Help Net Security

The Securities and Exchange Commission charged four current and former public companies – Unisys Corp., Avaya Holdings Corp., Check Point Software Technologies Ltd, and Mimecast Limited – with making materially misleading disclosures regarding cybersecurity risks and intrusions. The SEC also charged Unisys with disclosure controls and procedures violations. The charges against the four companies result from an investigation involving public companies potentially impacted by the compromise of SolarWinds’ Orion software and by other related activity. … More →

The post SEC fines tech companies for misleading SolarWinds disclosures appeared first on Help Net Security.

Threat actors have been leveraging zero and n-day vulnerabilities in Cisco security appliances (CVE-2024-20481), Microsoft Sharepoint (CVE-2024-38094), and Google’s Chrome browser (CVE-2024-4947). CVE-2024-20481 (Cisco ASA/FTD) In the past few days, Cisco has released fixes for a slew of vulnerabilities affecting the software powering its security appliances. Among them several are of particular note: CVE-2024-20481, a vulnerability in the Remote Access VPN (RAVPN) service of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense … More →

The post Exploited: Cisco, SharePoint, Chrome vulnerabilities appeared first on Help Net Security.

Proof launched Verify, a live face-to-face experience that delivers high-level assurance with identity verification performed in the presence of an agent, reducing the risk of fraudulent activities such as deepfakes by ensuring that users are legitimate. Organizations and consumers alike are faced with two critical globally reaching problems: declining security and trust in digital transactions, and the rise of generative AI-powered deepfakes. Constructing a fake identity, generating a fake video, or falsifying records is now … More →

The post Proof Verify reduces false positives and improves fraud detection accuracy appeared first on Help Net Security.

AuthenticID released AuthenticID360, its new holistic identity verification platform. AuthenticID360 delivers robust verification and risk signaling capabilities, including a 2-second response time for identity transactions. A unified solution for comprehensive identity verification and risk scoring AuthenticID360 combines ID verification, biometric authentication, KYC (Know Your Customer) and KYB (Know Your Business) data checks, OFAC (Office of Foreign Assets Control) sanction screening, and advanced fraud watchlists tools – all within a single platform. Built with ease of … More →

The post AuthenticID360 blocks AI-generated IDs during digital onboarding appeared first on Help Net Security.

Concentric AI has secured financing of $45 million in a Series B round, bringing the company’s total funding to more than $67 million. The funding round was led by Top Tier Capital Partners and HarbourVest Partners. CyberFuture, a global CISO investment alliance, also participated in the funding after a thorough evaluation of numerous DSPM vendors. Existing investors Ballistic Ventures, Engineering Capital, Clear Ventures, and Citi Ventures also participated in this round. In addition, Garth Timoll … More →

The post Concentric AI raises $45 million to expand go-to-market strategies appeared first on Help Net Security.

AuditBoard and Protiviti announced new joint capabilities. The joint services include advanced analytics, collaboration, transformation, and digitization capabilities, along with a joint offering to help teams prepare for the new Global Internal Audit Standards from The Institute of Internal Auditors. Available immediately, these new solutions will empower customers to dramatically transform how they gain insights, drive efficiency, and deliver transparency throughout their audit lifecycle. The launch includes: Analytics Accelerators combine AuditBoard’s modern connected risk platform … More →

The post AuditBoard and Protiviti guide enterprises in redefining the value of internal audit appeared first on Help Net Security.

Climbing Mount Everest isn’t a feat for the faint hearted. Extreme weather, dangerous terrain and acclimatization requirements make the trek challenging for even the most experienced climbers. It’s estimated that the expedition takes more than two months, on average. That’s a lengthy process that involves a lot of planning and guidance along the way. For businesses, conquering a ransomware attack can feel like the metaphorical equivalent of scaling a mountain. The journey from identification of … More →

The post Achieving peak cyber resilience appeared first on Help Net Security.

In this Help Net Security interview, Michael Daum, Head of Global Cyber Claims for Allianz Commercial, discusses the significant rise in cyber claims in 2024, driven by an increase in data breaches and ransomware attacks. Daum highlights the need for businesses to implement cyber hygiene practices and align their risk management strategies with insurers’ expectations to mitigate financial impacts and reduce premiums. Cyber claims have risen significantly in both frequency and severity in 2024. What … More →

The post The future of cyber insurance: Meeting the demand for non-attack coverage appeared first on Help Net Security.

In this Help Net Security video, IEEE member Marc Lijour explains quantum computing and offers insight into how to fend off a quantum computer attack.

The post How to fend off a quantum computer attack appeared first on Help Net Security.

Due to widely varying government, risk, and compliance (GRC) tool pricing, enterprise risk management (ERM) leaders must understand four different pricing-tier categories of GRC solutions and apply a scoping framework to further estimate likely costs ahead of vendor selection, according to Gartner. Only 27% of heads of ERM say that senior, executive and board decision makers consistently take the actions recommended in risk assessments. Only 31% have high confidence that their risk assessment process keeps … More →

The post Unclear pricing for GRC tools creates market confusion appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from Fastly, IBM, Ivanti, Kusari, and Nucleus Security. IBM Guardium Data Security Center protects hybrid cloud and AI IBM Guardium Data Security Center provides a common view of organizations’ data assets, empowering security teams to integrate workflows and address data monitoring and governance, data detection and response, data and AI security posture management, and cryptography management together in a single dashboard. … More →

The post New infosec products of the week: October 25, 2024 appeared first on Help Net Security.

