News

LLMs and AI positioned to dominate the AppSec world

Application Security, cybersecurity, Endor Labs, Malware, News, open source, report, vulnerability /

LLMs and AI positioned to dominate the AppSec world 20/07/2023 at 07:33 By Help Net Security As modern software trends toward distributed architectures, microservices, and extensive use of third-party and open source components, dependency management only gets harder, according to Endor Labs. Application development risks A new research report explores emerging trends that software organizations […]

LLMs and AI positioned to dominate the AppSec world Read More »

67% of daily security alerts overwhelm SOC analysts

attacks, cybersecurity, News, report, SOC, Vectra /

67% of daily security alerts overwhelm SOC analysts 20/07/2023 at 06:36 By Help Net Security Today’s security operations (SecOps) teams are tasked with protecting progressively sophisticated, fast-paced cyberattacks, according to Vectra AI. Yet, the complexity of people, processes, and technology at their disposal is making cyber defense increasingly unsustainable. The ever-expanding attack surface combined with […]

67% of daily security alerts overwhelm SOC analysts Read More »

Exploring the macro shifts in enterprise security

attacks, Cloud, cloud security, cybersecurity, data breach, identity management, News, Ransomware, Scale, supply chain compromise, survey /

Exploring the macro shifts in enterprise security 20/07/2023 at 06:04 By Help Net Security The number of successful ransomware attacks and data breach attempts fell by 30% over the last year, the number of reported security incident types at organizations increased, according to the 2023 Cybersecurity Perspectives Survey by Scale. Security incident types In fact, […]

Exploring the macro shifts in enterprise security Read More »

U.S. Cyber Trust Mark labeling program raises the bar for smart devices’ cybersecurity

certification, CISA, Closed Door Security, cybersecurity, Government, hardware, News, NIST, Privacy, regulation, USA /

U.S. Cyber Trust Mark labeling program raises the bar for smart devices’ cybersecurity 19/07/2023 at 13:33 By Help Net Security The Biden-Harris Administration has announced a cybersecurity certification and labeling program to help Americans more easily choose smart devices that are safer and less vulnerable to cyberattacks. The new “U.S. Cyber Trust Mark” program proposed […]

U.S. Cyber Trust Mark labeling program raises the bar for smart devices’ cybersecurity Read More »

Cybersecurity measures SMBs should implement

cyberattack, Don't miss, Hot stuff, News, security awareness, security controls, SMBs /

Cybersecurity measures SMBs should implement 19/07/2023 at 13:33 By Helga Labus Small and medium-sized businesses (SMBs) are targeted by cyberattackers as much as large companies, the 2023 Verizon Data Breach Investigations Report (DBIR) has revealed; here are some cybersecurity controls they should prioritize. Company size does not matter to cyber attackers SMBs often underestimate their […]

Cybersecurity measures SMBs should implement Read More »

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519)

0-day, Citrix, Don't miss, Hot stuff, News, security update, vulnerability /

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519) 19/07/2023 at 12:34 By Helga Labus Citrix has patched three vulnerabilities (CVE-2023-3519, CVE-2023-3466, CVE-2023-3467) in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway), one of which is a zero-day being exploited by attackers. A zero-day patched (CVE-2023-3519) CVE-2023-3519 is a remote […]

Citrix NetScaler zero-day exploited in the wild, patch is available (CVE-2023-3519) Read More »

Using AI/ML to optimize your tech stack and enhance business efficiency

Artificial Intelligence, CIO, digital transformation, Don't miss, Features, Hot stuff, how-to, Lenovo, machine learning, News, opinion, regulation, strategy, tips /

Using AI/ML to optimize your tech stack and enhance business efficiency 19/07/2023 at 07:32 By Mirko Zorz In this Help Net Security interview, Arthur Hu, SVP, Global CIO and Services & Solutions Group CTO at Lenovo, discusses how AI/ML is optimizing tech stacks, the hurdles anticipated in its integration, the role of AI in enterprise […]

Using AI/ML to optimize your tech stack and enhance business efficiency Read More »

Supply chain executives unaware of growing customer trust issues

cybersecurity, Deloitte, News, report, supply chain /

Supply chain executives unaware of growing customer trust issues 19/07/2023 at 06:03 By Help Net Security Supply chain executives significantly overestimate stakeholder trust in their supply chain capabilities and intentions, according to Deloitte. Of more than 1,000 executives from large global organizations surveyed, 89% on average who self-identified as leading suppliers said customers trust their […]

Supply chain executives unaware of growing customer trust issues Read More »

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline

News, Uptycs, Whitepapers and webinars /

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline 19/07/2023 at 05:47 By Help Net Security Improve your cloud security with these 9 proven strategies. Uptycs, alongside renowned expert Lee Atchison, share their list of comprehensive tactics to mitigate risks facing modern development teams. To address these emerging risks, Uptycs has created an eBook, […]

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline Read More »

Kyndryl and Veritas launch two services for data protection and recovery

Kyndryl, News, Veritas Technologies /

Kyndryl and Veritas launch two services for data protection and recovery 18/07/2023 at 17:38 By Industry News Kyndryl and Veritas Technologies unveiled two new services — Data Protection Risk Assessment with Veritas and Incident Recovery with Veritas. As a key milestone in Kyndryl and Veritas’ strategic alliance, these services help enterprises protect and recover their […]

