Help Net Security

Onapsis announced new capabilities for its flagship solutions, Onapsis Defend and Onapsis Assess, designed to secure the SAP Business Technology Platform (SAP BTP). As more customers adopt SAP S/4HANA cloud and move to RISE with SAP, SAP BTP provides a unified environment for analytics, application development, AI, and automation. However, this also introduces security and compliance challenges that cloud customers must address as part of their shared security responsibilities. “With more organizations transitioning to SAP … More →

The post Onapsis expands security for SAP Business Technology Platform appeared first on Help Net Security.

Tamnoon announced it has raised $12 million in Series A funding. The round was led by cybersecurity investment firm Bright Pixel Capital (formerly Sonae IM), with participation by new investors Blu Ventures and Mindset Ventures as well as existing investors Merlin Ventures, Secret Chord Ventures, Inner Loop Capital, and Elron Ventures. Tamnoon is the first and only hybrid human-AI managed service developed from the ground up specifically for cloud security remediation. Founded by cloud security … More →

The post Tamnoon raises $12 million to reduce critical cloud exposures appeared first on Help Net Security.

Nudge Security unveiled an automated SaaS spend discovery capabilities, building on the company’s patented approach to SaaS discovery to include analysis and insights into previously unknown SaaS spend. At a time when organizations are trying to rationalize app estates to reduce spend, mitigate risk, and improve efficiency, Nudge Security is the only solution to provide the whole picture: SaaS adoption, usage, risk, and spend insights that were previously difficult for IT and security teams to … More →

The post Nudge Security introduces automated SaaS spend discovery capabilities appeared first on Help Net Security.

Portnox announced support for Microsoft External Authentication Methods (EAM) for its Conditional Access for Applications solution. This new integration extends Portnox’s commitment to delivering phishing-resistant passwordless authentication with risk-based assessment and compliance validation for enterprise applications. Microsoft’s EAM capability allows users to authenticate using non-Microsoft solutions, such as certificate-based authentication, FIDO2 keys, and third-party identity providers, further strengthening their access control policies across cloud, hybrid, and on-prem environments. By incorporating Microsoft EAM into its Conditional Access … More →

The post Portnox enhances passwordless risk-based access for enterprise applications appeared first on Help Net Security.

CVE-2024-7593, a critical authentication bypass vulnerability affecting Ivanti Virtual Traffic Manager (vTM) appliances, is actively exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which added the flaw to its Known Exploited Vulnerabilities catalog, thus mandating all US federal civilian executive branch agencies to remediate it by October 15, 2024. About CVE-2024-7593 Ivanti Virtual Traffic Manager is a software-based application delivery controller and load balancing solution. It includes a web-based … More →

The post Ivanti vTM auth bypass flaw exploited in attacks, CISA warns (CVE-2024-7593) appeared first on Help Net Security.

NETSCOUT announced enhancements to its nGenius Enterprise Performance Management solution, which includes a new notification center that helps streamline and automate alerts and contextual workflows to identify and resolve problems faster. Secured Reliable Transport (SRT) was added to support live video streaming, and additional supervisory control and data acquisition (SCADA) protocols were added to support international utility networks. Performance degradations, application unavailability, and lengthy outages can have a crippling effect on any business. Organizations need … More →

The post NETSCOUT’s nGeniusONE notification center streamlines and automates alerts appeared first on Help Net Security.

ManageEngine announced a significant upgrade to its flagship IT analytics solution, Analytics Plus. Version 6.0 introduces Spotlight, a contextual recommendations engine powered by AI, designed to identify key inefficiencies in IT operations and suggest corrective strategies. The 2023 State of Analytics Engineering report found that time to business insight is the biggest challenge for nearly 50% of surveyed directors. Spotlight dramatically reduces the time IT managers and CIOs spend analyzing various IT metrics and coming … More →

The post ManageEngine Analytics Plus 6.0 identifies key inefficiencies in IT operations appeared first on Help Net Security.

OneTrust announced new capabilities to help organizations enhance resilience across the financial sector and operationalize compliance with the EU’s Digital Operational Resilience Act (DORA). Building upon its comprehensive OneTrust Third-Party Management solution, OneTrust will now offer first-to-market capabilities such as automated DORA “register of information” report creation and out-of-the-box depth of screening and compliance data. “An organization’s supply chain can be one of its biggest assets for efficiency and innovation, as well as its most … More →

The post OneTrust helps organizations operationalize DORA compliance appeared first on Help Net Security.

Bitwarden announced further enhancements to inline autofill capabilities within the Bitwarden browser extension. Following the recent addition of autofill for cards and identities, this update ensures seamless autofill of passkeys, providing a faster, more secure, and convenient way for users to log into websites and applications that support passkey authentication. Bitwarden continues to see strong momentum in passkey adoption. Since announcing passkey management earlier this year, daily passkey creation peaked this summer at more than … More →

The post Bitwarden inline autofill empowers users to fill passkeys directly from their vault appeared first on Help Net Security.

