory out of hackers’ cross-hairs 07/11/2023 at 06:46 By Help Net Security Active Directory is a prime target for threat actors, and companies must act now to eliminate it as a threat vector permanently. Read the e-book to review: Active Directory (AD) and what it provides Threats and how to keep hackers

eBook: Keeping Active Directory out of hackers’ cross-hairs Read More »

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History

cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History 06/11/2023 at 15:02 By Thomas Brewster, Forbes Staff Data brokers are collecting and selling reams of sensitive personal information about members of the military, according to Duke University research. That could put national security at risk, the researchers say. This article

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History Read More »

Google Play will mark independently validated VPN apps

Android, Application Security, Don't miss, Google, Google Play, Hot stuff, mobile apps, News, VPN /

Google Play will mark independently validated VPN apps 06/11/2023 at 13:49 By Helga Labus Android VPN apps that have gone through an independent security validation will now be able to claim that distinction on Google Play with a prominent badge in their Data Safety section. “We’ve launched this banner beginning with VPN apps due to

Google Play will mark independently validated VPN apps Read More »

Atlassian Confluence data-wiping vulnerability exploited

Atlassian Confluence, Don't miss, GreyNoise, Hot stuff, News, PoC, Shadowserver /

Atlassian Confluence data-wiping vulnerability exploited 06/11/2023 at 13:19 By Zeljka Zorz Threat actors are trying to exploit CVE-2023-22518, a critical Atlassian Confluence flaw that allows unauthenticated attackers to reset vulnerable instances’ database, Greynoise is observing. The Shadowserver Foundation has also seen 30+ IP addresses testing for the flaw in internet-facing Confluence installations. From security updates

Atlassian Confluence data-wiping vulnerability exploited Read More »

How global password practices are changing

authentication, CISO, credentials, cybersecurity, Dashlane, Don't miss, MFA, News, password manager, passwords, report /

How global password practices are changing 06/11/2023 at 09:33 By Help Net Security Password health and hygiene improved globally over the past year, reducing the risk of account takeover for consumers and businesses, according to Dashlane. Password reuse remains prevalent, however, leaving user accounts particularly vulnerable to password-spraying attacks if they’re not protected by strong

How global password practices are changing Read More »

Exploring the global shift towards AI-specific legislation

Artificial Intelligence, cybersecurity, data, Don't miss, EU, Features, framework, GDPR, Government, Hot stuff, Hunton Andrews Kurth, legislation, News, opinion, Privacy, regulation, UK, USA /

Exploring the global shift towards AI-specific legislation 06/11/2023 at 09:01 By Mirko Zorz In this Help Net Security interview, Sarah Pearce, Partner at Hunton Andrews Kurth, offers insights into the evolving landscape of AI legislation and its global impact. Pearce explores key principles, public participation, the future of AI laws in a world of rapid

Exploring the global shift towards AI-specific legislation Read More »

The roadblocks to preventive cybersecurity success

Cloud, cybercrime, cybersecurity, Data Protection, identity, News, report, Risk Management, survey, Tenable /

The roadblocks to preventive cybersecurity success 06/11/2023 at 08:04 By Help Net Security In the last two years, the average organization’s cybersecurity program was prepared to defend preventively, or block, just 57% of the cyberattacks it encountered, according to Tenable. This means 43% of attacks launched against them are successful and must be remediated after

The roadblocks to preventive cybersecurity success Read More »

The perils of over-reliance on single cloud providers

Artificial Intelligence, Cloud, Compliance, cybersecurity, Gartner, generative AI, News, Privacy, regulation, report, risk, survey /

The perils of over-reliance on single cloud providers 06/11/2023 at 07:39 By Help Net Security The risk associated with dependence on a particular cloud provider for multiple business capabilities is in the top five emerging risks for organizations for the second consecutive quarter, according to a survey by Gartner. Emerging risks In September 2023, Gartner

The perils of over-reliance on single cloud providers Read More »

Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug

News, Week in review /

Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug 05/11/2023 at 12:01 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: AI threat landscape: Model theft and inference attacks emerge as top concerns In this Help Net Security interview, Guy Guzner, CEO

Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bug Read More »

KandyKorn macOS malware lobbed at blockchain engineers

Cryptocurrency, Don't miss, Elastic, Hot stuff, macOS, Malware, News, North Korea /

KandyKorn macOS malware lobbed at blockchain engineers 03/11/2023 at 15:46 By Helga Labus North Korean hackers are using novel MacOS malware named KandyKorn to target blockchain engineers of a cryptocurrency exchange platform. The attack By impersonating blockchain engineering community members on Discord, the attackers used social engineering techniques to make victims download a malicious ZIP

KandyKorn macOS malware lobbed at blockchain engineers Read More »

