Help Net Security

Graylog unveiled significant security advancements to drive smarter, faster, and more cost-efficient security operations. The company’s latest capabilities include advanced data routing, asset-based risk scoring, and AI-generated investigation reports. These enhancements, and many others in the Fall 2024 release, help organizations realign their time and financial investment with security objectives, empowering security teams to confidently reduce risk. With a detailed understanding of the threat landscape at both user and system levels, Graylog enables organizations to … More →

The post Graylog enables organizations to make more informed decisions about their security posture appeared first on Help Net Security.

In the last couple of days, Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited by Chinese threat actors. Security updates are trickling out The company, which is known for pushing out fixes for critical vulnerabilities before disclosing their existence to the public, has privately notified select customers a week ago and shared temporary mitigation advice. The advice apparently includes configuring FortiManager to prevent devices with … More →

The post Fortinet releases patches for undisclosed critical FortiManager vulnerability appeared first on Help Net Security.

Cybersecurity troubles are not over for the Internet Archive (IA), the nonprofit organization behind the popular digital library site: after the recent DDoS attacks, defacement and data breach, an email sent via its Zendesk customer service platform has shown that some of its IT assets remain compromised. The initial attacks Two weeks ago, the Internet Archive was made inaccessible by several DDoS attacks claimed by pro-Palestinian hacktivists. In the days before the first one, a … More →

The post The Internet Archive breach continues appeared first on Help Net Security.

Ataccama announced Ataccama ONE v15.3, an update to its data management platform that significantly increases the ROI for customers. Ataccama ONE v15.3 empowers data teams to monitor, manage, and utilize data to enhance security and compliance and expand their customer value and footprint. “Data leaders are focused on maximizing the power of quality data to boost productivity and support better decision-making across their enterprises. With v15.3, we focused on delivering the tools and functionality our … More →

The post Ataccama ONE v15.3 empowers data teams to monitor, manage, and utilize data appeared first on Help Net Security.

In this Help Net Security interview, Ian Swanson, CEO of Protect AI, discusses the concept of “secure AI by design.” By adopting frameworks like Machine Learning Security Operations (MLSecOps) and focusing on transparency, organizations can build resilient AI systems that are both safe and trustworthy. The idea of “secure AI by design” is becoming more prominent. What does this look like in practice? Can you give specific examples of how organizations can embed security from … More →

The post Building secure AI with MLSecOps appeared first on Help Net Security.

A recent Todyl report revealed a 558% increase in BEC (Business Email Compromise), AiTM (Adversary-in-the-Middle), and ATO (Account Takeover) attacks in 2024. In this Help Net Security video, David Langlands, Chief Security Officer at Todyl, discusses these evolving cyber threats. Here are the key findings from the report: BEC is evolving as attackers shift from traditional malware to exploiting human error and vulnerable communication channels. Attackers are exploiting gaps in security like the lack of … More →

The post Evolving cybercriminal tactics targeting SMBs appeared first on Help Net Security.

SpiderOak launched its core technology platform as an open-source project called Aranya. This release provides the same level of security as the company’s platform, which is already in use by the Department of Defense. The Aranya project marks a turning point in defending against AI-driven attacks like malware, ransomware, command injection, and spoofing. By shifting security measures from traditional centralized solutions and network controls to being integrated directly into technology manufacturers’ applications and devices, it … More →

The post Aranya: Open-source toolkit to accelerate secure by design concepts appeared first on Help Net Security.

84% of CISOs believe the role needs to be split into two functions – one technical and one business-focused, to maximize security and organizational resilience, according to Trellix. Regulatory demands pose a growing challenge for CISOs The research reveals insights from over 500 CISOs worldwide on cybersecurity regulation, the CISO role, and their interactions and challenges when reporting to their organization’s board. “We’ve entered the CISO duality era,” said Harold Rivas, CISO, Trellix. “CISOs need … More →

The post Should the CISOs role be split into two functions? appeared first on Help Net Security.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113) Last week, CISA added CVE-2024-23113 – a critical vulnerability that allows unauthenticated remote code/command execution on unpatched Fortinet FortiGate firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming that it’s being leveraged by attackers in the wild. Attackers deploying red teaming tool for EDR evasion Threat actors … More →

The post Week in review: 87k+ Fortinet devices still open to attack, red teaming tool used for EDR evasion appeared first on Help Net Security.

Microsoft has lost several weeks of cloud security logs that its customers rely on to spot cyber intrusions. What happened As reported by Business Insider earlier this month, Microsoft privately notified affected customers of this incident and told them the failure was “not related to any security compromise.” The preliminary post incident review has since been made public, and says that the cause was a bug in the internal monitoring agent that was triggered when … More →

The post Microsoft lost some customers’ cloud security logs appeared first on Help Net Security.