Commvault announced it will acquire Clumio, a technology leader in data protection for critical cloud data in AWS. This transaction enables Commvault to leverage Clumio’s AWS offerings to provide cyber resilience to next generation applications built on AWS. Clumio serves a wide range of customers including Atlassian, Cox Automotive, Duolingo, and LexisNexis. More and more organizations are relying on Amazon S3 as their de facto storage offering, including for AI development in the cloud. Clumio … More →

The post Commvault acquires Clumio to accelerate cyber resilience capabilities for AWS appeared first on Help Net Security.

NetAlertX is an open-source Wi-Fi/LAN intruder detection tool that scans your network for connected devices and alerts you when new or unknown devices are detected. It provides visibility into your network activity to help you monitor unauthorized access. “NetAlertX comes with a range of scanners, notification gateways, or integrations (such as with Home Assistant), but the part that makes it unique is its plugin and settings system. Anyone can create a custom plugin in 15 … More →

The post NetAlertX: Open-source Wi-Fi intruder detector appeared first on Help Net Security.

In this Help Net Security interview, John Yeoh, Global VP of Research at CSA, discusses the growing security challenges posed by non-human identities (NHIs). With NHIs now outnumbering human identities by 20 to 1, organizations are struggling to secure these digital entities effectively. Yeoh shares insights on addressing this issue, including the need for better visibility, lifecycle management, and cohesive security strategies. Only 15% of organizations feel highly confident in preventing attacks through non-human identities. … More →

The post Securing non-human identities: Why fragmented strategies fail appeared first on Help Net Security.

CISO Guardz | Israel | Hybrid – View job details As a CISO, you will develop and implement security policies and procedures to enhance the security of the company’s IT environment. Develop, implement, and maintain a comprehensive information security strategy to protect company data, production systems, and networks from threats; ensure compliance with relevant security standards, regulations, and best practices (PCI DSS, SOX, ISO 27001, etc). Cloud Security Architect Nuix | Australia | Hybrid – … More →

The post Cybersecurity jobs available right now: September 25, 2024 appeared first on Help Net Security.

35% of employees lack confidence that they have the skills required to succeed in their roles, according to Skillsoft. Additionally, 41% expressed concerns about job security due to gaps in their skills. Leadership skills rank highest for workplace success Surveyed employees rated leadership skills as the most critical for success in today’s workplace, followed by soft skills (e.g. communication, emotional intelligence), technology skills, and AI/machine learning skills. Respondents also acknowledged that their manager views leadership … More →

The post 41% concerned about job security due to skill gaps appeared first on Help Net Security.

Compromised identities have been a central component of countless costly breaches this year, according to Red Canary. Rise in identity and cloud-native attacks While most of the threats and techniques identified in the 2024 report remain consistent with the midyear update, some notable shifts were revealed. Looking at the top ten MITRE ATT&CK techniques, Email Hiding Rule – whereby adversaries use a compromised account to set up rules to block, redirect, or mark certain emails … More →

The post Organizations are making email more secure, and it’s paying off appeared first on Help Net Security.

Financially motivated threat actors are targeting North American companies in the transportation and logistics sector with tailored lures, info-stealing malware, and a clever new trick. How the attack unfolds According to Proofpoint threat researchers, the attackers start by compromising email accounts of workers in transportation and shipping companies and then responding to existing email conversations within the account’s inbox. The emails are usually short, and initially urged recipients to follow a link to / download … More →

The post Transportation, logistics companies targeted with lures impersonating fleet management software appeared first on Help Net Security.

Osano announced advanced capabilities within its platform, including tighter integration of its data mapping and assessment modules and powerful reporting and risk management capabilities. Privacy teams are often under-resourced and overwhelmed by manual work. According to the IAPP-EY Privacy Governance Report, 63% of privacy professionals agree the limited availability of resources within their organization impacts their ability to deliver on privacy goals. These updates, which will launch in early Q4, help data privacy professionals streamline … More →

The post Osano reduces complexity for data privacy professionals appeared first on Help Net Security.

KELA launched Identity Guard, the first line of defense to help combat the #1 cause of data breaches – compromised corporate assets and identities. Identity Guard is a critical module of KELA’s threat intelligence platform, already in use by hundreds of customers, including government agencies, law enforcement and enterprises. As threat actors look for new ways to circumvent advanced Firewalls, EDRs, and other security controls, they increasingly turn to using valid corporate account credentials — … More →

The post KELA Identity Guard detects and intercepts compromised assets appeared first on Help Net Security.

Cloudflare announced a new service to verify the integrity of public keys in the end-to-end encryption of popular messaging applications. When using end-to-end encryption messaging applications, a public-private key exchange encrypts messages to protect against an outside party intercepting messages. Now, Cloudflare is taking the burden off security-minded users that have previously had to manually verify public keys with their contacts. By automatically checking that public keys haven’t been tampered with, Cloudflare is helping to … More →

The post Cloudflare helps secure popular messaging applications appeared first on Help Net Security.

Arlo Technologies announced Arlo Secure 5, the next generation of smart home security powered by Arlo Intelligence (AI). Arlo’s new proprietary AI technology introduces a suite of features such as custom detections, vehicle recognition and person recognition. Arlo Secure 5 further builds upon Arlo’s values to connect and protect what users love most by adding truly customized security solutions that offer more personalized control. “Arlo continues to lead the industry with our advanced AI and … More →

The post Arlo Secure 5 boosts smart home security appeared first on Help Net Security.