Microsoft launches new initiative to augment security

Application Security, Artificial Intelligence, cloud security, Don't miss, Hot stuff, identity protection, Microsoft, News, software development, strategy /

Microsoft launches new initiative to augment security 03/11/2023 at 14:48 By Zeljka Zorz Nearly 22 years after Bill Gates announced a concerted Microsoft-wide push to deliver Trustworthy Computing, the company is launching the Secure Future Initiative, to boost the overall security of Microsoft’s products and its customers and users. A new Microsoft initiative focused on

Microsoft launches new initiative to augment security Read More »

New infosec products of the week: November 3, 2023

Action1, Enzoic, Immuta, News, Snappt /

New infosec products of the week: November 3, 2023 03/11/2023 at 09:04 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Action1, Enzoic, Immuta, and Snappt. Immuta Discover identifies and classifies sensitive data Immuta Discover automatically and continuously discovers structured data in cloud data platforms.

New infosec products of the week: November 3, 2023 Read More »

Healthcare’s road to redefining cybersecurity with modern solutions

cybercrime, cybercriminals, data, Encryption, FBI, healthcare, News, Ransomware, report, Sophos, survey /

Healthcare’s road to redefining cybersecurity with modern solutions 03/11/2023 at 08:07 By Help Net Security The rate of data encryption following a ransomware attack in healthcare was the highest in the last three years, according to Sophos. Ransomware attacks continue to grow in sophistication Among those organizations surveyed, cybercriminals successfully encrypted data in nearly 75%

Healthcare’s road to redefining cybersecurity with modern solutions Read More »

Financial organizations embrace automation for enhanced security

API security, automation, cybersecurity, financial industry, News, regulation, report, software, training, Veracode /

Financial organizations embrace automation for enhanced security 03/11/2023 at 07:31 By Help Net Security The security performance of financial applications generally outperforms other industries, with automation, targeted security training, and scanning via Application Programming Interface (API) contributing to a year-over-year reduction in the percentage of applications containing flaws, according to Veracode. Against a backdrop of

Financial organizations embrace automation for enhanced security Read More »

AI is transforming financial crime compliance

Artificial Intelligence, automation, Banks, Compliance, cybersecurity, machine learning, News, report, risk monitoring, strategy, survey, WorkFusion /

AI is transforming financial crime compliance 03/11/2023 at 07:01 By Help Net Security While 86% of compliance, operations, risk and IT professionals at banks and non-banking financial institutions (NBFIs) surveyed said they would increase spending on AI and ML over the next two years, a 93% of respondents said that instead of using automation to

AI is transforming financial crime compliance Read More »

Attackers exploiting Apache ActiveMQ flaw to deliver ransomware (CVE-2023-46604)

Apache ActiveMQ, Don't miss, Hot stuff, News, PoC, Ransomware, Rapid7, security update, vulnerability /

Attackers exploiting Apache ActiveMQ flaw to deliver ransomware (CVE-2023-46604) 02/11/2023 at 17:01 By Zeljka Zorz Ransomware-wielding attackers are trying to break into servers running outdated versions of Apache ActiveMQ by exploiting a recently fixed vulnerability (CVE-2023-46604). “Beginning Friday, October 27, Rapid7 Managed Detection and Response (MDR) identified suspected exploitation of Apache ActiveMQ CVE-2023-46604 in two

Attackers exploiting Apache ActiveMQ flaw to deliver ransomware (CVE-2023-46604) Read More »

F5 BIG-IP vulnerabilities leveraged by attackers: What to do?

Don't miss, enterprise, F5 Networks, Hot stuff, News, patch, PoC, Praetorian, Project Discovery, SQL injection, traffic monitoring, vulnerability /

F5 BIG-IP vulnerabilities leveraged by attackers: What to do? 02/11/2023 at 14:01 By Zeljka Zorz The two BIG-IP vulnerabilities (CVE-2023-46747, CVE-2023-46748) F5 Networks has recently released hotfixes for are being exploited by attackers in the wild, the company has confirmed. “It is important to note that not all exploited systems may show the same indicators,

F5 BIG-IP vulnerabilities leveraged by attackers: What to do? Read More »

MITRE ATT&CK v14 released

Don't miss, enterprise, framework, Hot stuff, MITRE, MITRE ATT&CK, News /

MITRE ATT&CK v14 released 02/11/2023 at 12:16 By Zeljka Zorz MITRE has released MITRE ATT&CK v14, the newest iteration of its popular investigation framework / knowledge base of tactics and techniques employed by cyber attackers. MITRE ATT&CK v14 ATT&CK’s goal is to catalog and categorize behaviors of cyber adversaries in real-world attacks. The framework is

MITRE ATT&CK v14 released Read More »

Scroll to Top