Help Net Security

According to Gartner, the market for cloud computing services is expected to reach $675 billion in 2024. Companies are shifting from testing the waters of cloud computing to making substantive investments in cloud-native IT, and attackers are shifting with them. As security teams level up to support the transition, we’re seeing three specific issues that impede cloud detection and response. 1) Cloud-native IT blurs the lines between layers of the cloud stack – it’s a … More →

The post Three hard truths hindering cloud-native detection and response appeared first on Help Net Security.

In this Help Net Security interview, Andrius Popovas, Chief Risk Officer at Mano Bank, discusses the most prevalent AI-driven fraud schemes, such as phishing attacks and deepfakes. He explains how AI manipulates videos and audio to deceive victims and highlights key red flags to watch for. Popovas also outlines strategies for professionals to stay ahead of these scams and the role of governments in combating AI fraud. What types of AI-driven fraud schemes are most … More →

The post Spotting AI-generated scams: Red flags to watch for appeared first on Help Net Security.

The latest Apple OS updates (iOS 18, iPadOS 18, macOS Sequoia) have introduced a standalone Passwords app, to make users’ passwords, passkeys, Wi-Fi passwords, and verification codes easily accessible. You can access the Passwords app on your iPhone, iPad, Mac, Apple Vision Pro, and on Windows via the iCloud for Windows app. All passwords sync securely with iCloud Keychain, enabling you to access them across your devices. If you use AutoFill, you can make it … More →

The post How to use the Apple Passwords app appeared first on Help Net Security.

Rigid security protocols — such as complex authentication processes and highly restrictive access controls — can frustrate employees, slow productivity and lead to unsafe workarounds, according to Ivanti. Understanding workplace behavior key to strengthening security In fact, one in two office workers admit to using personal devices to log into work networks, with 32% of them revealing their employers are unaware of this practice. Yet, just 13% of security professionals say user experience (UX) for … More →

The post 15% of office workers use unsanctioned GenAI tools appeared first on Help Net Security.

Ransomware attacks have seen a significant resurgence, disrupting multiple sectors and affecting global supply chains. Despite efforts to disrupt major ransomware groups, incidents continue to rise, signaling an ongoing and growing threat into 2024. In this Help Net Security round-up, industry experts discuss the rise in ransomware attacks, their impact on critical systems like Microsoft Active Directory, and the growing resilience of the threat despite ongoing mitigation efforts. Craig Birch, Technology Evangelist, and Principal Security … More →

The post Ransomware activity shows no signs of slowing down appeared first on Help Net Security.

The cybersecurity skills gap presents ongoing challenges worldwide, so organizations are scrambling to fill cloud security positions. Having a subject matter expert on staff qualified to advise on cloud security requirements is more important now than ever. Because of this demand, cybersecurity professionals are presented with promising career opportunities when they specialize in cloud security. Learn more in the whitepaper, including: Why demand for multicloud security professionals is exploding How continuous learning benefits cyber professionals … More →

The post Whitepaper: Reach higher in your career with cloud security appeared first on Help Net Security.

Venafi introduced new product capabilities in its Control Plane for Machine Identities. This latest version of the Venafi Control Plane will enable security and platform teams to address the most critical machine identity security challenges and help future-proof their organizations, including post-quantum readiness, cloud-to-cloud connectivity and workload identity security. “As today’s security landscape continues to rapidly evolve with multi-cloud and post-quantum readiness as key concerns, security professionals and developers alike are faced with new, emerging … More →

The post Venafi helps organizations solve more machine identity security problems appeared first on Help Net Security.

Metomic released its Data Classification solution, making it possible to discover, classify and secure sensitive data at scale across Google Workspaces. Metomic’s latest innovation is an AI-powered tool that automates complex data management workflows, enabling IT and security teams to maintain control of their data while also ensuring data compliance across cloud-based storage and SaaS environments. Without accurate data classification, businesses can’t prioritize risk, address vulnerabilities or implement effective security measures at scale downstream. With … More →

The post Metomic Data Classification automates complex data management workflows appeared first on Help Net Security.

PlexTrac announced significant enhancements to its platform. These updates are designed to help enterprises and security service providers harness proactive security by offering business context, automating risk scoring to focus on what matters most, streamlining remediation workflows with event-driven interoperability, and measuring the effectiveness of proactive security measures in mitigating risk over time. These new capabilities allow customers and partners to make significant strides in automating the Continuous Threat Exposure Management (CTEM) lifecycle as part … More →

The post PlexTrac unveils new capabilities to prioritize proactive security remediation appeared first on Help Net Security.

Concentric AI announced an AI-based DSPM functionality that identifies data access and activity risk from Copilot requests. With this launch, enterprises can now for leverage AI-driven DSPM to track, monitor and seamlessly enforce access governance around Copilot activity and abnormal user requests, as well as remediate those scenarios to prevent data loss. “Enterprises looking to roll out Copilot are worried that sensitive data can be accessed inappropriately by end users from all of these interactions,” … More →

The post Concentric AI helps monitor and remediate risky Copilot activity appeared first on Help Net Security.

