Help Net Security

The National Institute of Standards and Technology (NIST) is clearing the backlog of unprocessed CVE-numbered vulnerabilities in the National Vulnerability Database (NVD), but has admitted that their initial estimate of when they would finish the job was “optimistic”. About the NVD The National Vulnerability Database is a public repository of vulnerabilities that have been published on MITRE’s CVE List. “NVD staff are tasked with enrichment of CVEs by aggregating data points from the description, references … More →

The post NIST is chipping away at NVD backlog appeared first on Help Net Security.

Versa introduced the VersaONE Universal SASE Platform to enhance security and networking capabilities across WAN, LAN, data centers, and cloud. Powered by AI, VersaONE delivers converged SASE, SSE, SD-WAN, and SD-LAN products via a unified platform to securely connect all users, devices, locations, and workloads across any and all networks. No other vendor provides this comprehensive range of secure connectivity products from a single platform. VersaONE enables customers to reduce risk and improve resilience, while … More →

The post VersaONE unifies security and networking into a single, centrally managed platform appeared first on Help Net Security.

Google has announced new security features for Android that provide real-time protection against scams and harmful apps. These features, powered by advanced on-device AI, enhance user safety without compromising privacy. These new security features are available first on Pixel and are coming soon to more Android devices. Scam Detection One of the key features is Scam Detection, which leverages on-device AI to identify potential scam calls in real-time. This feature analyzes conversation patterns to detect … More →

The post Google launches on-device AI to alert Android users of scam calls in real-time appeared first on Help Net Security.

After months of news reports that Chinese threat actors have breached the networks of US telecommunications and internet service providers, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have confirmed the success of the attacks, which were part of a “broad and significant cyber espionage campaign.” “Specifically, we have identified that PRC-affiliated actors have compromised networks at multiple telecommunications companies to enable the theft of customer call records data, the compromise of private … More →

The post FBI confirms China-linked cyber espionage involving breached telecom providers appeared first on Help Net Security.

CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since at least April 2024, ClearSky researchers have revealed. About the vulnerability CVE-2024-43451 affects all supported Windows versions and, when triggered, discloses a user’s NTLMv2 hash to the attacker, who can then use it to either mount pass the hash attacks or extract the user’s password from the hash. The result is in both cases the … More →

The post How a Windows zero-day was exploited in the wild for months (CVE-2024-43451) appeared first on Help Net Security.

Red Hat announced Red Hat Enterprise Linux 9.5. Red Hat Enterprise Linux helps organizations deploy applications and workloads more quickly and with greater reliability, enabling them to lower costs and more effectively manage workloads across hybrid cloud deployments while mitigating IT risks, from the datacenter to public clouds to the edge. According to IDC, “Organizations continue to find themselves at odds with striking the balance between maintaining their Linux operating system environments and the workloads … More →

The post Red Hat Enterprise Linux 9.5 helps organizations simplify operations appeared first on Help Net Security.

Google Cloud unveiled its Cybersecurity Forecast for 2025, offering a detailed analysis of the emerging threat landscape and key security trends that organizations worldwide should prepare for. The report delivers insights into the tactics of cyber adversaries, providing advice for increasing security posture in the coming year. The year of AI-driven cyberattacks The report highlights a shift in the cybersecurity landscape: the rise of artificial intelligence (AI) as a double-edged sword. While AI offers new … More →

The post Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage appeared first on Help Net Security.

In this Help Net Security interview, Arun Gupta, Vice President and General Manager for Open Ecosystem, Intel, discusses the company’s commitment to fostering an open ecosystem as a cornerstone of its software strategy. He explains how this approach empowers developers and shapes Intel’s broader technology and business objectives, enhancing platform innovation. Gupta emphasizes that by actively participating in open-source initiatives, Intel aims to lower complexity and improve security, ultimately enabling developers to create impactful solutions … More →

The post How Intel is making open source accessible to all developers appeared first on Help Net Security.

A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. Zero-day vulnerabilities on the rise The advisory highlights that malicious cyber actors increasingly targeted zero-day vulnerabilities, posing significant threats to enterprise networks. Notably, the exploitation of these zero-days rose compared to 2022. Unlike previous years, where older, unpatched vulnerabilities dominated the list, 2023 saw a spike in zero-day exploits, reflecting … More →

The post Zero-days dominate top frequently exploited vulnerabilities appeared first on Help Net Security.

In this Help Net Security video, David Cottingham, President of rf IDEAS, discusses what he sees as the most prominent areas for improvement and continued change in the space: As we move into 2025, it’s evident that businesses recognize MFA as essential. The next step is implementing MFA seamlessly, ensuring employees’ ease of use. Traditional methods, like sending a PIN to a mobile phone, are cumbersome and vulnerable to theft. As for authenticators, typing in … More →

The post What 2025 holds for user identity protection appeared first on Help Net Security.

Security leaders feel under increasing pressure to provide assurances around cybersecurity, exposing them to greater personal risk – yet many lack the data and resources to accurately report and close cybersecurity gaps, according to Panaseer. The report analyses the findings of a survey of 400 security decision makers (SDMs) across the US and UK. Security leaders turn to indemnity insurance for protection 61% of organizations have suffered a security breach in the past year because … More →

The post How cybersecurity failures are draining business budgets appeared first on Help Net Security.

