News

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports

cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports 18/07/2023 at 17:17 By Thomas Brewster, Forbes Staff Google claimed that it was so overwhelmed with emergency requests from law enforcement last year that it couldn’t help the FBI review livestreams which had allegedly been used to threaten racist murders in St. […]

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports Read More »

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

0-day, Adobe, Adobe ColdFusion, Don't miss, exploit, Hot stuff, News, Project Discovery, Rapid7, security update, vulnerability /

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) 18/07/2023 at 17:17 By Zeljka Zorz Attackers are exploiting two Adobe ColdFusion vulnerabilities (CVE-2023-29298, CVE-2023-38203) to breach servers and install web shells to enable persistent access and allow remote control of the system, according to Rapid7 researchers. Flaws with incomplete fixes On July 11, 2023,

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) Read More »

VirusTotal leaked data of 5,600 registered users

Data leak, Don't miss, enterprise, Google, Government, Hot stuff, News, social engineering, spear-phishing, user data, VirusTotal /

VirusTotal leaked data of 5,600 registered users 18/07/2023 at 15:47 By Helga Labus VirusTotal has suffered a data leak that exposed the names and email addresses of 5,600 of its registered users. The leaked data reportedly includes information about employees of US and German intelligence agencies (among others). VirusTotal data leak exposed exploitable information Google-owned

VirusTotal leaked data of 5,600 registered users Read More »

12 open-source penetration testing tools you might not know about

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, Red Siege, software /

12 open-source penetration testing tools you might not know about 18/07/2023 at 07:34 By Mirko Zorz Red Siege has developed and made available many open-source tools to help with your penetration testing work. The company plans to continue to support the tools listed below, whether in the form of bug fixes or new features. Give

12 open-source penetration testing tools you might not know about Read More »

Broadband consumers demand security and sustainability

Cisco, cybersecurity, digital transformation, hybrid workforce, News, survey /

Broadband consumers demand security and sustainability 18/07/2023 at 07:01 By Help Net Security Consumer expectations will reshape the needs and economics of the internet, according to Cisco. People in EMEA are rethinking what they rely on the internet for, balancing classic demands for speed and reliability, with the intensifying needs of rising eco-consciousness, secure cloud

Broadband consumers demand security and sustainability Read More »

Healthcare organizations in the crosshairs of cyberattackers

cybercrime, cybercriminals, cybersecurity, healthcare, News, Ponemon Institute, report, Trustwave /

Healthcare organizations in the crosshairs of cyberattackers 18/07/2023 at 06:32 By Help Net Security In an era where cyber threats continue to evolve, healthcare organizations are increasingly targeted by malicious actors employing multiple attack vectors, according to Trustwave. In its new research, Trustwave SpiderLabs has documented the attack flow utilized by threat groups, shedding light

Healthcare organizations in the crosshairs of cyberattackers Read More »

Data compromises on track to set a new record

cybercrime, data, data breach, Identity Theft Resource Center, News, report /

Data compromises on track to set a new record 18/07/2023 at 06:02 By Help Net Security The number of data compromises reported in the U.S. in the H1 of 2023 is higher than the total compromises reported every year between 2005 and 2020, except for 2017, according to Identity Theft Resource Center. For the H1

Data compromises on track to set a new record Read More »

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

0-day, Don't miss, Hot stuff, News, open source, security update, Synacor, vulnerability /

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) 17/07/2023 at 14:47 By Helga Labus A critical cross site scripting (XSS) vulnerability (CVE-2023-34192) in popular open source email collaboration suite Zimbra is being exploited by attackers. About the vulnerability (CVE-2023-34192) CVE-2023-34192 could allow a remote authenticated threat actor to execute arbitrary code through a

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) Read More »

CISOs under pressure: Protecting sensitive information in the age of high employee turnover

access management, Artificial Intelligence, burnout, CISO, cybersecurity, Don't miss, Features, Gartner, Hot stuff, how-to, identity management, machine learning, News, NIST, opinion, remote working, security ROI, strategy, supply chain attacks, threats, tips, zero trust /

CISOs under pressure: Protecting sensitive information in the age of high employee turnover 17/07/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Charles Brooks, Adjunct Professor at Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs, talks about how zero trust principles, identity access management, and managed security services are crucial for

CISOs under pressure: Protecting sensitive information in the age of high employee turnover Read More »

Growing scam activity linked to social media and automation

cybercrime, cybercriminals, Group-IB, News, phishing, report, scams /

Growing scam activity linked to social media and automation 17/07/2023 at 06:02 By Help Net Security The average number of scam resources created per brand across all regions and industries more than doubled year-on-year in 2022, up 162%, according to Group-IB. Additionally, the total number of scam pages detected by Group-IB in 2022 was more

