Aggregator

Entrust has introduced a new approach to preventing account takeover. As attackers increasingly target high-risk moments like account recovery, device changes, and large transactions, organizations need to modernize authentication from verifying access to verifying the real human behind the transaction. The Entrust Biometric Authentication solution brings identity-centric assurance to these critical interactions, helping organizations reduce fraud while delivering fast, easy end-user experiences. “Too many organizations are treating authentication as a login problem, but attackers have … More →

The post Entrust uses biometrics to verify users during high-risk transactions appeared first on Help Net Security.

YesWeHack announces Agentic Pentest, an on-demand solution using autonomous AI agents to test organisations’ assets and deliver same-day findings. Shaped by YesWeHack’s extensive offensive security experience, Agentic Pentest helps organisations identify vulnerabilities, test their real-world exploitability and uncover attack paths across in-scope assets. The solution supports black box, grey box and white box testing of web applications, mobile apps, APIs and other internet-facing assets. YesWeHack, leader in offensive security in Europe and APAC, leverages the … More →

The post YesWeHack automates penetration testing with AI-powered agents appeared first on Help Net Security.

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breached.

The post Why patch directives only go so far appeared first on CyberScoop.

Forescout has announced the launch of its Post-Quantum Cryptography (PQC) Readiness and Encryption Hygiene Dashboards. The new dashboards are designed to help organizations identify, prioritize, and manage quantum risk across information technology (IT), operational technology (OT), Internet of Things (IoT), and medical devices (IoMT) environments. As organizations face new pressures from regulators, auditors, and boards to demonstrate PQC awareness and progress, Forescout accelerated its development timeline to deliver operational security capabilities to understand and prioritize … More →

The post Forescout brings PQC visibility to IT, OT, IoT, and IoMT environments appeared first on Help Net Security.

You must login to view this content

WhatsApp is rolling out a warning screen on Android and iOS that appears before users open chats with unfamiliar phone numbers. Meta hopes that this new feature will help users avoid scammers. WhatsApp chats warning screen (Source: WABetaInfo) “WhatsApp now checks the phone number before someone tries to open a chat with it. If WhatsApp doesn’t see signs that the phone number entered by the user is already trusted, it shows a screen that asks … More →

The post WhatsApp will warn users before they message a potential scammer appeared first on Help Net Security.

Stellar Cyber has announced continued momentum across Stellar Cyber 6.5 and 6.6. The releases advance the company’s AI-driven, human-augmented SOC vision with governed AI workflows, improved Auto Triage visibility, sharper detections, stronger platform health monitoring, expanded integrations, and faster self-service data onboarding for MSSPs and enterprise security teams. “Customers and partners do not need more alerts or more disconnected tools. They need a platform that helps them detect faster, investigate with more context, bring new … More →

The post Stellar Cyber improves threat detection and data onboarding in new updates appeared first on Help Net Security.

A Security Operations Center rarely struggles because it lacks alerts. It struggles because every alert creates work: validate the indicator, understand the behavior, check whether the threat is known, determine its scope, decide whether to escalate, contain the incident, and make sure the same attack is easier to detect next time. When these steps depend […]

The post From Alert Enrichment to Confident Response: How ANY.RUN Powers Every SOC Workflow appeared first on ANY.RUN's Cybersecurity Blog.

A wave of malicious skills targeting the OpenClaw AI agent marketplace has exposed a dangerous new frontier in software supply chain security. Attackers are using the ClawHub skill marketplace to push harmful code into AI agent environments, stealing data and running financial fraud schemes that traditional security tools failed to catch. OpenClaw is an AI […]

The post OpenClaw Skill Marketplace Exposes AI Agents to Supply Chain Malware and Financial Fraud appeared first on Cyber Security News.