Help Net Security

Here’s a look at the most interesting products from the past week, featuring releases from Atakama, Authlete, Symbiotic Security, and Zywave. Atakama introduces DNS filtering designed for MSPs Atakama announced the latest expansion of its Managed Browser Security Platform, introducing DNS filtering explicitly designed for Managed Service Providers (MSPs). This new feature enables comprehensive in-browser and network-level filtering, providing a full-spectrum DNS solution that secures browsers and entire network environments. Zywave enhances Cyber Quoting to … More →

The post New infosec products of the week: November 8, 2024 appeared first on Help Net Security.

Fortinet announced the expansion of GenAI capabilities across its product portfolio with the launch of two new integrations with FortiAI, Fortinet’s AI-powered security assistant that uses GenAI to guide, simplify, and automate security analyst activities. “Our commitment to AI innovation is reflected in our expansion of generative AI, which now enhances seven different products across our portfolio,” said John Maddison, CMO at Fortinet. “By integrating FortiAI in such a broad range of solutions, we’re equipping … More →

The post Fortinet expands GenAI capabilities across its portfolio with two new additions appeared first on Help Net Security.

Malwarebytes announced the acquisition of AzireVPN, a renowned privacy-focused VPN provider. Malwarebytes has long been a defender of user privacy through its portfolio of consumer solutions, including Malwarebytes Privacy VPN and its free ad and scam blocker web extension Malwarebytes Browser Guard. This acquisition further supports the company’s mission to reimagine consumer cybersecurity to protect devices and data, no matter where users are located, how they work and play, or the size of their wallet. … More →

The post Malwarebytes acquires AzireVPN to boost security for customers appeared first on Help Net Security.

Drawbridge is debuting a real-time executive summary of a manager’s cyber risk program. The aim is to enable alternative investment managers (alts managers) to strengthen executive confidence in their firm’s cyber posture by working with their Drawbridge cybersecurity experts. General partners and board members can use these insights to quickly assess vulnerabilities and make resourcing decisions. Through its existing client hub, an executive summary offers a consolidated view of essential, actionable insights into cybersecurity governance, … More →

The post Drawbridge simplifies cyber governance for alternative investment firms appeared first on Help Net Security.

A recent spear-phishing campaign targeting industrial and engineering companies in Europe was aimed at saddling victims with the popular GuLoader downloader and, ultimately, a remote access trojan that would permit attackers to steal information from and access compromised computers whenever they wish. “The emails are sent from various email addresses including from fake companies and compromised accounts. The emails typically hijack an existing email thread or request information about an order,” Tara Gould, Threat Research … More →

The post Industrial companies in Europe targeted with GuLoader appeared first on Help Net Security.

AudioEye launched Accessibility Protection Status, a new benchmark in digital accessibility compliance that empowers businesses to achieve better transparency, clarity, and control over their digital accessibility efforts. With a more accurate representation of accessibility efforts beyond arbitrary numerical scores, the Accessibility Protection Status provides companies with a clear path for digital accessibility compliance. “This innovation builds on our legacy as pioneers in digital accessibility and reflects our ongoing commitment to proactive, comprehensive solutions that help … More →

The post AudioEye Accessibility Protection Status identifies high-impact areas for improvement appeared first on Help Net Security.

North Korean hackers are targeting crypto-related businesses with phishing emails and novel macOS-specific malware. The crypto-related phishing campaign Since July 2024, phishing emails seemingly containing helpful information on risks related to the rise of the price of Bitcoin have been sent to intended victims in cryptocurrency-related industries, SentinelLabs researchers have found. The phishing email (Source: SentinelLabs) The email urges the recipient to click on the “Open” button to download a PDF file, but doing that … More →

The post North Korean hackers employ new tactics to compromise crypto-related businesses appeared first on Help Net Security.

Cisco has fixed a critical command injection vulnerability (CVE-2024-20418) affecting its Ultra-Reliable Wireless Backhaul (URWB) Access Points that can be exploited via a HTTP requests and allows complete compromise of the devices. There are no workarounds to address this flaw, though vulnerable access points can be protected by switching off URWB mode, the company shared in the advisory. The good news is that the vulnerability was discovered by a Cisco employee during internal security testing … More →

The post Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418) appeared first on Help Net Security.

Zywave announced an enhancement to its Cyber Quoting solution with the addition of embedded benchmarking. Brokers can now leverage industry data and loss profiles from similar organizations to provide their clients with more sophisticated insight into coverage limit adequacy and potential loss gaps. Launched in April 2024, Cyber Quoting is a centralized quoting platform that brings together global cyber insurers and U.S. distributors, connecting them through a simplified, transparent submission process that provides key insights … More →

The post Zywave enhances Cyber Quoting to provide insight into coverage limit adequacy and potential loss gaps appeared first on Help Net Security.

In this Help Net Security interview, Buzz Hillestad, CISO at Prismatic, discusses how AI’s advancement reshapes cybercriminal skillsets and lowers entry barriers for potential attackers. Hillestad highlights that, as AI tools become more accessible, organizations must adapt their defenses to anticipate evolving threats. How might the development of AI technology impact the skillsets required for cybercriminals? Will AI lower the barrier to entry for potential attackers? The development of AI technology will dramatically shift the … More →

The post How AI will shape the next generation of cyber threats appeared first on Help Net Security.

