Help Net Security

September 2024 Patch Tuesday is here and Microsoft has delivered 79 fixes, including those for a handful of zero-days (CVE-2024-38217, CVE-2024-38226, CVE-2024-38014, CVE-2024-43461) exploited by attackers in the wild, and a Windows 10 code defect (CVE-2024-43491) that rolled back earlier CVE fixes. The actively exploited flaws Let’s start with the only one that was previously publicly known: CVE-2024-38217, a vulnerability that allows attackers to bypass Mark of the Web (MotW). Elastic Security researcher Joe Desimone … More →

The post Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes appeared first on Help Net Security.

LOKKER released a new consent management solution available in its Privacy Edge Platform. This builds on LOKKER’s earlier release of its Consent Verification tool, which allows businesses to check whether their existing consent management platform is configured correctly. Many state and federal privacy laws require organizations to provide consumers with the ability to opt in or opt out of their data being shared with third parties and trackers on their websites and ensure that what … More →

The post LOKKER’s consent management solution blocks all unauthorized data collection on websites appeared first on Help Net Security.

Tufin Orchestration Suite (TOS) R24-2 ensures organizations’ network operations are efficient, secure, and always audit-ready by automating complex tasks, enhancing security visibility, and driving compliance. The key benefits TOS R24-2 delivers are: Automation: Automates complex firewall policies and access requests to reduce manual efforts and ensure the accurate implementation of network changes across Microsoft Azure, Google Cloud Platform (GCP) and VMware cloud platforms. Enhanced compliance: Remain audit-ready with comprehensive change tracking, proactive risk analysis, and … More →

The post Tufin improves security automation on Azure, GCP, and VMware clouds appeared first on Help Net Security.

Adaptiva launched Flex Controls in OneSite Patch, which give users advanced management capabilities over their patch deployment processes, including the ability to immediately pause or cancel patch rollouts as well as rollback patches to previous versions or block unwanted patches. These tools deliver confidence, security, and safety to users by providing the control necessary for efficient autonomous patching and vulnerability remediation. With 90% of successful cyberattacks starting at the endpoint and more than 28,000 vulnerabilities disclosed … More →

The post Adaptiva enables users to instantly control patch rollouts appeared first on Help Net Security.

Netskope announced several new innovations in the Netskope One platform, including expanded digital experience management (DEM) features and benefits. Combining key network and security capabilities, Netskope One continues to revolutionize the effectiveness of enterprise network infrastructure and operations (I&O) and security teams, enabling the entire organization to optimize the user experience while protecting critical data and reducing risk, cost, and complexity. Coming on the heels of Netskope being recognized as a Leader in the 2024 … More →

The post Netskope accelerates cloud networking and security operations appeared first on Help Net Security.

Ketch launched its product suite for digital media brands. The digital media industry faces increasing challenges. Intense FTC scrutiny on targeted advertising, growing pressure to deliver precise, permissioned targeting, and the existential threat of AI-driven content all contribute to a rapidly shifting and highly competitive landscape. Ketch Data Permissioning for Media Companies ensures media companies can activate data with confidence, from dynamic preference collection to real time data stack enforcement and visibility. With Ketch, digital … More →

The post Ketch helps media brands enable privacy-safe data activation appeared first on Help Net Security.

Galileo is delivering fintechs, banks and businesses new ways to fight fraud with the launch of Galileo Instant Verification Engine (GIVE) and Transaction Risk GScore. As digital transactions surge and cyber threats evolve, these tools offer fintechs, financial institutions and businesses advanced real-time fraud detection and risk management capabilities, addressing an industry in which 63% of financial firms reported an increase in fraud, with digital channels contributing to half of the total fraud losses. Galileo … More →

The post Galileo delivers real-time fraud detection for fintechs, banks and businesses appeared first on Help Net Security.

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-40766 – a recently fixed improper access control vulnerability affecting SonicWall’s firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming it is being actively exploited by attackers. Though the KEV entry does not say that it’s being leveraged in ransomware campaigns, both Arctic Wolf and Rapid7 say that there is indirect evidence pointing to that. What we know so far On the same day … More →

The post CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766) appeared first on Help Net Security.

Users of Zyxel network-attached storage (NAS) devices are urged to implement hotfixes addressing a critical and easily exploited command injection vulnerability (CVE-2024-6342). About CVE-2024-6342 Zyxel NAS devices are generally used by small to medium-sized businesses (SMBs) for data storage and backup. CVE-2024-6342 – reported by Nanyu Zhong and Jinwei Dong from VARAS@IIE – is a vulnerability in the export-cgi program of Zyxel NAS326 and NAS542 devices that can be triggered by unauthenticated attackers via a … More →

The post Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342) appeared first on Help Net Security.

Huntress announces the arrival of its new Managed SIEM solution, designed to serve small—to mid-sized enterprises and their MSP allies with everything a Security Information and Event Management (SIEM) should provide and none of what makes traditional SIEMs ineffective and expensive. Huntress Managed SIEM is a direct result of the company listening to its partners and incorporating their feedback into this new offering. Traditional SIEMs demand extensive in-house expertise, require continual fine-tuning, and can inundate … More →

The post Huntress launches Managed SIEM, eliminating the complexity of traditional SIEMs appeared first on Help Net Security.