Fortinet has finally made public information about CVE-2024-47575, a critical FortiManager vulnerability that attackers have exploited as a zero-day. About CVE-2024-47575 CVE-2024-47575 is a vulnerability stemming from missing authentication for a critical function in FortiManager’s fgfmd daemon. Remote, unauthenticated attackers could exploit the flaw to execute arbitrary code or commands via specially crafted requests. It affects various versions of FortiManager and FortiManager Cloud, as well as some older FortiAnalyzer models. “Reports have shown this vulnerability … More →

The post Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575) appeared first on Help Net Security.

Nucleus Security announced Nucleus POAM Process Automation, a comprehensive solution for federal agencies and their vendors to streamline risk management and automate their Plan of Action and Milestones (POA&M) process. This solution overcomes error-prone and labor-intensive manual processes by automating repetitive POA&M workflows with real-time tracking and reporting, ensuring that compliance and risk management efforts are efficient and accurate. “Federal agencies and their suppliers must adapt to increasing compliance requirements while maintaining a strong security … More →

The post Nucleus Security unveils POAM Process Automation for federal agencies appeared first on Help Net Security.

F5 announced BIG-IP Next for Kubernetes, an AI application delivery and security solution that equips service providers and large enterprises with a centralized control point to accelerate, secure, and streamline data traffic that flows into and out of large-scale AI infrastructures. The solution harnesses the power of high-performance NVIDIA BlueField-3 DPUs to enhance the efficiency of data center traffic that is critical to large-scale AI deployments. With an integrated view of networking, traffic management, and … More →

The post F5 BIG-IP Next for Kubernetes reduces the complexity of AI deployments appeared first on Help Net Security.

When building a cybersecurity team, you likely asked yourself, “Should I focus on certifications or real-world skills?” And since you rarely encounter entry-level candidates who can hit the ground running, naturally, you’d consider a candidate with both. But that’s not always the best option unless you have the time, money, and patience. One of these factors usually has a priority over the other. Your starting point or a nice-to-have? ISACA’s State of Cybersecurity 2024 Report … More →

The post What’s more important when hiring for cybersecurity roles? appeared first on Help Net Security.

In this Help Net Security interview, John Cohen, Executive Director, Program for Countering Hybrid Threats at the Center for Internet Security, discusses the four pillars of the National Framework for Action, emphasizing how these measures can combat the exploitation of technology and social media by threat actors. Cohen argues that a coordinated, whole-of-society approach is essential to empower communities and counter integrated threats to national security. Can you walk us through the four pillars of … More →

The post Enhancing national security: The four pillars of the National Framework for Action appeared first on Help Net Security.

Cyber insurance is vital for companies mitigating cyber risks, but the industry still encounters significant challenges, including shifting policy requirements and uncertainty around coverage in the event of an incident. As cyberattacks continue to cause problems for organizations worldwide, it’s essential for businesses to take proactive measures to align their insurance strategies with their broader risk management plans. Vishaal Hariprasad, CEO at Resilience, discusses how cyber insurance needs to evolve to prepare companies better to … More →

The post Facing the uncertainty of cyber insurance claims appeared first on Help Net Security.

AI impersonation is now the hardest vector for cybersecurity professionals to protect companies against, according to Teleport. The study, which surveyed 250 senior US and UK decision-makers, shows that social engineering remains one of the top tactics cybercriminals use to install malware and steal sensitive data, with the advancement of AI and deepfakes further fueling the effectiveness of phishing scams. Advanced phishing tactics on the rise When asked to rank the difficulty of each attack … More →

The post AI and deepfakes fuel phishing scams, making detection harder appeared first on Help Net Security.

To safeguard your data, Google Chrome uses Safe Browsing to protect you from: harmful websites and extensions, malicious or intrusive advertisements, malware, phishing attacks, and social engineering threats. Safe Browsing scans and evaluates websites to identify potentially harmful sites, which are then added to its database. Whenever you visit a website or try to download something, Google Chrome consults Safe Browsing according to the protection level you’ve chosen. How to choose your Safe Browsing protection … More →

The post How to enable Safe Browsing in Google Chrome on Android appeared first on Help Net Security.

Cofense released new AI-driven spam reduction capabilities to its Phishing Detection and Response (PDR) platform. These enhancements reduce workload so SOC analysts can concentrate on genuine threats that could quickly harm an organization’s revenue or reputation. “As phishing attacks continue to evolve, security teams demand tools that improve efficiency but also give them an edge in identifying and responding to threats,” said Jason Reinard, SVP of Product Engineering. “With these new AI features, Cofense is … More →

The post Cofense improves visibility of dangerous email-based threats appeared first on Help Net Security.