AWS offers a comprehensive suite of security tools to help organizations manage compliance, protect sensitive data, and detect threats within their environments. From AWS Security Hub and Amazon GuardDuty to Amazon Macie and AWS Config, each tool is vital in enhancing visibility, automating responses, and maintaining a secure cloud infrastructure. This article explores these AWS security essentials, providing insights into how they work together to protect cloud environments from potential risks and ensure robust compliance. … More →

The post AWS security essentials for managing compliance, data protection, and threat detection appeared first on Help Net Security.

In September 2024, the Federal Trade Commission (FTC) released an eye-opening report that digs into the data habits of nine major tech giants, including Amazon (Twitch), ByteDance (TikTok), Discord, Facebook, Reddit, Snap, Twitter, WhatsApp, and YouTube. The findings reveal extensive, often unsettling, data aggregation practices that go beyond user expectations and present considerable privacy risks. This article breaks down key privacy challenges and offers practical guidance to help organizations safeguard consumer data in today’s complex … More →

The post Consumer privacy risks of data aggregation: What should organizations do? appeared first on Help Net Security.

Google has announced that, by the end of 2025, multi-factor authentication (MFA) – aka 2-step verification – will become mandatory for all Google Cloud accounts. “Given the sensitive nature of cloud deployments — and with phishing and stolen credentials remaining a top attack vector observed by our Mandiant Threat Intelligence team — we believe it’s time to require [2-step verification] for all users of Google Cloud,” said Mayank Upadhyay, VP of Engineering and Distinguished Engineer, … More →

The post All Google Cloud users will have to enable MFA by 2025 appeared first on Help Net Security.

Atakama announced the latest expansion of its Managed Browser Security Platform, introducing DNS filtering explicitly designed for Managed Service Providers (MSPs). This new feature enables comprehensive in-browser and network-level filtering, providing a full-spectrum DNS solution that secures browsers and entire network environments. Atakama’s Managed Browser Security Platform transforms the browser into a secure foundation, empowering MSPs with enhanced visibility and control over client web activity. The platform now includes advanced capabilities such as category-based filtering … More →

The post Atakama introduces DNS filtering designed for MSPs appeared first on Help Net Security.

A new ransomware dubbed GoZone is being leveraged by attackers that don’t seem to be very greedy: they are asking the victims to pay just $1,000 in Bitcoin if they want their files decrypted. The GoZone HTML ransom note (Source: SonicWall) The ransom notes shown by the malware lay out another incentive for paying up: they claim that child sexual abuse material has been found on the targeted computer and urge the victim to pay … More →

The post GoZone ransomware accuses and threatens victims appeared first on Help Net Security.

Authlete launched Authlete 3.0, offering support for OpenID for Verifiable Credential Issuance (OID4VCI). This new capability empowers organizations—including governments, financial institutions, and educational establishments—to revolutionize how they issue and manage user credentials. With the introduction of Authlete 3.0, Authlete now offers a simple API solution for quickly issuing interoperable verifiable credentials (VCs) conformant with OID4VCI. Built on OAuth and OIDC—proven and widely used global standards for authentication and authorization—OID4VCI supports various credential formats, including SD-JWT … More →

The post Authlete 3.0 empowers organizations to improve how they issue and manage user credentials appeared first on Help Net Security.

Symbiotic Security launched a real-time security for software development that combines detection and remediation with just-in-time training – incorporating security testing and training directly into the development process without breaking developers’ workflows. Backed with $3 million of seed funding from investors including Lerer Hippeau, Axeleo Capital, Factorial Capital, and others, the company has introduced its software-as-a-service that works with the developer’s Integrated Development Environment (IDE) and enables them to develop software more securely. A Ponemon … More →

The post Symbiotic provides developers with real-time feedback on potential security vulnerabilities appeared first on Help Net Security.

In this Help Net Security interview, Julie Madhusoodanan, Head of CyberSecurity at LinkedIn, discusses how closing the gender gap could enhance cybersecurity’s effectiveness in combating emerging threats. With women still underrepresented in cybersecurity roles, she emphasizes how diverse teams bring essential skills and innovative perspectives. Madhusoodanan outlines strategies like inclusive hiring, mentorship, and flexible work policies as essential steps to foster gender balance in the field. What impact would closing the gender gap in cybersecurity … More →

The post The cybersecurity gender gap: How diverse teams improve threat response appeared first on Help Net Security.

Osmedeus is an open-source workflow engine designed for offensive security. It serves as a versatile foundation, enabling users to easily create customized reconnaissance systems and scale them across extensive target lists. Osmedeus key features Speed up your recon process Organize your scan results Customize and optimize your recon process Integrate with new public and private tools Scale across a large number of targets Synchronize the results across many places Osmedeus is available for free on … More →

The post Osmedeus: Open-source workflow engine for offensive security appeared first on Help Net Security.

In this Help Net Security video, Chris Gibson, CEO at FIRST, discusses the evolving threat landscape and provides a unique take on where data breaches and cyber attacks will be in 2025.

The post Key cybersecurity predictions for 2025 appeared first on Help Net Security.