Dangerous vulnerability can be exploited to carry out massive DDoS attacks (CVE-2023-44487) 10/10/2023 at 16:21 By Help Net Security Cloudflare, Google, and Amazon AWS revealed that a zero-day vulnerability in the HTTP/2 protocol has been used to mount massive, high-volume DDoS attacks, which they dubbed HTTP/2 Rapid Reset. Decoding HTTP/2 Rapid Reset (CVE-2023-44487) In late […]
GNOME users at risk of RCE attack (CVE-2023-43641) 10/10/2023 at 14:32 By Zeljka Zorz If you’re running GNOME on you Linux system(s), you are probably open to remote code execution attacks via a booby-trapped file, thanks to a memory corruption vulnerability (CVE-2023-43641) in the libcue library. About CVE-2023-43641 Discovered by GitHub security researcher Kevin Backhouse, […]
GNOME users at risk of RCE attack (CVE-2023-43641) Read More »
Be prepared to patch high-severity vulnerability in curl and libcurl 10/10/2023 at 12:20 By Zeljka Zorz Details about two vulnerabilities (CVE-2023-38545, CVE-2023-38546) in curl, a foundational and widely used open-source software for data transfer via URLs, are to be released on Wednesday, October 11. Daniel Stenberg, the original author and lead developer, has said that […]
Be prepared to patch high-severity vulnerability in curl and libcurl Read More »
Why zero trust delivers even more resilience than you think 10/10/2023 at 08:04 By Help Net Security Ten years ago, zero trust was an exciting, innovative perspective shift that security experts were excited to explore; today, it’s more likely to be framed as an inevitable trend than as a mere option on the security menu. […]
Why zero trust delivers even more resilience than you think Read More »
Turning military veterans into cybersecurity experts 10/10/2023 at 07:34 By Mirko Zorz In this Help Net Security interview, James Murphy, the Director of the TechVets Programme at the Forces Employment Charity, discusses the challenges that military veterans face when transitioning from military to civilian life. One significant hurdle is the difficulty they often encounter in […]
Turning military veterans into cybersecurity experts Read More »
Cybersecurity pros predict rise of malicious AI 10/10/2023 at 06:35 By Help Net Security 76% of cybersecurity professionals believe the world is very close to encountering malicious AI that can bypass most known cybersecurity measures, according to Enea. 26% see this happening within the next year, and 50% in the next 5 years. Worries about […]
Cybersecurity pros predict rise of malicious AI Read More »
Cybercriminals can go from click to compromise in less than a day 10/10/2023 at 06:02 By Help Net Security The median dwell time in ransomware engagements dropped to just under 24 hours from 4.5 days in the previous year and 5.5 days in the year before that, according to SecureWorks. In 10% of cases, ransomware […]
Cybercriminals can go from click to compromise in less than a day Read More »
eBook: Cybersecurity career hacks for newcomers 10/10/2023 at 05:46 By Help Net Security Are you excited to pursue a cybersecurity career but unsure where to begin? Whether you’re a student, an incoming professional, or ready to work in a different field, the tried-and-tested career hacks in this eBook will help you get your start in […]
eBook: Cybersecurity career hacks for newcomers Read More »
$2.7 billion lost to social media scams since 2021 09/10/2023 at 13:47 By Help Net Security Scams originating on social media have accounted for $2.7 billion in reported losses since 2021, more than any other contact method, according to the Federal Trade Commission. Social media gives scammers an edge in several ways. They can easily […]
$2.7 billion lost to social media scams since 2021 Read More »
Microsoft 365 email senders urged to implement SPF, DKIM and DMARC 09/10/2023 at 13:32 By Helga Labus In the wake of Google’s announcement of new rules for bulk senders, Microsoft is urging Microsoft 365 email senders to implement SPF, DKIM and DMARC email authentication methods. “These Domain Name Service (DNS) email authentication records verify that […]
Microsoft 365 email senders urged to implement SPF, DKIM and DMARC Read More »
