Help Net Security

Responding directly to an increased global threat environment, Fivecast launched a Discovery solution that empowers analysts and investigators across both the Government and Corporate sectors to uncover intelligence insights faster to help protect communities and businesses. Fivecast Discovery automates and accelerates the processes of digital footprinting, information verification and identity resolution. These capabilities significantly enhance the crucial initial stages of intelligence investigations which can typically be impeded by huge data volumes, complex threats and resource … More →

The post Fivecast Discovery drives better analytical outputs appeared first on Help Net Security.

The Internet Archive has suffered a data breach, leading to the compromise of email addresses, screen names and bcrypt password hashes of some 31 million users. The compromise was revealed on Wednesday afternoon, when the digital library’s website began showing a JavaScript pop-up saying: “Have you ever felt like the Internet Archive runs on sticks and is constantly on the verge of suffering a catastrophic security breach? It just happened. See 31 million of you … More →

The post Internet Archive data breach, defacement, and DDoS: Users’ data compromised appeared first on Help Net Security.

Qualys launched the Risk Operations Center (ROC) with Enterprise TruRisk Management (ETM). The solution enables CISOs and business leaders to manage cybersecurity risks in real time, transforming fragmented, siloed data into actionable insights that align cyber risk operations with business priorities. The application consolidates both Qualys and non-Qualys security risk data, including from technology alliances like Forescout, Identity Threat Protection with Okta AI, Microsoft, Oracle, and Wiz across cloud, on-premises and hybrid environments. Organizations are facing … More →

The post Qualys Enterprise TruRisk Management unifies asset inventory and risk factors appeared first on Help Net Security.

Adaptiva announces the latest feature release for OneSite Patch: vulnerability dashboards. These new dashboards provide real-time visibility into Common Vulnerabilities and Exposures (CVEs) in the environment and patches that can remediate them–empowering organizations to find and fix vulnerabilities efficiently. IT and security teams often struggle to obtain real-time data that unifies vulnerability discovery and remediation status within the IT environment. This includes understanding how many vulnerabilities have available patches and the deployment status of those … More →

The post Adaptiva improves collaboration between IT and security teams with vulnerability dashboards appeared first on Help Net Security.

Filling roles within the cyber sector is an ongoing battle. The shortfall of workers risks creating a vicious cycle within existing cyber teams: With fewer team members to spread the workload on, you risk burning out security professionals. Many make the mistake of valuing certifications over wider experiences, which neglects a person’s eagerness to learn or strong transferable skills that could make them a great fit for a cyber career with the right development opportunities. … More →

The post Widening talent pool in cyber with on-demand contractors appeared first on Help Net Security.

In this Help Net Security interview, Bojan Belušić, Head of Information Security & IT Operations at Microblink, discusses the relationship between Privacy by Design and regulatory frameworks like GDPR. Integrating privacy principles from the outset of product and process development ensures compliance and enhances efficiency and effectiveness. He also addresses common challenges organizations face, particularly those with legacy systems, while advocating for a culture of awareness and continuous improvement in privacy and security practices. Belušić … More →

The post Investing in Privacy by Design for long-term compliance appeared first on Help Net Security.

In this Help Net Security interview, Tom McAndrew, CEO at Coalfire, discusses the balance organizations must strike between legal compliance and effective enterprise security governance in the context of evolving regulatory frameworks. McAndrew also addresses the need for clear governance structures and regular board reporting to effectively oversee cyber risks and incident response plans. In light of increasing legal and regulatory frameworks, such as HIPAA and GDPR, how should organizations balance legal compliance with effective … More →

The post Balancing legal frameworks and enterprise security governance appeared first on Help Net Security.

Consumers worldwide are highly concerned about the information companies collect from them – especially when it’s used for AI, according to Cohesity. The majority of respondents (73% in the UK, 81% in the US and 82% in Australia) criticized companies for collecting too much of their personal or financial data. And 9 out of 10 consumers are concerned that AI will impact how companies keep customer data secure. Meeting customers’ growing expectations for better protection … More →

The post Consumers have trust issues regarding how AI collects their data appeared first on Help Net Security.

AI is becoming recognized for its potential to strengthen cybersecurity measures and tackle the skills gap across various sectors. Its ability to streamline data management processes boosts efficiency and strengthens security protocols. However, the rise of GenAI has raised alarms about the effectiveness of traditional data privacy practices, urging a reevaluation of existing strategies. Aaron Fulkerson, CEO of Opaque, discusses how the weaponization of GenAI has made existing data privacy practices (like masking, anonymization, tokenization, … More →

The post What lies ahead for AI in cybersecurity appeared first on Help Net Security.

HiddenLayer launched several new features to its AISec Platform and Model Scanner, designed to enhance risk detection, scalability, and operational control for enterprises deploying AI at scale. As the pace of AI adoption accelerates, so do the threats targeting these systems, necessitating security measures that stay ahead of increasingly sophisticated adversaries. These updates to HiddenLayer’s platform allow organizations to deploy AI models more securely across diverse environments while mitigating critical risks. “It’s vital that security … More →

The post HiddenLayer enhances risk detection for enterprise AI models appeared first on Help Net Security.

