Help Net Security

GenAI is quickly changing the software development process by automating tasks that once took developers hours, if not days, to complete, bolstering efficiency and productivity, according to Legit Security. “As GenAI transforms software development and becomes increasingly embedded in the development lifecycle, there are some real security concerns among developers and security teams,” said Liav Caspi, CTO at Legit. “Our research found that teams are challenged with balancing the innovations of GenAI and the risks … More →

The post Overreliance on GenAI to develop software compromises security appeared first on Help Net Security.

Microsoft is enhancing its bug bounty initiatives with the launch of the Zero Day Quest hacking event. With $4 million in potential rewards, it focuses on driving research in critical areas such as cloud computing and AI. Event focus The event invites security researchers to discover and report high-impact vulnerabilities in Microsoft AI and Cloud Bounty Programs: AI, Microsoft Azure, Microsoft Identity, M365, Microsoft Dynamics 365, and Power Platform. “To advance AI security, we will … More →

The post Microsoft announces Zero Day Quest hacking event with big rewards appeared first on Help Net Security.

Microsoft has implemented some and is working on delivering several other security-related features and improvements for Windows 11. Administrator protection will allow users to make system changes on their PCs without having administrator rights (that can be abused by attackers who have compromised the system). “With administrator protection, if a system change requires administrator rights, like some app installations, the user is prompted to securely authorize the change using Windows Hello. Windows creates a temporary … More →

The post Microsoft announces new and improved Windows 11 security features appeared first on Help Net Security.

Microsoft has announced the Windows Resiliency Initiative, aimed at avoiding a repeat of the prolonged worldwide IT outage caused by a buggy CrowdStrike update that took down millions of Windows machines and rendered them remotely unfixable. As part of that initiative, the company has announced that its working on Quick Machine Recovery, a feature that “will enable IT administrators to execute targeted fixes from Windows Update on PCs, even when machines are unable to boot, … More →

The post Microsoft plans to boot security vendors out of the Windows kernel appeared first on Help Net Security.

Microsoft unveiled Windows 365 Link, their first purpose-built Cloud PC device for instant, secure connection to Windows 365. Sign-in screen with USB security key option (Source: Microsoft) Windows 365 Link prioritizes security “We have heard concerns from IT pros about the vulnerability of endpoints that store local data, house applications, and allow users administrative privileges on devices,” said Microsoft. Windows 365 Link features a secure, locked-down OS with no local data, apps, or admin rights, … More →

The post Windows 365 Link Cloud PC: Connect securely to Windows 365 appeared first on Help Net Security.

Cross-IdP impersonation – a technique that enables attackers to hijack the single sign-on (SSO) process to gain unauthorized access to downstream software-as-a-service (SaaS) applications without compromising a company’s primary identity provider (IdP) – is expected to gain popularity with attackers, according to Push Security researchers. What is cross-IdP impersonation? Cross-IdP impersonation exploits a flaw in SSO configurations by allowing attackers to create fraudulent IdP accounts matching an organization’s domain, which are then used to access … More →

The post Cross-IdP impersonation bypasses SSO protections appeared first on Help Net Security.

Tanium unveiled new AI-powered autonomous innovations that transform how IT and Security teams execute change safely and reliably in their IT environments – at scale and in real-time. Tanium Autonomous Endpoint Management (AEM) enhances and extends the Tanium platform with a set of autonomous capabilities across the industry’s most comprehensive real-time platform, which includes asset discovery and inventory, vulnerability management, endpoint management, incident response, and digital employee experience. “Tanium AEM leverages real-time insights from millions … More →

The post Tanium delivers autonomous controls that mitigate risk and maintain operational resiliency appeared first on Help Net Security.

Onapsis announced the Onapsis Secure RISE Accelerator, helping organizations execute their RISE with SAP transformation with confidence. The new offering reduces security and compliance obstacles with a structured, bundled solution that simplifies and accelerates an organization’s project planning and execution with SAP-endorsed technology, threat insights and comprehensive SAP cybersecurity expertise and best practices. As companies increasingly choose the RISE with SAP program to move to the cloud and modernize their SAP environments, security and compliance … More →

The post Onapsis Secure RISE Accelerator streamlines security elements of modern SAP deployments appeared first on Help Net Security.

ReasonLabs launched Online Security platform for Android and iOS, available for download on the Google Play Store and Apple App Store. This marks a significant milestone in ReasonLabs’ mission to deliver a comprehensive security platform that empowers over 25 million users with protection for their devices, identities, and privacy. ReasonLabs’ platform, already recognized for its identity and device protection delivered on desktops, now extends its availability to mobile devices. Americans lost more than $12.5 billion … More →

The post ReasonLabs launches Online Security platform for Android and iOS appeared first on Help Net Security.

Hornetsecurity launched DMARC Manager, an advanced tool addresses the complex challenges organisations face in managing DMARC, DKIM, and SPF configurations, especially for those operating across multiple domains. As email threats such as fraud and impersonation attacks continue to rise, the need for robust email authentication practices has never been more critical. DMARC Manager is designed to empower administrators and CISOs by providing an intuitive solution for setting up and maintaining best practices in email authentication. … More →

The post Hornetsecurity DMARC Manager protects against fraud and phishing attacks appeared first on Help Net Security.

