Help Net Security

Red Sift launched Red Sift Radar, the upskilled LLM assistant that identifies and diagnoses misconfigurations and exposures across email, domains, and internet-facing assets, supporting security teams to prevent incidents before they happen. Malicious actors are widely exploiting AI. Crowdstrike recently named generative AI as one of the two top emerging threats in 2024. Simultaneously, security teams are under-equipped with AI solutions to ensure adequate defense. Red Sift Radar addresses this gap by integrating large-scale data … More →

The post Red Sift Radar diagnoses issues through AI-powered insights appeared first on Help Net Security.

Veeam Software announced the addition of new Veeam Recon Scanner technology to Veeam Data Platform. This technology, developed by Coveware by Veeam, draws on years of experience in cyber-extortion incident response and the largest database of cyber incidents in the world. Veeam Recon Scanner is designed to proactively identify, triage, and prevent cyberattacks, revolutionizing threat assessment in the data protection market. “Protecting your organization from a cyber-attack requires a coordinated strategy. It starts at the … More →

The post Veeam Recon Scanner identifies adversary tactics, techniques, and procedures appeared first on Help Net Security.

RSA and Swissbit announced that RSA will start introducing its next-generation hardware authenticators RSA iShield Key 2 series powered by Swissbit alongside RSA ID Plus for Government. Built to meet the highest security standards, the RSA iShield Key 2 and the RSA iShield Key 2 Pro feature FIDO2, PIV, HOTP support and a FIPS 140-3 certified smart chip and can provide the private sector and U.S. federal agencies, systems integrators, and government contractors with a … More →

The post RSA and Swissbit join forces to secure government agencies appeared first on Help Net Security.

Dragos announced the acquisition of Network Perception, makers of NP-View, a network visualization platform for OT networks. The acquisition will bolster the Dragos Platform with industry-leading OT network visibility along with compliance and segmentation analysis and reporting capabilities tailored to safeguard critical OT environments. As cyber threats to industrial networks continue to evolve, attaining complete OT network visibility is essential. By bringing together the capabilities of the Dragos Platform with those of NP-View, organizations gain … More →

The post Dragos acquires Network Perception to boost security in OT environments appeared first on Help Net Security.

ConnectSecure launched its new Microsoft 365 (M365) Assessment module. The solution empowers MSPs with greater visibility into Microsoft 365 configurations, offering real-time monitoring of changes and improving security controls. As the most widely used productivity suite by millions of companies globally, Microsoft 365 provides powerful, cloud-based tools that enhance workplace efficiency across devices. However, due to human errors, configuration missteps, or lax security practices, the platform often becomes a target for cybercriminals—not due to inherent … More →

The post ConnectSecure unveils M365 Assessment Module to help MSPs identify security weaknesses appeared first on Help Net Security.

The JPCERT Coordination Center – the first Computer Security Incident Response Team established in Japan – has compiled a list of entries in Windows event logs that could help enterprise defenders respond to human-operated ransomware attacks and potentially limit the malware’s damage. “The difficult part of the initial response to a human-operated ransomware attack is identifying the attack vector,” the organization pointed out. Detecting specific entries in Windows event logs – Application, Security, System, Setup … More →

The post Use Windows event logs for ransomware investigations, JPCERT/CC advises appeared first on Help Net Security.

OWG unveiled Parallax Private Cloud Desktop to provide businesses with IT solutions that ensure efficiency, security, and scalability. This next-generation cloud platform is engineered to meet the most stringent security protocols, empowering businesses to meet evolving IT challenges head-on. Brandon Marks, Managing Partner at OWG, emphasized the innovative approach taken in developing the Parallax Private Cloud Desktop: “We listened to business leaders who were craving more flexibility and control over their tech;they don’t want to … More →

The post OWG Parallax Private Cloud Desktop simplifies business operations appeared first on Help Net Security.

Apono announced the successful completion of its Series A funding round, raising $15.5 million. The funding round was led by New Era Capital Partners, with participation from Mindset Ventures, Redseed Ventures, Silvertech Ventures, initial seed investors, and more. The newly secured funds will be used to advance Apono’s mission of providing AI-driven, simple, innovative, and secure solutions that organizations need to manage access in complex, distributed cloud environments. Additionally, these newly secured funds will be … More →

The post Apono raises $15.5 million to accelerate product development appeared first on Help Net Security.

Like many large-scale network security projects, microsegmentation can seem complex, time-consuming, and expensive. It involves managing intricate details about inter-device service connectivity. One web server should connect to specific databases but not to others, or load balancers should connect to some web servers while restricting connections to others. Managing all these connections can seem overwhelming. A software approach to network microsegmentation is the best way to increase network resilience against both external security breaches and … More →

The post 3 easy microsegmentation projects appeared first on Help Net Security.

In this Help Net Security interview, Omer Cohen, Chief Security Officer at Descope, discusses the impact of identity federation on organizational security and user experience. He explains how this approach streamlines credential management and enhances security by leveraging trusted identity providers while simplifying the login process. Cohen further explores the common protocols and challenges associated with implementing identity federation, emphasizing the need for effective trust relationships and compatibility among various systems. What are some key … More →

The post Reducing credential complexity with identity federation appeared first on Help Net Security.