Vectra AI announced the extension of the Vectra AI Platform to include comprehensive coverage for customers’ Microsoft Azure environments. With the addition of over 40 unique attacker behavior detections for Microsoft Azure, Vectra AI now delivers over 100 AI-driven attacker behavior detections. Now, Microsoft customers achieve comprehensive hybrid and multi-cloud defense for their entire Microsoft environment – Microsoft Active Directory, Microsoft Entra ID, Microsoft M365, Microsoft Copilot for M365 and now Microsoft Azure. According to … More →

The post Vectra AI adds AI-powered detections to help secure Microsoft customers appeared first on Help Net Security.

Cequence Security announced its new API Security Assessment Services. Designed to provide immediate, actionable insights into API security risks, these time-bound and fixed services leverage Cequence’s advanced Unified API Protection platform, enabling companies to identify and address security gaps within their existing infrastructure. As digital transformation accelerates, the reliance on APIs introduces new security challenges. Cequence’s assessment services provide a clear and comprehensive view of an organization’s API environment, helping identify hidden risks and comply … More →

The post Cequence Security enables organizations to elevate their API defenses appeared first on Help Net Security.

Absolute Security launched Enterprise Edition, combining the new Safe Connect for Secure Access and Comply Module for Secure Endpoint. With these innovations, Enterprise Edition is the comprehensive Security Service Edge (SSE) that can ensure only secure and compliant devices are accessing corporate networks, while delivering an optimized user experience for remote and hybrid workers. Backed by firmware-embedded resilience, customers are assured their SSE remains resilient, always on, and fully operational. “Hybrid work, complexity, ransomware, and … More →

The post Absolute Security releases Enterprise Edition appeared first on Help Net Security.

Researchers discovered GoIssue, a new phishing tool targeting GitHub users, designed to extract email addresses from public profiles and launch mass email attacks. Marketed on a cybercrime forum, GoIssue allows attackers to send bulk emails while keeping their identity hidden using proxies. The tool’s capabilities extend beyond simple phishing, posing a threat to entire organizations by potentially hijacking developer accounts and accessing private repositories. GoIssue may be linked to the GitLoker extortion campaign, which uses … More →

The post GoIssue phishing tool targets GitHub developer credentials appeared first on Help Net Security.

Check Point Software’s latest threat index reveals a significant rise in infostealers like Lumma Stealer, while mobile malware like Necro continues to pose a significant threat, highlighting the evolving tactics used by cybercriminals across the globe. Last month researchers discovered an infection chain where fake CAPTCHA pages are being utilized to distribute Lumma Stealer malware, which has climbed to 4th place in the monthly top malware rankings. This campaign is notable for its global reach, … More →

The post Infostealers increasingly impact global security appeared first on Help Net Security.

Rakuten Viber has launched new solutions to further protect communication on the platform. Businesses can now quickly authenticate users to enhance trust and reduce fraud, making interactions more secure. Verification messages provide a secure and seamless way to authenticate clients through one-time passwords (OTPs). With ready-made templates designed to increase conversions, businesses can send encrypted OTPs at lower costs than SMS and at a pre-defined delivery time. When users receive a Viber verification message, they … More →

The post Rakuten Viber unveils new security solutions for businesses appeared first on Help Net Security.

Nirmata launched Nirmata Control Hub, a comprehensive platform designed to prevent misconfigurations and automate security through policy-as-code. As Artificial Intelligence (AI) accelerates the adoption of Kubernetes and cloud-native technologies, enterprises are increasingly facing security challenges due to the growing complexity of their infrastructures. This rapid expansion has introduced new risks around misconfigurations, vulnerabilities, and security breaches, which Nirmata Control Hub is designed to mitigate. By unifying security, compliance, and automation, Nirmata Control Hub offers platform … More →

The post Nirmata Control Hub automates security with policy-as-code appeared first on Help Net Security.

It’s not just North Korean hackers who reach out to targets via LinkedIn: since at least September 2023, Iranian threat actor TA455 has been trying to compromise workers in the aerospace industry by impersonating job recruiters on the popular employment-focused social media platform. “By leveraging LinkedIn, a platform inherently built on trust and professional connections, TA455 seeks to gain credibility and avoid raising suspicion. Their use of fake recruiter profiles associated with fabricated companies further … More →

The post Aerospace employees targeted with malicious “dream job” offers appeared first on Help Net Security.

Cisco introduces new intelligent, secure and assured wireless innovations, with smart Wi-Fi 7 access points and unified subscription licensing that can enable smart spaces out-of-the-box. These innovations empower customers to solve for their connectivity, security and assurance challenges, while also providing a flexible foundation to future-proof their workplaces. Wireless technologies have reshaped the world, from how and where work gets done, to how people shop and learn. Today, wireless innovations continue to blur the lines … More →

The post Cisco introduces Wi-Fi 7 access points to enhance employee and customer experiences appeared first on Help Net Security.