Help Net Security

In this Help Net Security video, David Cottingham, President of rf IDEAS, discusses what he sees as the most prominent areas for improvement and continued change in the space: As we move into 2025, it’s evident that businesses recognize MFA as essential. The next step is implementing MFA seamlessly, ensuring employees’ ease of use. Traditional methods, like sending a PIN to a mobile phone, are cumbersome and vulnerable to theft. As for authenticators, typing in … More →

The post What 2025 holds for user identity protection appeared first on Help Net Security.

Security leaders feel under increasing pressure to provide assurances around cybersecurity, exposing them to greater personal risk – yet many lack the data and resources to accurately report and close cybersecurity gaps, according to Panaseer. The report analyses the findings of a survey of 400 security decision makers (SDMs) across the US and UK. Security leaders turn to indemnity insurance for protection 61% of organizations have suffered a security breach in the past year because … More →

The post How cybersecurity failures are draining business budgets appeared first on Help Net Security.

Vectra AI announced the extension of the Vectra AI Platform to include comprehensive coverage for customers’ Microsoft Azure environments. With the addition of over 40 unique attacker behavior detections for Microsoft Azure, Vectra AI now delivers over 100 AI-driven attacker behavior detections. Now, Microsoft customers achieve comprehensive hybrid and multi-cloud defense for their entire Microsoft environment – Microsoft Active Directory, Microsoft Entra ID, Microsoft M365, Microsoft Copilot for M365 and now Microsoft Azure. According to … More →

The post Vectra AI adds AI-powered detections to help secure Microsoft customers appeared first on Help Net Security.

Cequence Security announced its new API Security Assessment Services. Designed to provide immediate, actionable insights into API security risks, these time-bound and fixed services leverage Cequence’s advanced Unified API Protection platform, enabling companies to identify and address security gaps within their existing infrastructure. As digital transformation accelerates, the reliance on APIs introduces new security challenges. Cequence’s assessment services provide a clear and comprehensive view of an organization’s API environment, helping identify hidden risks and comply … More →

The post Cequence Security enables organizations to elevate their API defenses appeared first on Help Net Security.

Absolute Security launched Enterprise Edition, combining the new Safe Connect for Secure Access and Comply Module for Secure Endpoint. With these innovations, Enterprise Edition is the comprehensive Security Service Edge (SSE) that can ensure only secure and compliant devices are accessing corporate networks, while delivering an optimized user experience for remote and hybrid workers. Backed by firmware-embedded resilience, customers are assured their SSE remains resilient, always on, and fully operational. “Hybrid work, complexity, ransomware, and … More →

The post Absolute Security releases Enterprise Edition appeared first on Help Net Security.

Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while keeping their identity hidden using proxies. The tool’s capabilities extend beyond simple phishing, posing a threat to entire organizations by potentially hijacking developer accounts and accessing private repositories. GoIssue may be linked to the GitLoker extortion campaign, which uses … More →

The post GoIssue phishing tool targets GitHub developer credentials appeared first on Help Net Security.

Check Point Software’s latest threat index reveals a significant rise in infostealers like Lumma Stealer, while mobile malware like Necro continues to pose a significant threat, highlighting the evolving tactics used by cybercriminals across the globe. Last month researchers discovered an infection chain where fake CAPTCHA pages are being utilized to distribute Lumma Stealer malware, which has climbed to 4th place in the monthly top malware rankings. This campaign is notable for its global reach, … More →

The post Infostealers increasingly impact global security appeared first on Help Net Security.

Rakuten Viber has launched new solutions to further protect communication on the platform. Businesses can now quickly authenticate users to enhance trust and reduce fraud, making interactions more secure. Verification messages provide a secure and seamless way to authenticate clients through one-time passwords (OTPs). With ready-made templates designed to increase conversions, businesses can send encrypted OTPs at lower costs than SMS and at a pre-defined delivery time. When users receive a Viber verification message, they … More →

The post Rakuten Viber unveils new security solutions for businesses appeared first on Help Net Security.

Nirmata launched Nirmata Control Hub, a comprehensive platform designed to prevent misconfigurations and automate security through policy-as-code. As Artificial Intelligence (AI) accelerates the adoption of Kubernetes and cloud-native technologies, enterprises are increasingly facing security challenges due to the growing complexity of their infrastructures. This rapid expansion has introduced new risks around misconfigurations, vulnerabilities, and security breaches, which Nirmata Control Hub is designed to mitigate. By unifying security, compliance, and automation, Nirmata Control Hub offers platform … More →

The post Nirmata Control Hub automates security with policy-as-code appeared first on Help Net Security.

It’s not just North Korean hackers who reach out to targets via LinkedIn: since at least September 2023, Iranian threat actor TA455 has been trying to compromise workers in the aerospace industry by impersonating job recruiters on the popular employment-focused social media platform. “By leveraging LinkedIn, a platform inherently built on trust and professional connections, TA455 seeks to gain credibility and avoid raising suspicion. Their use of fake recruiter profiles associated with fabricated companies further … More →

The post Aerospace employees targeted with malicious “dream job” offers appeared first on Help Net Security.