Kyndryl and Veritas launch two services for data protection and recovery Read More »

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports

cybersecurity, Editors' Pick, Innovation, News, premium, Technology /

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports 18/07/2023 at 17:17 By Thomas Brewster, Forbes Staff Google claimed that it was so overwhelmed with emergency requests from law enforcement last year that it couldn’t help the FBI review livestreams which had allegedly been used to threaten racist murders in St. […]

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports Read More »

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

0-day, Adobe, Adobe ColdFusion, Don't miss, exploit, Hot stuff, News, Project Discovery, Rapid7, security update, vulnerability /

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) 18/07/2023 at 17:17 By Zeljka Zorz Attackers are exploiting two Adobe ColdFusion vulnerabilities (CVE-2023-29298, CVE-2023-38203) to breach servers and install web shells to enable persistent access and allow remote control of the system, according to Rapid7 researchers. Flaws with incomplete fixes On July 11, 2023, […]

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) Read More »

VirusTotal leaked data of 5,600 registered users

Data leak, Don't miss, enterprise, Google, Government, Hot stuff, News, social engineering, spear-phishing, user data, VirusTotal /

VirusTotal leaked data of 5,600 registered users 18/07/2023 at 15:47 By Helga Labus VirusTotal has suffered a data leak that exposed the names and email addresses of 5,600 of its registered users. The leaked data reportedly includes information about employees of US and German intelligence agencies (among others). VirusTotal data leak exposed exploitable information Google-owned […]

VirusTotal leaked data of 5,600 registered users Read More »

12 open-source penetration testing tools you might not know about

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, Red Siege, software /

12 open-source penetration testing tools you might not know about 18/07/2023 at 07:34 By Mirko Zorz Red Siege has developed and made available many open-source tools to help with your penetration testing work. The company plans to continue to support the tools listed below, whether in the form of bug fixes or new features. Give […]

12 open-source penetration testing tools you might not know about Read More »

Broadband consumers demand security and sustainability

Cisco, cybersecurity, digital transformation, hybrid workforce, News, survey /

Broadband consumers demand security and sustainability 18/07/2023 at 07:01 By Help Net Security Consumer expectations will reshape the needs and economics of the internet, according to Cisco. People in EMEA are rethinking what they rely on the internet for, balancing classic demands for speed and reliability, with the intensifying needs of rising eco-consciousness, secure cloud […]

Broadband consumers demand security and sustainability Read More »

Healthcare organizations in the crosshairs of cyberattackers

cybercrime, cybercriminals, cybersecurity, healthcare, News, Ponemon Institute, report, Trustwave /

Healthcare organizations in the crosshairs of cyberattackers 18/07/2023 at 06:32 By Help Net Security In an era where cyber threats continue to evolve, healthcare organizations are increasingly targeted by malicious actors employing multiple attack vectors, according to Trustwave. In its new research, Trustwave SpiderLabs has documented the attack flow utilized by threat groups, shedding light […]

Healthcare organizations in the crosshairs of cyberattackers Read More »

Data compromises on track to set a new record

cybercrime, data, data breach, Identity Theft Resource Center, News, report /

Data compromises on track to set a new record 18/07/2023 at 06:02 By Help Net Security The number of data compromises reported in the U.S. in the H1 of 2023 is higher than the total compromises reported every year between 2005 and 2020, except for 2017, according to Identity Theft Resource Center. For the H1 […]

Data compromises on track to set a new record Read More »

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

0-day, Don't miss, Hot stuff, News, open source, security update, Synacor, vulnerability /

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) 17/07/2023 at 14:47 By Helga Labus A critical cross site scripting (XSS) vulnerability (CVE-2023-34192) in popular open source email collaboration suite Zimbra is being exploited by attackers. About the vulnerability (CVE-2023-34192) CVE-2023-34192 could allow a remote authenticated threat actor to execute arbitrary code through a […]

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) Read More »

CISOs under pressure: Protecting sensitive information in the age of high employee turnover

access management, Artificial Intelligence, burnout, CISO, cybersecurity, Don't miss, Features, Gartner, Hot stuff, how-to, identity management, machine learning, News, NIST, opinion, remote working, security ROI, strategy, supply chain attacks, threats, tips, zero trust /

CISOs under pressure: Protecting sensitive information in the age of high employee turnover 17/07/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Charles Brooks, Adjunct Professor at Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs, talks about how zero trust principles, identity access management, and managed security services are crucial for […]

CISOs under pressure: Protecting sensitive information in the age of high employee turnover Read More »

Growing scam activity linked to social media and automation

cybercrime, cybercriminals, Group-IB, News, phishing, report, scams /

Growing scam activity linked to social media and automation 17/07/2023 at 06:02 By Help Net Security The average number of scam resources created per brand across all regions and industries more than doubled year-on-year in 2022, up 162%, according to Group-IB. Additionally, the total number of scam pages detected by Group-IB in 2022 was more […]

Growing scam activity linked to social media and automation Read More »

Scroll to Top