Despite advancements in security technology, many individuals and organizations continue to rely on outdated and vulnerable authentication methods, leaving themselves exposed to cyber threats. This ongoing reliance on insecure methods has led to a steady rise in fraud, with weak password practices and password reuse contributing to a thriving market for stolen credentials. In this article, find out more about the most prevalent authentication practices, their associated risks, and the necessity of implementing stronger security … More →

The post Password management habits you should unlearn appeared first on Help Net Security.

Here’s a look at the most interesting products from the past month, featuring releases from: Absolute, anecdotes, ArmorCode, Binarly, Bitdefender, Druva, F5 Networks, Gcore, Guardsquare, Huntress, Ketch, LOKKER, Malwarebytes, NETGEAR, Nudge Security, Prompt Security, Rapid7, Revenera, Skyhigh Security, Strivacity, Tenable, Trellix, Vanta, Veritas Technologies, and Wing Security. Bitdefender Security for Creators protects YouTube content creators and influencers from hackers Bitdefender Security for Creators safeguards content channels and social media accounts from takeovers and supports Windows, … More →

The post Infosec products of the month: September 2024 appeared first on Help Net Security.

Storm-0501, an affiliate of several high-profile ransomware-as-a-service outfits, has been spotted compromising targets’ cloud environments and on-premises systems. “Storm-0501 is the latest threat actor observed to exploit weak credentials and over-privileged accounts to move from organizations’ on-premises environment to cloud environments. They stole credentials and used them to gain control of the network, eventually creating persistent backdoor access to the cloud environment and deploying ransomware to the on-premises,” Microsoft shared last week. Common tactics and … More →

The post Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts appeared first on Help Net Security.

Microsoft has made changes to Recall – the screenshot-taking, AI-powered search feature for Copilot+ PCs running Windows 11 – to reassure users worried about security and privacy. The security of the feature has been assessed by Microsoft’s Offensive Research & Security Engineering team and by a third-party security vendor, Microsoft says. Other security professionals will hopefully probe the feature for weaknesses that could put user data at risk. Welcome changes Microsoft unveiled the Copilot+ Recall … More →

The post Microsoft revised the controversial Copilot+ Recall feature appeared first on Help Net Security.

Application programming interfaces (APIs) are essential to how generative AI (GenAI) functions with agents (e.g., calling upon them for data). But the combination of API and LLM issues coupled with rapid rollouts is likely to see numerous organizations having to combat security failings. While GenAI is susceptible to the usual security issues associated with APIs such as authentication, authorization and data exposure, there are also AI-specific concerns which have been well-documented by the OWASP Project … More →

The post Could APIs be the undoing of AI? appeared first on Help Net Security.

SCCMSecrets is an open-source tool that exploits SCCM policies, offering more than just NAA credential extraction. SCCM policies are a key target for attackers in Active Directory environments, as they can expose sensitive technical information, including account credentials. Attackers may retrieve these credentials by impersonating a registered device with authenticated access or, in some cases, even from an unauthenticated position by exploiting misconfigurations in policy distribution. SCCMSecrets provides a thorough approach to identifying and exploiting … More →

The post SCCMSecrets: Open-source SCCM policies exploitation tool appeared first on Help Net Security.

Open source has become the foundation of modern application development, with up to 98% of applications incorporating open-source components and open-source code accounting for 70% or more of the typical application. In this Help Net Security video, Donald Fischer, CEO at Tidelift, discusses the 2024 State of the Open Source Maintainer report, which provides insights into the work and mindset of open source maintainers. The study showed that paid maintainers are 55% more likely than … More →

The post Open source maintainers: Key to software health and security appeared first on Help Net Security.

In this Help Net Security interview, Joe Baguley, CTO EMEA at Broadcom, shares insights on private AI and its significance in data security. He explains how it helps organizations maintain control over sensitive information while addressing the complexities of compliance and data privacy. Baguley also discusses the sectors leading the way in private AI adoption and the risks that come with it. What are the key technological components that make AI “private”? Which industries or … More →

The post Businesses turn to private AI for enhanced security and data management appeared first on Help Net Security.

Despite the rise in cyber threats, many people do not have a holistic view of security, according to Yubico. The results of the survey uncovered concerning patterns and behaviors when it comes to personal and workplace cybersecurity, including the extensive underutilization of multi-factor authentication (MFA) and a generally reactive approach to addressing cyber threats. While organizations often try their best to implement stringent security protocols at work, employees are falling behind in maintaining their own … More →

The post The most common authentication method is also the least secure appeared first on Help Net Security.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Windows Server 2025 gets hotpatching option, without reboots Organizations that plan to upgrade to Windows Server 2025 once it becomes generally available will be able to implement some security updates by hotpatching running processes. PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987) Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk … More →

The post Week in review: Windows Server 2025 gets hotpatching option, PoC for SolarWinds WHD flaw released appeared first on Help Net Security.