Splunk announced its enterprise security, observability and platform offerings on Microsoft Azure. In partnering with Microsoft, Splunk empowers organizations to scale their digital transformation on Azure with unified solutions that accelerate innovation and strengthen security. “Splunk’s strategic partnership with Microsoft to build Splunk natively on Azure demonstrates our commitment to advancing digital resilience to help our customers and partners remain secure and up and running at every step of their cloud journey,” said Tom Casey, … More →

The post Splunk simplifies infrastructure requirements for Microsoft Azure customers appeared first on Help Net Security.

Oracle has released a security patch for CVE-2024-21287, a remotely exploitable vulnerability in the Oracle Agile PLM Framework that is, according to Tenable researchers, being actively exploited by attackers. About CVE-2024-21287 Oracle Agile PLM Framework is an enterprise product lifecycle management solution that enables collaboration between the various teams involved. CVE-2024-21287 affects version 9.3.6 of the Agile PLM Framework – more specifically, the Agile Software Development Kit and the Process Extension components. “This vulnerability is … More →

The post Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287) appeared first on Help Net Security.

The Justice Department unsealed criminal charges against Evgenii Ptitsyn, 42, a Russian national, for allegedly administering the sale, distribution, and operation of Phobos ransomware. Ptitsyn made his initial appearance in the US District Court for the District of Maryland on Nov. 4 after being extradited from South Korea. Phobos ransomware, through its affiliates, victimized more than 1,000 public and private entities in the United States and around the world, and extorted ransom payments worth more … More →

The post Phobos ransomware administrator faces US cybercrime charges appeared first on Help Net Security.

Aon launched its Cyber Risk Analyzer, a digital application that allows risk managers to make data-driven, technology-enabled decisions to mitigate cyber risk. The tool is the latest in a series of new offerings, which brings together Aon’s data, tools and analytics professionals to support clients through an evolving risk landscape across sectors. “As cyber threats continue to grow in frequency, sophistication and severity, organizations face an array of complex risks—from ransomware and business interruption to … More →

The post Aon Cyber Risk Analyzer empowers organizations to evaluate cyber risk appeared first on Help Net Security.

AlmaLinux is a free, open-source, enterprise-grade Linux distribution. Governed and owned by the community, it offers a production-ready platform with binary compatibility to Red Hat Enterprise Linux. AlmaLinux 9.5, codenamed Teal Serval, is now available. Security updates: The OpenSSL TLS toolkit is upgraded to version 3.2.2. OpenSSL now supports certificate compression extension (RFC 8879) and Brainpool curves have been added to the TLS 1.3 protocol (RFC 8734). The SELinux policy now provides a boolean that … More →

The post AlmaLinux 9.5 released: Security updates, new packages, and more! appeared first on Help Net Security.

Belden announces new network and data infrastructure products designed for secure, high-quality performance in critical applications. Data orchestration & management Hirschmann EAGLE40-6M Train Firewalls meet the demands of railway rolling stock with industrial firewall capabilities and multiple industry-relevant certifications. Their robust design allows them to withstand moving trains while providing maximum data security by performing deep packet inspection of onboard rolling stock communication protocols. Hirschmann OpEdge-4D Industrial Edge Gateways feature hazardous location approvals and run … More →

The post Belden announces products designed to enhance data security appeared first on Help Net Security.

The age-old tension between development and security teams has long been a source of friction in organizations. Developers prioritize speed and efficiency, aiming to deliver features and products quickly with a fast-paced, iterative development cycle and move on efficiently. On the other hand, security teams strive to balance risk and innovation but must focus on protecting sensitive data and systems with guardrails and ensuring compliance with stringent regulations. These contrasting priorities and communication gaps lead … More →

The post Dev + Sec: A collaborative approach to cybersecurity appeared first on Help Net Security.

In this Help Net Security interview, Riaz Lakhani, CISO at Barracuda Networks, discusses the effectiveness of AI-based behavioural analysis in combating sophisticated email threats like BEC and VEC. Lakhani also explains how AI tools help detect malicious email activity and address the limitations of traditional security measures. How effective is AI based behavioural analysis in combating sophisticated email threats like BEC and supply chain VEC, and what are its limitations? Attackers can leverage generative AI … More →

The post Why AI alone can’t protect you from sophisticated email threats appeared first on Help Net Security.

We’re often told to use strong, unique passwords, especially for important accounts like email, banking, and social media. However, managing different passwords for numerous accounts can be challenging. Password managers simplify this by securely storing all your passwords so you don’t have to remember them. In this article, you’ll find a list of free, open-source password managers for Android devices worth checking out. KeyGo KeyGo is a secure, open-source password manager for Android that encrypts … More →

The post Open-source and free Android password managers that prioritize your privacy appeared first on Help Net Security.

Google’s latest report, conducted in partnership with Hypothesis Group, reveals a stark reality for organizations: incremental security measures are no longer sufficient. The study, involving over 2,000 decision-makers across the US, UK, India, and Brazil, paints a picture of escalating risks, outdated strategies, and a pressing need for transformative change. The status quo is unsustainable Despite high confidence among security leaders (96% feel capable of managing their environments), a gap exists between perception and reality. … More →

The post Google report shows CISOs must embrace change to stay secure appeared first on Help Net Security.