Exploit writers invited to probe Chrome’s V8 engine, Google Cloud’s KVM 09/10/2023 at 13:01 By Zeljka Zorz Google is asking bug hunters and exploit writers to develop 0-day and n-day exploits in Chrome’s V8 JavaScript engine and Google Cloud’s Kernel-based Virtual Machine (KVM). “We want to learn from the security community to understand how they […]
Exploit writers invited to probe Chrome’s V8 engine, Google Cloud’s KVM Read More »
Selective disclosure in the identity wallet: How users share the data that is really needed 09/10/2023 at 07:46 By Help Net Security Name, date of birth, address, email address, passwords, tax records, or payroll – all this sensitive user data is stored by companies in huge databases to identify individuals for digital services. Although companies […]
Incentivizing secure online behavior across generations 09/10/2023 at 07:01 By Help Net Security As the landscape of online security continues to evolve, there is a noticeable shift in people’s perceptions of cybersecurity, with an increasing awareness of its vital role in staying safe online, according to a survey conducted by the National Cybersecurity Alliance (NCA) […]
Incentivizing secure online behavior across generations Read More »
Companies rethinking degree requirements for entry-level cybersecurity jobs 09/10/2023 at 06:31 By Help Net Security While the threat landscape is evolving for most on the front lines, little has changed in recent years, according to ISACA. The research finds that of the cybersecurity professionals who said they were experiencing an increase or decrease in cybersecurity […]
Companies rethinking degree requirements for entry-level cybersecurity jobs Read More »
Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023 08/10/2023 at 11:32 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Photos: Cybertech Europe 2023 The Cybertech Europe conference and exhibition takes place at La Nuvola Convention Center in Rome, and […]
Week in review: Patch Tuesday forecast, 9 free ransomware guides, Cybertech Europe 2023 Read More »
Exclusive: FBI Hunts School ‘Swatter’ Who Sent A Bomb Hoax To Sandy Hook 07/10/2023 at 15:34 By Thomas Brewster, Forbes Staff FBI identifies suspect in Riverside, California, who targeted elementary schools, suicide help lines and Nashville Airport. It comes after a barrage of “swatting” calls has caused chaos across America. This article is an excerpt […]
Exclusive: FBI Hunts School ‘Swatter’ Who Sent A Bomb Hoax To Sandy Hook Read More »
NASA, GSA, and Department of Defense Propose Rule to Standardize Cybersecurity Requirements for Federal Contracts 06/10/2023 at 16:03 By Several U.S. federal agencies have proposed a rule, FAR Case 2021–019, and issued a call for public comment to standardize cybersecurity contractual requirements for unclassified federal information systems and a statute on improving the nation’s cybersecurity. This […]
New infosec products of the week: October 6, 2023 06/10/2023 at 08:03 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Cloaked, ComplyCube, LogicMonitor, ManageEngine, Nutanix, and Veriff. Veriff unveils fraud mitigation solutions Veriff launched its new Fraud Protect & Fraud Intelligence packages. Both packages […]
New infosec products of the week: October 6, 2023 Read More »
Poor cybersecurity habits are common among younger employees 06/10/2023 at 06:31 By Help Net Security One in three employees believe their actions do not impact their organization’s security, according to Ivanti. Unsafe cybersecurity habits among office workers The research also shows that Millennial and Gen Z office workers are more likely to have unsafe cybersecurity […]
Poor cybersecurity habits are common among younger employees Read More »
Enterprises see AI as a worthwhile investment 06/10/2023 at 06:02 By Help Net Security 92% of AI team leaders at leading-edge organizations felt that their AI initiatives are generating value, according to Wallaroo.AI. Having found a successful formula, most of those surveyed plan to dramatically increase their spend on ML and use of ML models […]
Enterprises see AI as a worthwhile investment Read More »