Help Net Security

A new report from Mandiant reveals that the average time-to-exploit vulnerabilities before or after a patch is released has plunged to just five days in 2023, down from 32 days in 2021 in 2022. One reason for this is the fact that, in 2023, exploitation of zero-day vulnerabilities (unknown to vendors, with no patches available) considerably outpaced the exploitation of n-day flaws (publicly disclosed bugs, with patches available). Another is that n-day exploitation continues to … More →

The post Defenders must adapt to shrinking exploitation timelines appeared first on Help Net Security.

Akamai has unveiled the availability of its Behavioral DDoS Engine for the App & API Protector solution. This new capability leverages machine learning for automatic, proactive protection against application-layer DDoS attacks. Behavioral DDoS Engine offers advanced detection and mitigation by analyzing anomalies and correlating multidimensional traffic data, ensuring robust defense against sophisticated and evolving DDoS threats. The engine provides customized, hands-off protection tailored to specific traffic baselines and risk sensitivities, minimizing manual intervention. Powered by … More →

The post Akamai releases Behavioral DDoS Engine for App & API Protection appeared first on Help Net Security.

Lookout announced new features for its Mobile Threat Defense (MTD) solution, Lookout Mobile Endpoint Security. These advancements provide comprehensive protection against two fast-growing advanced social engineering tactics: smishing (SMS phishing) and executive impersonation fraud texts. Lookout offers a defense-in-depth approach to cybersecurity that is designed to protect against the modern tactics used to breach an organization’s cloud infrastructure. Mobile devices are now the cornerstones of enterprise productivity, collaboration, communication and cloud identity verification. But as … More →

The post Lookout offers protection against social engineering and executive impersonation attacks appeared first on Help Net Security.

Cybersecurity threats have become increasingly prevalent and sophisticated in recent years, posing significant risks to businesses of all sizes. In 2023, there were 3,122 data breaches affecting approximately 349 million victims, highlighting the urgent need for robust network security solutions in our fast-paced, distributed work environments. NordLayer offers a sophisticated, scalable solution designed for businesses that require high-level protection without sacrificing flexibility. Developed using NordVPN’s world-class standards, NordLayer builds on a foundation of expertise to … More →

The post Product showcase: Secure and scale your network with NordLayer’s advanced security solutions appeared first on Help Net Security.

Swift announced that it is rolling out new AI-enhanced fraud detection to help the global payments industry step up its defence as bad actors grow increasingly sophisticated. Available from January 2025, the service is the result of extensive collaboration with banks from around the world and a successful pilot earlier this year. The new capability builds on Swift’s existing Payment Controls Service — used by many small and medium-sized financial institutions — by drawing on … More →

The post Swift launches AI-powered fraud detection service appeared first on Help Net Security.

Android 15 brings enhanced security features to protect your sensitive health, financial, and personal data from theft and fraud. It also introduces productivity improvements for large-screen devices and updates to apps like the camera, messaging, and passkeys. Android theft protection Google has developed and rigorously tested a comprehensive set of features to protect your data at every stage—before, during, and after theft. The new Theft Detection Lock uses AI to protect your data, automatically locking … More →

The post Android 15 unveils new security features to protect sensitive data appeared first on Help Net Security.

Netskope announced new enhancements to the Netskope One platform, extending the company’s data protection solutions to include integrated data security posture management (DSPM) capabilities.  Modern data protection continues to be a top priority for organizations as they optimize hybrid work environments, adopt artificial intelligence and machine learning tools at a rapid pace, grapple with privacy regulations, and encounter an ever-growing number of security threats. The Netskope One platform has for many years seamlessly delivered advanced … More →

The post Netskope extends data security with DSPM capabilities appeared first on Help Net Security.

Akeyless announced its Unified Secrets and Machine Identity Platform, designed to address the leading cause of breaches—compromised identity credentials. Organizations are more exposed than ever as machine identities far outnumber human identities. High-profile breaches in 2024 demonstrate the risks of unsecured machine identities and compromised secrets. As machines —such as applications, containers, and services—proliferate, each carries a unique identity. These machine identities often use multiple secrets, like API keys or certificates, to authenticate securely. When left … More →

The post Akeyless unveils Unified Secrets and Machine Identity Platform appeared first on Help Net Security.

As organizations and their volume of Microsoft 365 data grow, protecting sensitive data and managing access has become even more important. The need for strong security and governance practices is only intensified as more organizations leverage powerful AI tools like Microsoft 365 Copilot. Rubrik announces Rubrik Data Security Posture Management (DSPM) for Microsoft 365 Copilot to provide greater visibility and control of sensitive data, reduce the risk of exposure, and empower organizations to securely adopt … More →

The post Rubrik DSPM for Microsoft 365 Copilot reduces the risk of sensitive data exposure appeared first on Help Net Security.

Arcserve launched Arcserve UDP 10, providing customers with an intuitive, flexible, and affordable way to address their critical data security and business continuity challenges. Arcserve UDP 10 is a unified data protection solution that offers backup, replication, high availability, and advanced ransomware detection. UDP 10 is easy to set up, as it seamlessly integrates with major cloud providers like AWS, Azure, Google Cloud, and Wasabi. With smart deduplication and powerful data compression, UDP 10 is … More →

The post Arcserve UDP 10 accelerates disaster recovery processes appeared first on Help Net Security.