Cisco introduces new intelligent, secure and assured wireless innovations, with smart Wi-Fi 7 access points and unified subscription licensing that can enable smart spaces out-of-the-box. These innovations empower customers to solve for their connectivity, security and assurance challenges, while also providing a flexible foundation to future-proof their workplaces. Wireless technologies have reshaped the world, from how and where work gets done, to how people shop and learn. Today, wireless innovations continue to blur the lines … More →

The post Cisco introduces Wi-Fi 7 access points to enhance employee and customer experiences appeared first on Help Net Security.

Syteca launched Account Discovery, a new feature within its Privileged Access Management (PAM) solution. This enhancement enables organizations to automatically detect and manage privileged accounts across their IT infrastructure, significantly reducing security risks associated with unmanaged access credentials. The new Account Discovery feature addresses the critical challenge of “ghost accounts” – privileged credentials that remain active after employee departures, contractor project completions, or system upgrades. These overlooked accounts often create security vulnerabilities that can be … More →

The post Syteca Account Discovery strengthens privileged access management appeared first on Help Net Security.

In this Help Net Security interview, Daniel Schwalbe, CISO at DomainTools, discusses the intensifying regulatory demands that have reshaped CISO accountability and daily decision-making. He outlines the skill sets future CISOs need, their key priorities for 2025, and how increased pressure impacts the role’s attractiveness and retention. What specific regulatory demands have heightened the CISO’s accountability, and how has this affected their daily decision-making? A recent change in the regulatory landscape that directly affected CISOs … More →

The post CISOs in 2025: Balancing security, compliance, and accountability appeared first on Help Net Security.

AI can expose your work secrets. The same goes for AI-generated content, which has revolutionized workplace productivity but comes with hidden risks. As more employees use AI models to streamline tasks—whether drafting reports, building code, or designing products, they may unknowingly expose valuable IP through Shadow AI. In this Help Net Security video, Rob Juncker, CTO – Insider Risk at Mimecast, discusses the intersection of AI-generated content, AI models, and IP loss in 2024 and … More →

The post Cyber professionals face an IP loss reckoning in 2025 appeared first on Help Net Security.

Whether you’re looking to enhance your existing cybersecurity skills or just beginning your journey in the field, cybersecurity offers a wide range of career opportunities. If you’re considering a career shift, exploring new job opportunities, or aiming to upgrade your skill set, take time to learn about the questions to prepare for in your upcoming cybersecurity job interview. Preparing for the job interview Researching the potential employer will enable you to answer questions in ways … More →

The post Tips for a successful cybersecurity job interview appeared first on Help Net Security.

North American financial institutions fielded 10 times more reports of social engineering scams in 2024 than they did a year ago, according to BioCatch. The data shows scams now represent 23% of all digital banking fraud. Growing danger of deepfake and GenAI scams BioCatch published these findings in its 2024 Digital Banking Fraud Trends in North America report, which also details a 94% uptick in reported money mule (or money laundering) accounts. “Reports of North … More →

The post Social engineering scams sweep through financial institutions appeared first on Help Net Security.

November 2024 Patch Tuesday is here, and Microsoft has dropped fixes for 89 new security issues in its various products, two of which – CVE-2024-43451 and CVE-2024-49039 – are actively exploited by attackers. The exploited vulnerabilities (CVE-2024-43451, CVE-2024-49039) CVE-2024-43451 is yet another vulnerability that allows attackers to elevate their privileges on targeted Windows and Windows Server machines by disclosing the user’s NTLMv2 hash, which contains their authentication credentials. The hash can then be used by … More →

The post Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039) appeared first on Help Net Security.

BlackFog launched its next generation enterprise platform to deliver even more powerful ransomware and insider threat prevention. BlackFog’s pioneering platform focuses specifically on anti data exfiltration to prevent unauthorized data from leaving a device, ensuring that an organization’s most sensitive information is protected. The latest product enhancements in Version 5 are designed to provide enhanced data loss prevention without the need for data classification. This comes at a time when ransomware attacks continue to evolve … More →

The post BlackFog platform enhancements boost data loss prevention appeared first on Help Net Security.

Akamai announced the Akamai App Platform, a ready-to-run solution that makes it easy to deploy, manage, and scale highly distributed applications. The Akamai App Platform is built on top of the cloud native Kubernetes technology Otomi, which Akamai acquired from Red Kubes earlier this year. The application platform provides ready-to-run templates that address common challenges in deploying, managing, and scaling Kubernetes clusters at scale. Instead of relying on multiple departments and spending months sourcing, connecting, … More →

The post Akamai App Platform reduces the complexity associated with managing Kubernetes clusters appeared first on Help Net Security.

Druva announced support for Microsoft Dynamics 365 to help enterprises secure mission-critical data across Dynamics 365 Sales and Customer Service CRM modules. With support for Dynamics 365, Druva ensures customers can keep business-critical CRM data secure and maintain business operations in the event of an incident. Druva is also announcing support for Microsoft 365 Backup Storage to increase customer choice with Microsoft 365 protection. With core CRM capabilities, Dynamics 365 is the heartbeat of many … More →

The post Druva empowers businesses to secure data throughout Microsoft environments appeared first on Help Net Security.