Netwrix released a new version of Netwrix Threat Manager. The upgrade expands the product’s capabilities to the cloud environment of Microsoft Entra ID (formerly Azure AD) in addition to on-premises instances of Active Directory (AD). Now, real-time alerting to suspicious activities and automated response to reduce damage is available for on-premises, cloud, and hybrid IT infrastructures. “Based on our beta testing, the added coverage of Entra ID in Netwrix Threat Manager 3.0 shows the real … More →

The post Netwrix Threat Manager 3.0 prevents improper changes in Microsoft Entra ID appeared first on Help Net Security.

If you run a self-managed GitLab installation with configured SAML-based authentication and you haven’t upgraded it since mid-September, do it now, because security researchers have published an analysis of CVE-2024-45409 and an exploit script that may help attackers gain access as any user on GitLab. About CVE-2024-45409 GitLab is a popular software development platform that can be deployed by users on on-premises servers, Kubernetes, or with a cloud provider. CVE-2024-45409 is a critical authentication bypass … More →

The post Exploit code for critical GitLab auth bypass flaw released (CVE-2024-45409) appeared first on Help Net Security.

Commvault launched Cloud Rewind on the Commvault Cloud platform. This offering, which integrates cloud-native distributed application recovery and rebuild capabilities from the Appranix acquisition, gives cloud-first organizations a secret weapon to transform their cyber resilience capabilities. Today, when organizations are attacked, restoring the data is only half the battle. The truly laborious task is actually restoring the distributed cloud applications, which are used to run and power that data. Think of it like this: a … More →

The post Commvault Cloud Rewind helps businesses bounce back from cyber incidents appeared first on Help Net Security.

Frontegg launched Flows, a journey-time orchestration capability that uses generative AI to simplify the creation of advanced customer identity processes. As growing businesses emerge from startup mode and enter scale-up mode, their user identities start to enter the thousands. In addition, managing workflows across multiple applications and often in various programming languages leads to inefficiencies, a high risk of errors, and prolonged development cycles. As a result, identity becomes fraught with business and security risks … More →

The post Frontegg Flows simplifies customer identity processes appeared first on Help Net Security.

Edgio launched Premier Bot Manager, a next-generation bot management solution designed to protect enterprise applications against increasingly sophisticated automated threats. Premier Bot Manager introduces enhanced detection capabilities, AI-powered threat intelligence, and granular categorization of known and unknown bot attacks, providing organizations with comprehensive visibility and defense against bots including credential abusers, scrapers, and DDoS attackers. Building on the success of Edgio’s previous Advanced Bot Management solution that saw wide adoption upon its release, Premier Bot … More →

The post Edgio Premier Bot Manager detects, classifies and mitigates bot traffic appeared first on Help Net Security.

Bitwarden expanded its integration capabilities with the release of a Microsoft Sentinel integration to enhance security information and event management (SIEM) for organizations. Security teams can now monitor, detect, and respond to password management, account access activities, and potential threats in real-time using Microsoft Sentinel’s advanced features. Microsoft Sentinel equips security teams with enhanced visibility into account activity, helping to reduce the attack surface and defend against emerging threats. Enhancing password security and incident response … More →

The post Bitwarden integrates with Microsoft Sentinel to strengthen real-time threat detection appeared first on Help Net Security.

Trulioo launched Trulioo Fraud Intelligence, a new capability that delivers predictive risk insights across more than 195 countries. Trulioo Fraud Intelligence transforms how global businesses fight synthetic and third-party fraud. The capability provides comprehensive coverage across diverse markets by combining hundreds of risk indicators with consortium data, advanced velocity monitoring and real-time signal monitoring, all through a modern, single API. The Trulioo API streamlines integration, reduces time to market and enables developers to access all … More →

The post Trulioo Fraud Intelligence fights fraud during onboarding appeared first on Help Net Security.

Governance, risk, and compliance frameworks are critical. They enable cybersecurity professionals to accurately identify an organization’s risk posture, align business and strategic objectives with technology, and meet compliance responsibilities. However, selecting the right framework can be challenging. Inside this guide to European Union frameworks, you’ll find answers to these questions and more: How does Governance, Risk and Compliance protect organizations? What are the essential GRC frameworks? What frameworks address cybersecurity and privacy? What international frameworks … More →

The post Guide for selecting the right GRC framework, EU edition appeared first on Help Net Security.

Tidal Cyber announced that it now incorporates test results from Breach and Attack Simulation (BAS) tools and other sources to complement the company’s existing Threat-Informed Defense capabilities. With this new integration, Tidal Cyber Enterprise Edition users can gain greater insight into the true state of their defenses as a result of better targeted tests, ultimately completing the cycle of effective defenses and efficient operations. This enhancements provide users with the increased confidence that their threat … More →

The post Tidal Cyber empowers organizations to improve their protection efforts appeared first on Help Net Security.

YARA is a powerful tool designed primarily to aid malware researchers in identifying and categorizing malware samples, though its applications are broader. The tool enables users to create detailed descriptions, or “rules,” for malware families or any other target based on textual or binary patterns. Each rule comprises a collection of strings and a logical expression, forming the criteria for its detection and classification. YARA is a multi-platform tool compatible with Windows, Linux, and macOS. … More →

The post YARA: Open-source tool for malware research appeared first on Help Net Security.