No IT system — no matter how advanced – is completely immune to failure. The promise of a digital ring of steel may sound attractive, but can it protect you against hardware malfunctions? Software bugs? Unexpected environmental conditions? Cybersecurity threats? Human error? And that’s just for starters. As Gartner explained last year in How to Prepare for Cloud Outages: “All systems are subject to failure. We cannot purchase hardware that never breaks, we cannot build … More →

The post Resilience over reliance: Preparing for IT failures in an unpredictable digital world appeared first on Help Net Security.

In this Help Net Security interview, Paolo Mainardi, CTO at SparkFabrik, discusses comprehensive strategies to secure Kubernetes environments from development through deployment. He focuses on best practices, automation, and continuous monitoring. Many security risks in Kubernetes originate from vulnerable container images. What are the key steps developers should take to ensure the security of container images before deploying them to a Kubernetes cluster? Securing container images is a pivotal task in maintaining a robust Kubernetes … More →

The post Strengthening Kubernetes security posture with these essential steps appeared first on Help Net Security.

Application Security Engineer Cognism | France | Hybrid – View job details As an Application Security Engineer, you will conduct in-depth security assessments of web applications, identifying vulnerabilities using automated tools (e.g., SAST, DAST) and manual techniques. You will analyze source code for security vulnerabilities, focusing on secure coding practices, and provide feedback to developers on mitigating risks. Additionally, you will work with DevOps teams to integrate security testing tools and processes into CI/CD pipelines, … More →

The post Cybersecurity jobs available right now: October 16, 2024 appeared first on Help Net Security.

While most organizations are still in the early horizons of their identity security journey, those who achieve maturity are seeing disproportionately higher returns for every dollar spent​, according to SailPoint. Identity security adoption still in early stages The value of identity security remains largely untapped today. Of the organizations surveyed, roughly 41% remain at the very beginning of their identity security journey with only 10% progressing to the more advanced stages; this large gap highlights … More →

The post Unlocking the value of AI-powered identity security appeared first on Help Net Security.

Bitdefender launched Scam Copilot, an advanced technology platform powered by AI and designed to detect and fight scams along with fraud attempts across devices including computers, tablets, and mobile phones. The platform has been integrated into several Bitdefender digital life protection consumer products adding another powerful layer of defense to protect against malware, credential stealing, and data theft. In a report by the Global Anti-Scam Alliance (GASA), global losses from scams amounted to over one … More →

The post Bitdefender Scam Copilot detects and combats online scams appeared first on Help Net Security.

Threat actors are leveraging the open-source EDRSilencer tool to evade endpoint detection and response systems, Trend Micro researchers have noticed. About EDRSilencer The software, which is intended for red teaming, is being abused to “silence” EDR solutions. It works by leveraging the Windows Filtering Platform (WFP), which allows the creation of custom rules to monitor, block, and modify network traffic. “The code leverages WFP [Windows Filtering Platform] by dynamically identifying running EDR processes and creating … More →

The post Attackers deploying red teaming tool for EDR evasion appeared first on Help Net Security.

Secuvy released several new features designed to enhance data security, mitigate insider threats, and streamline privacy operations. These innovations strengthen Secuvy’s capabilities in compliance, risk management, data leakage prevention, and secure collaboration, further empowering organizations to protect their critical data assets. The new features include advanced integrations and policy-based engines that provide actionable insights and automation to address today’s most pressing security and compliance challenges. 1. Observability cassification: This feature enables organizations to establish a … More →

The post Secuvy unveils features designed to improve data security appeared first on Help Net Security.

More than 50% of executives expect deepfake attacks to increase over the next 12 months, but only 7% report using new technologies to detect deepfakes. Meanwhile, researchers are repeatedly demonstrating how AI-generated ID documents, selfie photos, and videos can successfully fool antiquated Know Your Customer (KYC) verification checks. To address this gaping security hole, Nametag announced Deepfake Defense. This next-generation identity verification (IDV) engine is addressing the escalating global threats posed by modern AI-powered impersonation. … More →

The post Nametag Deepfake Defense blocks AI-powered impersonation threats appeared first on Help Net Security.

Data Zoo launched its latest service, ID Fraud & Risk Signals. This new solution is designed to enhance customer identification and Know Your Customer (KYC) processes by providing deeper insights into fraud detection and risk assessment, helping businesses stay at the forefront of identity fraud prevention. ID Fraud & Risk Signals integrates seamlessly into existing workflows, enabling businesses to quickly use mobile phone numbers, email addresses, domains and IP addresses to identify suspicious activities and … More →

The post Data Zoo ID Fraud & Risk Signals enhances fraud detection appeared first on Help Net Security.

Cato Networks expanded the Cato SASE Cloud Platform by introducing Cato Digital Experience Monitoring (DEM). This announcement is the third major expansion to the Cato SASE Cloud Platform in 2024, following the additions of extended detection and response (XDR) and endpoint protection (EPP/EDR) earlier this year. A true SASE platform must evolve beyond secure connectivity without compromising on the elegance and simplicity that defines SASE,” said Shlomo Kramer, CEO at Cato Networks. “Cato DEM embodies … More →

The post Cato DEM helps IT teams overcome network performance problems appeared first on Help Net Security.