News

The 3 key stages of ransomware attacks and useful indicators of compromise

attacks, cybersecurity, data, DNS, Don't miss, Email, Encryption, Expert analysis, Expert corner, Gurucul, hacker, Hot stuff, network, News, opinion, phishing, Ransomware, servers, SOC /

The 3 key stages of ransomware attacks and useful indicators of compromise 08/11/2023 at 09:02 By Help Net Security For SOC teams to be able to defend their organization against ransomware attacks, they need to have the right security toolset, but also an understanding of the three primary ransomware attack stages. In this article, we […]

The 3 key stages of ransomware attacks and useful indicators of compromise Read More »

Aqua Trivy open-source security scanner now finds Kubernetes security risks

Aqua Security, cybersecurity, Don't miss, GitHub, Kubernetes, News, scanning, software /

Aqua Trivy open-source security scanner now finds Kubernetes security risks 08/11/2023 at 08:31 By Mirko Zorz The Aqua Trivy open-source scanner now supports vulnerability scanning for Kubernetes components and Kubernetes Bill of Materials (KBOM) generation. Now, companies can better understand the components within their Kubernetes environment and how secure they are to reduce risk. “Aqua […]

Aqua Trivy open-source security scanner now finds Kubernetes security risks Read More »

Companies have good reasons to be concerned about generative AI

Artificial Intelligence, Compliance, cybersecurity, data security, generative AI, News, Portal26, report, survey /

Companies have good reasons to be concerned about generative AI 08/11/2023 at 07:32 By Help Net Security Companies need help to get visibility into the operations of their AI programs, potentially reducing productivity while creating significant risks around governance, data security, and more, according to Portal26. Two-thirds of respondents admitted to a Generative AI security […]

Companies have good reasons to be concerned about generative AI Read More »

Uphold Linux systems’ performance and availability in Azure

Center for Internet Security, Don't miss, News /

Uphold Linux systems’ performance and availability in Azure 08/11/2023 at 07:01 By Help Net Security Cloud computing carries many benefits for your business… as long as you can ensure the performance and availability of your cloud environments. Let’s take the following three cloud computing benefits as examples. Rapidly scale cloud services: In the absence of […]

Uphold Linux systems’ performance and availability in Azure Read More »

Oracle Employee Helped Cocaine Dealers Hide $54 Million In Crypto, DOJ Says

cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

Oracle Employee Helped Cocaine Dealers Hide $54 Million In Crypto, DOJ Says 07/11/2023 at 19:35 By Thomas Brewster, Forbes Staff A long-time Oracle engineer was allegedly hiding crypto for imprisoned cocaine dealers who were shifting millions of dollars every month, the DOJ says. One of the dealers protests that the crypto was legitimately acquired. This […]

Oracle Employee Helped Cocaine Dealers Hide $54 Million In Crypto, DOJ Says Read More »

Microsoft introduces new access policies in Entra to boost MFA usage

access management, Don't miss, enterprise, Hot stuff, identity protection, MFA, Microsoft, Microsoft Entra ID, News, policy /

Microsoft introduces new access policies in Entra to boost MFA usage 07/11/2023 at 18:17 By Helga Labus As part of a broader initiative to strengthen security, Microsoft is rolling out Microsoft-managed Conditional Access policies in Entra ID (formerly Azure Active Directory) to increase the use of multifactor authentication (MFA) for enterprise accounts. Microsoft Entra Conditional […]

Microsoft introduces new access policies in Entra to boost MFA usage Read More »

Looney Tunables bug exploited for cryptojacking

Aqua Security, cloud computing, cryptojacking, Don't miss, exploit, Hot stuff, Linux, News, vulnerability /

Looney Tunables bug exploited for cryptojacking 07/11/2023 at 12:46 By Helga Labus Kinsing threat actors have been spotted exploiting the recently disclosed Looney Tunables (CVE-2023-4911) vulnerability to covertly install cryptomining software into cloud-native environments. Kinsing (aka Money Libra) is a threat actor group that has been active since late 2021, targeting cloud-native environments and applications […]

Looney Tunables bug exploited for cryptojacking Read More »

7 free cyber threat maps showing attack intensity and frequency

Arbor Networks, Bitdefender, Check Point, cybersecurity, Don't miss, Fortinet, Hot stuff, Netscout, News, Radware, Spamhaus /

7 free cyber threat maps showing attack intensity and frequency 07/11/2023 at 09:03 By Help Net Security Cyber threat maps are one of the most visually engaging tools in the arsenal of cybersecurity professionals. These real-time visualizations provide a global perspective on digital threats, showcasing the intensity and frequency of attacks as they happen. This […]

7 free cyber threat maps showing attack intensity and frequency Read More »

Kubescape 3.0 elevates open-source Kubernetes security

ARMO, GitHub, Kubernetes, News, open source, software /

Kubescape 3.0 elevates open-source Kubernetes security 07/11/2023 at 08:32 By Help Net Security Targeted at the DevSecOps practitioner or platform engineer, Kubescape, the open-source Kubernetes security platform has reached version 3.0. Vulnerability scan results Kubescape 3.0 features Kubescape 3.0 adds new features that make it easier for organizations to secure their Kubernetes clusters, including: Compliance […]

Kubescape 3.0 elevates open-source Kubernetes security Read More »