Harmonic Security has secured $17.5 million in Series A funding to bring its “zero-touch data protection” capabilities to enterprises. Total funding has now reached more than $26 million since the company launched in October last year with enterprise customers already in double figures. Harmonic Security has built a completely new approach to data protection using pre-trained, specialized language models. The Series A round is being led by Next47, a leading venture capital firm that has … More →

The post Harmonic Security raises $17.5 million to improve data security for organizations appeared first on Help Net Security.

Attackers are actively exploiting CVE-2024-45519, a critical Zimbra vulnerability that allows them to execute arbitrary commands on vulnerable installations. Proofpoint’s threat researchers say that the attacks started on September 28 – several weeks after Zimbra developers released patches for CVE-2024-45519 and other flaws, and a day after ProjectDiscovery’s analysts published a detailed technical write-up about the vulnerability and a PoC exploit to demonstrate the potential for local exploitation. Other researchers have published PoCs on GitHub … More →

The post Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519) appeared first on Help Net Security.

The third phase of Operation Cronos, which involved officers from the UK National Crime Agency (NCA), the FBI, Europol and other law enforcement agencies, has resulted in the arrest of four persons for allegedly participating in the LockBit ransomware-as-a-service operation in various roles. “A suspected developer of LockBit was arrested at the request of the French authorities, while the British authorities arrested two individuals for supporting the activity of a LockBit affiliate,” Europol announced on … More →

The post 4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed appeared first on Help Net Security.

Catalogic Software announced the newest version of Catalogic DPX, the company’s enterprise data protection software. DPX 4.11 provides enhanced capabilities in data recovery and data security. With this new release, Catalogic DPX continues to increase its customers ability to avoid follow on security incidents, ensuring a fast return to production. The latest version of DPX has features that offer: Enhanced data security and compliance Data security is elevated by integrating built-in immutability through features like … More →

The post Catalogic DPX 4.11 strengthens data security appeared first on Help Net Security.

Balbix unveild Balbix D3, the latest version of its exposure management platform. Packed with AI innovations, Balbix D3 is designed to help cybersecurity teams mitigate critical exposures faster than ever before, protecting organizations against emerging threats before attackers can exploit them. AI-powered Workflows to speed up risk burndown At the core of Balbix D3 lies a deep focus on mobilizing organizations for rapid cyber risk reduction. Using AI, Balbix D3 enables security and IT teams … More →

The post Balbix D3 accelerates vulnerability mitigation appeared first on Help Net Security.

Safe Security launched SAFE X, a generative AI-powered mobile app for CISOs. SAFE X delivers CISOs real-time business impact insights into their cybersecurity posture, enabling better decision-making and risk prioritization. CISOs often invest millions of dollars in building their cyber stacks, yet they lack critical business impact insights to prioritize and protect their organization effectively. Instead, they are bogged down by a patchwork of manual reports and outdated dashboards that lack business context and offer … More →

The post SAFE X equips CISOs with integrated data from all their existing cybersecurity products appeared first on Help Net Security.

Simple bots have existed since the early to mid-2000s when organizations had no means to protect themselves or their website’s users from them. Yet today, despite having tools to protect against these simple bots, two in three organizations have made no progress compared to two decades ago. In this Help Net Security video, Antoine Vastel, VP of Research at DataDome, explains what bots mean for businesses and consumers online.

The post What bots mean for businesses and consumers appeared first on Help Net Security.

66% of cybersecurity professionals say their role is more stressful now than it was five years ago, according to ISACA. Major contributors to rising stress levels among cybersecurity professionals According to the data, the top reasons for increased stress among cybersecurity professionals are: An increasingly complex threat landscape (81%) Low budget (45%) Worsening hiring/retention challenges (45%) Insufficiently trained staff (45%) Lack of prioritization of cybersecurity risks (34%). In line with this sentiment around challenging threats, … More →

The post Cybersecurity hiring slows, pros’ stress levels rise appeared first on Help Net Security.

As an integral part of the Halcyon Anti-Ransomware Platform, Halcyon Linux offers protection against ransomware attacks targeting Linux systems. While ransomware operators were once almost exclusively focused on targeting Windows environments, the introduction of Linux variants represents a significant expansion of the addressable target range. In 2023, Linux-based ransomware attacks increased by 75% yet Linux-based systems and endpoints are often overlooked and without ransomware defenses. “When it comes to ransomware protection, organizations typically prioritize securing … More →

The post Halcyon offers ransomware protection for Linux environments appeared first on Help Net Security.

Exabeam announced its first quarterly product release since merging with LogRhythm. The latest innovations provide global customers with increased flexibility to choose the security solutions that best meet their specific needs based on infrastructure, regulatory requirements, and operational preference. The release also introduces LogRhythm Intelligence, an all-new offering that combines AI capabilities from Exabeam with LogRhythm’s renowned self-hosted SIEM platform to deliver advanced behavior analytics for more effective threat detection, investigation, and response (TDIR). “Our … More →

The post Exabeam introduces AI-driven LogRhythm Intelligence appeared first on Help Net Security.