Attackers have tried to deliver wiper malware to employees at organizations across Israel by impersonating cybersecurity company ESET via email. The phishing email The attack took the form of a phishing email ostensibly sent by the “Eset Advanced Threat Defense Team”, warning that state-backed hackers have tried compromising the target’s device(s). The phishing email (Source: A user of the ESET Security Forum) The email was posted on ESET Security Forum’s on October 8 by a … More →

The post Israeli orgs targeted with wiper malware via ESET-branded emails appeared first on Help Net Security.

Law enforcement agencies have arrested suspects involved in cyber attacks claimed by USDoD and Anonymous Sudan, as well as a person involved in the hacking of SEC’s X (Twitter) account. USDoD On Wednesday, the Brazilian federal police (Policia Federal) arrested a man in Belo Horizonte, suspected of being the person behind the “USDoD” moniker (previously “EquationCorp” and “NetSec”). USDoD has claimed the breaches into Policia Federal, Airbus, the US Environmental Protection Agency (EPA), and FBI’s … More →

The post Arrested: USDoD, Anonymous Sudan, SEC X account hacker appeared first on Help Net Security.

CyCognito announced several enhancements to its CyCognito Automated Security Testing (AST) product, a module in the CyCognito platform built for automated exposure validation and security testing. These additions speed the configuration of automated testing for AWS cloud environments, provide enhanced data exposure detection and augment pentesters and red teams with automated reconnaissance and prioritization of issues. CyCognito fills organizations’ critical gaps across network infrastructure, web applications and cloud by providing comprehensive, continuous security testing for all … More →

The post CyCognito expands automated testing capabilities appeared first on Help Net Security.

Despite global information security spending projected to reach $215 billion in 2024, 44% of CISOs surveyed reported they were unable to detect a data breach in the last 12 months using existing security tools, according to Gigamon. Blind spots undermine breach detection CISOs identified blind spots as a key issue, with 70% of CISOs stating their existing security tools are not as effective as they could be when it comes to detecting breaches due to … More →

The post Despite massive security spending, 44% of CISOs fail to detect breaches appeared first on Help Net Security.

A lost, stolen, or compromised smartphone today means we are in serious trouble. Most people have everything related to their personal and professional lives stored on their phones, a fact that criminals are well aware of. Cybersecurity risks resulting from a lost or stolen smartphone Unauthorized data access: If someone finds or steals your smartphone, they may have access to sensitive personal information, including contacts, messages, emails, and photos. Financial theft and account compromise: Access … More →

The post What to do if your iPhone or Android smartphone gets stolen? appeared first on Help Net Security.

Cybercrime in recent years shows no signs of slowing down, with phishing attacks surging and ransomware tactics becoming more advanced, forcing organizations to constantly adapt their defenses. The rise of deepfake technology, especially in creating realistic audio impersonations, poses new dangers. With that in mind, cybercriminals are becoming more agile and coordinated, leveraging new technologies and cooperating innovatively. Abhilash Garimella, Head Of Research at Bolster, discusses how phishing scams are now being hosted in the … More →

The post Cybercrime’s constant rise is becoming everyone’s problem appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from ExtraHop, GitGuardian, Nametag, Okta, Rubrik, and Sectigo. GitGuardian Visual Studio Code extension helps developers protect their sensitive information GitGuardian’s new Visual Studio Code extension brings shift-left security practices directly into the developer’s workflow. The extension works by scanning files as they are saved, alerting users to any potential secrets before they are added to the repository. ExtraHop RevealX enhancements accelerate … More →

The post New infosec products of the week: October 18, 2024 appeared first on Help Net Security.

Users of the Google Meet video communication service have been targeted by cyber crooks using the ClickFix tactic to infect them with information-stealing malware. Fake Google Meet video conference page with malicious ClickFix pop-up (Source: Sekoia) “The ClickFix tactic deceives users into downloading and running malware on their machines without involving a web browser for download or requiring manual file execution,” Sekoia researchers explained. “It makes it possible to bypass web browser security features, such … More →

The post Fake Google Meet pages deliver infostealers appeared first on Help Net Security.

Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the attackers themselves. (The answers have been lightly edited for clarity.) In your talk at Deep Conference next week, you will be talking about cyber-physical devices being compromised and used by cyber criminals and state-sponsored threat … More →

The post The role of compromised cyber-physical devices in modern cyberattacks appeared first on Help Net Security.

Cognizant announced the debut of Cognizant Neuro Cybersecurity, a new addition to Cognizant’s Neuro suite of platforms, designed to amplify cybersecurity resilience by integrating and orchestrating point cybersecurity solutions across the enterprise. Sophisticated threat actors, hybrid workforces, and the complexity of managing multiple security tools all weigh on an enterprise’s ability to manage cybersecurity risks. Traditional siloed technology and operations often lack the ability to deliver the insights that enable rapid decisions to preserve security … More →

The post Cognizant Neuro Cybersecurity enhances threat detection and response appeared first on Help Net Security.