Microsegmentation proves its worth in ransomware defense

Akamai, cybercrime, cybersecurity, News, Ransomware, report, strategy, survey, zero trust /

Microsegmentation proves its worth in ransomware defense 07/11/2023 at 07:32 By Help Net Security The number of ransomware attacks (successful and unsuccessful) has doubled over the past two years, from 43 on average in 2021 to 86 in 2023, according to Akamai. Security organizations have responded to the recent rise in ransomware attacks by implementing […]

Microsegmentation proves its worth in ransomware defense Read More »

Outdated cryptographic protocols put vast amounts of network traffic at risk

cryptographic attack, cybersecurity, data breach, Encryption, News, Quantum Xchange, report, survey /

Outdated cryptographic protocols put vast amounts of network traffic at risk 07/11/2023 at 07:01 By Help Net Security Cryptography is largely taken for granted – rarely evaluated or checked – a practice that could have devastating consequences for businesses as attack surfaces continue to expand, the cost of a data breach rises year-over-year, and the […]

Outdated cryptographic protocols put vast amounts of network traffic at risk Read More »

eBook: Keeping Active Directory out of hackers’ cross-hairs

Don't miss, Enzoic, News, Whitepapers and webinars /

eBook: Keeping Active Directory out of hackers’ cross-hairs 07/11/2023 at 06:46 By Help Net Security Active Directory is a prime target for threat actors, and companies must act now to eliminate it as a threat vector permanently. Read the e-book to review: Active Directory (AD) and what it provides Threats and how to keep hackers […]

eBook: Keeping Active Directory out of hackers’ cross-hairs Read More »

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History

cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History 06/11/2023 at 15:02 By Thomas Brewster, Forbes Staff Data brokers are collecting and selling reams of sensitive personal information about members of the military, according to Duke University research. That could put national security at risk, the researchers say. This article […]

For Less Than $1, Anyone Can Buy A Military Vet’s Financial And Health History Read More »

Google Play will mark independently validated VPN apps

Android, Application Security, Don't miss, Google, Google Play, Hot stuff, mobile apps, News, VPN /

Google Play will mark independently validated VPN apps 06/11/2023 at 13:49 By Helga Labus Android VPN apps that have gone through an independent security validation will now be able to claim that distinction on Google Play with a prominent badge in their Data Safety section. “We’ve launched this banner beginning with VPN apps due to […]

Google Play will mark independently validated VPN apps Read More »

Atlassian Confluence data-wiping vulnerability exploited

Atlassian Confluence, Don't miss, GreyNoise, Hot stuff, News, PoC, Shadowserver /

Atlassian Confluence data-wiping vulnerability exploited 06/11/2023 at 13:19 By Zeljka Zorz Threat actors are trying to exploit CVE-2023-22518, a critical Atlassian Confluence flaw that allows unauthenticated attackers to reset vulnerable instances’ database, Greynoise is observing. The Shadowserver Foundation has also seen 30+ IP addresses testing for the flaw in internet-facing Confluence installations. From security updates […]

Atlassian Confluence data-wiping vulnerability exploited Read More »

How global password practices are changing

authentication, CISO, credentials, cybersecurity, Dashlane, Don't miss, MFA, News, password manager, passwords, report /

How global password practices are changing 06/11/2023 at 09:33 By Help Net Security Password health and hygiene improved globally over the past year, reducing the risk of account takeover for consumers and businesses, according to Dashlane. Password reuse remains prevalent, however, leaving user accounts particularly vulnerable to password-spraying attacks if they’re not protected by strong […]

How global password practices are changing Read More »

Exploring the global shift towards AI-specific legislation

Artificial Intelligence, cybersecurity, data, Don't miss, EU, Features, framework, GDPR, Government, Hot stuff, Hunton Andrews Kurth, legislation, News, opinion, Privacy, regulation, UK, USA /

Exploring the global shift towards AI-specific legislation 06/11/2023 at 09:01 By Mirko Zorz In this Help Net Security interview, Sarah Pearce, Partner at Hunton Andrews Kurth, offers insights into the evolving landscape of AI legislation and its global impact. Pearce explores key principles, public participation, the future of AI laws in a world of rapid […]

Exploring the global shift towards AI-specific legislation Read More »

The roadblocks to preventive cybersecurity success

Cloud, cybercrime, cybersecurity, Data Protection, identity, News, report, Risk Management, survey, Tenable /

The roadblocks to preventive cybersecurity success 06/11/2023 at 08:04 By Help Net Security In the last two years, the average organization’s cybersecurity program was prepared to defend preventively, or block, just 57% of the cyberattacks it encountered, according to Tenable. This means 43% of attacks launched against them are successful and must be remediated after […]

The roadblocks to preventive cybersecurity success Read More »

The perils of over-reliance on single cloud providers

Artificial Intelligence, Cloud, Compliance, cybersecurity, Gartner, generative AI, News, Privacy, regulation, report, risk, survey /

The perils of over-reliance on single cloud providers 06/11/2023 at 07:39 By Help Net Security The risk associated with dependence on a particular cloud provider for multiple business capabilities is in the top five emerging risks for organizations for the second consecutive quarter, according to a survey by Gartner. Emerging risks In September 2023, Gartner […]

The perils of over-reliance on single cloud providers Read More »

Scroll to Top