Growing scam activity linked to social media and automation Read More »

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out

News, Week in review /

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out 16/07/2023 at 11:31 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: CISO perspective on why boards don’t fully grasp cyber attack risks In this Help Net Security interview,

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out Read More »

Generative AI outperforms hackers but not their creativity

Artificial Intelligence, Bugcrowd, cybersecurity, generative AI, hacker, hacking, News, report, vulnerability, vulnerability management /

Generative AI outperforms hackers but not their creativity 14/07/2023 at 08:02 By Help Net Security 72% of hackers are confident that AI cannot replace human creativity in security research and vulnerability management, according to Bugcrowd. Generative AI hacking Generative AI was a major theme in the 2023 report, with 55% of respondents saying that it

Generative AI outperforms hackers but not their creativity Read More »

Satellites lack standard security mechanisms found in mobile phones and laptops

attacks, authentication, communication, cybersecurity, News, report, reverse engineering, vulnerability /

Satellites lack standard security mechanisms found in mobile phones and laptops 14/07/2023 at 07:34 By Help Net Security Researchers from Ruhr University Bochum and the CISPA Helmholtz Center for Information Security in Saarbrücken have assessed the security mechanisms of satellites currently orbiting the Earth from an IT perspective. Moritz Schloegel (left) and Johannes Willbold analyzed

Satellites lack standard security mechanisms found in mobile phones and laptops Read More »

New infosec products of the week: July 14, 2023

Fidelis Cybersecurity, Hubble, Netscout, News, Regula, WatchGuard /

New infosec products of the week: July 14, 2023 14/07/2023 at 07:09 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Fidelis Cybersecurity, Hubble, NETSCOUT, Regula, and WatchGuard. WatchGuard expands identity protection capabilities with AuthPoint Total Identity Security AuthPoint Total Identity Security enables MSPs to

New infosec products of the week: July 14, 2023 Read More »

Facebook and Microsoft remain prime targets for spoofing

cybercrime, Email, Malware, News, phishing, report, spoofing, Vade Secure /

Facebook and Microsoft remain prime targets for spoofing 14/07/2023 at 06:36 By Help Net Security While trends in phishing frequently evolve, Facebook and Microsoft’s collective dominance as the most spoofed brands continues, according to Vade. Facebook and Microsoft’s collective dominance as the most spoofed brands continued into H1 2023, with the former accounting for 18%

Facebook and Microsoft remain prime targets for spoofing Read More »

Top priorities for chief audit executives in 2023

auditing, cybersecurity, digital transformation, Gartner, News, survey /

Top priorities for chief audit executives in 2023 14/07/2023 at 06:10 By Help Net Security The top focus areas for chief audit executives (CAEs) in 2023 are advancing data analytics, assuring proliferating digital risks, and talent management, according to Gartner. “In 2023 most CAEs are focusing on organizational and departmental digital transformation initiatives and improving

Top priorities for chief audit executives in 2023 Read More »

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

critical infrastructure, Don't miss, Dragos, energy sector, firmware, Hot stuff, ICS/SCADA, manufacturing sector, News, PLC, Rockwell Automation, security update, vulnerability /

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596) 13/07/2023 at 15:46 By Zeljka Zorz Rockwell Automation has fixed two vulnerabilities (CVE-2023-3595, CVE-2023-3596) in the communication modules of its ControlLogix industrial programmable logic controllers (PLCs), ahead of expected (and likely) in-the-wild exploitation. “An unreleased exploit capability leveraging these vulnerabilities is associated with an

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596) Read More »

CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities

CVSS, Don't miss, FIRST, News /

CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities 13/07/2023 at 14:32 By Help Net Security FIRST has unveiled the latest version of its Common Vulnerability Scoring System (CVSS 4.0). Critical in the interface between supplier and consumer, CVSS provides a way to capture the principal characteristics of a security vulnerability and

CVSS 4.0 released, to help assess real-time threat and impact of vulnerabilities Read More »

20% of malware attacks bypass antivirus protection

attacks, cybercrime, cybersecurity, Malware, News, report, SpyCloud, survey /

20% of malware attacks bypass antivirus protection 13/07/2023 at 07:02 By Help Net Security Security leaders are concerned about attacks that leverage malware-exfiltrated authentication data, with 53% expressing extreme concern and less than 1% admitting they weren’t concerned at all, according to SpyCloud. However, many still lack the necessary tools to investigate the security and

20% of malware attacks bypass antivirus protection Read More »

Scroll to Top