Wing Security has released SaaS Pulse, a free tool for SaaS security management, offering organizations actionable insights and continuous oversight into their SaaS security posture. This free tool continuously monitors threats from issues like critical misconfigurations, offboarding errors, user access risks, and more. SaaS Pulse provides security teams with a SaaS security risk assessment and a simple dashboard, so they can understand their risks and prioritize mitigations quickly and efficiently. Behind the scenes, SaaS Pulse … More →

The post SaaS Pulse tool from Wing Security enhances SaaS security posture appeared first on Help Net Security.

Crashes due to faulty updates are nothing new; in fact, one reason IT teams often delay updates is their unreliability and tendency to disrupt the organization’s day-to-day operations. Zero-days are also an old phenomenon. In the past, due to a lack of cybersecurity awareness among even the largest vendors and their users, zero-days were not only more common but also often publicly available, enabling script kiddies to exploit them. Another thing that was usual in … More →

The post Tech stack uniformity has become a systemic vulnerability appeared first on Help Net Security.

In this Help Net Security interview, Shane Cox, Director, Cyber Fusion Center at MorganFranklin Consulting, discusses the evolving methodologies and strategies in threat hunting and explains how human-led approaches complement each other to form a robust defense. Cox also discusses the ongoing need for skilled threat hunters and the future challenges and opportunities in integrating human intelligence with advanced automation. What are the primary methodologies used in threat hunting? How do they complement each other? … More →

The post How human-led threat hunting complements automation in detecting cyber threats appeared first on Help Net Security.

Open-source cybersecurity tools provide transparency and flexibility, allowing users to examine and customize the source code to fit specific security needs. These tools make cybersecurity accessible to a broader range of organizations and individuals. In this article, you will find a list of 33 open-source cybersecurity tools for Linux, Windows, and macOS that you should consider to enhance protection and stay ahead of potential threats. Authentik: Open-source identity provider Authentik is an open-source identity provider … More →

The post 33 open-source cybersecurity solutions you didn’t know you needed appeared first on Help Net Security.

TP-Link launched Omada Cloud Essentials, a simplified, free cloud management option designed for surveillance networks, hostels, and large homes. Omada offers a flexible cloud management architecture, including an on-premises Hardware Controller, an on-premises Software Controller, and a Cloud-Based Controller (also known as Omada Cloud). Omada Cloud provides two versions: the Essentials version, which offers free cloud services, and the Standard version, which includes advanced features and requires a license. Omada Cloud Essentials is a free, … More →

The post TP-Link Omada Cloud Essentials: Centralized network management and monitoring appeared first on Help Net Security.

CVE-2024-40711, a critical vulnerability affecting Veeam Backup & Replication (VBR), could soon be exploited by attackers to steal enterprise data. Discovered and reported by Code WHite researcher Florian Hauser, the vulnerability can be leveraged for full system takeover, and security researchers from watchTowr Labs have already confirmed its potential for exploitation. Luckily for enterprises using VBR, both companies have refrained from sharing PoC exploit code or additional details about the flaw until most admins have … More →

The post Veeam Backup & Replication RCE flaw may soon be leveraged by ransomware gangs (CVE-2024-40711) appeared first on Help Net Security.

Red Hat Enterprise Linux (RHEL) AI is Red Hat’s foundation model platform, enabling users to develop, test, and run GenAI models to power enterprise applications. The platform brings together the open source-licensed Granite LLM family and InstructLab model alignment tools based on the Large-scale Alignment for chatBots (LAB) methodology, packaged as an optimized, bootable RHEL image for individual server deployments across the hybrid cloud. While GenAI’s promise is immense, the associated costs of procuring, training, … More →

The post Red Hat Enterprise Linux AI extends innovation across the hybrid cloud appeared first on Help Net Security.

Cybercriminals are beginning to take advantage of the new malicious options that large language models (LLMs) offer them. LLMs make it possible to upload documents with hidden instructions that are executed by connected system components. This is a boon to cybercriminals and, thus, a substantive risk to the enterprises using them. LLMs can be tricked in many ways. Cybercriminals can input malicious prompts that trick the LLM into overriding its guardrails (i.e., generating harmful outputs), … More →

The post AI cybersecurity needs to be as multi-layered as the system it’s protecting appeared first on Help Net Security.

OpenZiti is a free, open-source project that embeds zero-trust networking principles directly into applications. Example of an OpenZiti overlay network OpenZiti features “We created OpenZiti to transform how people think about connectivity. While OpenZiti is a zero-trust networking platform, you can also consider it a development platform. Developers can build their applications on OpenZiti – i.e., ‘building apps/products on top of Ziti as a native app. ‘Ziti-native’ immediately gives your apps superpowers, including strong identity, … More →

The post OpenZiti: Secure, open-source networking for your applications appeared first on Help Net Security.

In this Help Net Security interview, Umaimah Khan, CEO of Opal Security, shares her insights on implementing the Principle of Least Privilege (PoLP). She discusses best practices for effective integration, benefits for operational efficiency and audit readiness, and how to manage friction from access restrictions. Additionally, she discusses the challenges of PoLP in multi-cloud environments and the potential role of AI in enhancing future enforcement. What best practices would you recommend for an organization implementing … More →

The post Best practices for implementing the Principle of Least Privilege appeared first on Help Net Security.