Help Net Security

CyCognito announced several enhancements to its CyCognito Automated Security Testing (AST) product, a module in the CyCognito platform built for automated exposure validation and security testing. These additions speed the configuration of automated testing for AWS cloud environments, provide enhanced data exposure detection and augment pentesters and red teams with automated reconnaissance and prioritization of issues. CyCognito fills organizations’ critical gaps across network infrastructure, web applications and cloud by providing comprehensive, continuous security testing for all … More →

The post CyCognito expands automated testing capabilities appeared first on Help Net Security.

Despite global information security spending projected to reach $215 billion in 2024, 44% of CISOs surveyed reported they were unable to detect a data breach in the last 12 months using existing security tools, according to Gigamon. Blind spots undermine breach detection CISOs identified blind spots as a key issue, with 70% of CISOs stating their existing security tools are not as effective as they could be when it comes to detecting breaches due to … More →

The post Despite massive security spending, 44% of CISOs fail to detect breaches appeared first on Help Net Security.

A lost, stolen, or compromised smartphone today means we are in serious trouble. Most people have everything related to their personal and professional lives stored on their phones, a fact that criminals are well aware of. Cybersecurity risks resulting from a lost or stolen smartphone Unauthorized data access: If someone finds or steals your smartphone, they may have access to sensitive personal information, including contacts, messages, emails, and photos. Financial theft and account compromise: Access … More →

The post What to do if your iPhone or Android smartphone gets stolen? appeared first on Help Net Security.

Cybercrime in recent years shows no signs of slowing down, with phishing attacks surging and ransomware tactics becoming more advanced, forcing organizations to constantly adapt their defenses. The rise of deepfake technology, especially in creating realistic audio impersonations, poses new dangers. With that in mind, cybercriminals are becoming more agile and coordinated, leveraging new technologies and cooperating innovatively. Abhilash Garimella, Head Of Research at Bolster, discusses how phishing scams are now being hosted in the … More →

The post Cybercrime’s constant rise is becoming everyone’s problem appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from ExtraHop, GitGuardian, Nametag, Okta, Rubrik, and Sectigo. GitGuardian Visual Studio Code extension helps developers protect their sensitive information GitGuardian’s new Visual Studio Code extension brings shift-left security practices directly into the developer’s workflow. The extension works by scanning files as they are saved, alerting users to any potential secrets before they are added to the repository. ExtraHop RevealX enhancements accelerate … More →

The post New infosec products of the week: October 18, 2024 appeared first on Help Net Security.

Users of the Google Meet video communication service have been targeted by cyber crooks using the ClickFix tactic to infect them with information-stealing malware. Fake Google Meet video conference page with malicious ClickFix pop-up (Source: Sekoia) “The ClickFix tactic deceives users into downloading and running malware on their machines without involving a web browser for download or requiring manual file execution,” Sekoia researchers explained. “It makes it possible to bypass web browser security features, such … More →

The post Fake Google Meet pages deliver infostealers appeared first on Help Net Security.

Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the attackers themselves. (The answers have been lightly edited for clarity.) In your talk at Deep Conference next week, you will be talking about cyber-physical devices being compromised and used by cyber criminals and state-sponsored threat … More →

The post The role of compromised cyber-physical devices in modern cyberattacks appeared first on Help Net Security.

Cognizant announced the debut of Cognizant Neuro Cybersecurity, a new addition to Cognizant’s Neuro suite of platforms, designed to amplify cybersecurity resilience by integrating and orchestrating point cybersecurity solutions across the enterprise. Sophisticated threat actors, hybrid workforces, and the complexity of managing multiple security tools all weigh on an enterprise’s ability to manage cybersecurity risks. Traditional siloed technology and operations often lack the ability to deliver the insights that enable rapid decisions to preserve security … More →

The post Cognizant Neuro Cybersecurity enhances threat detection and response appeared first on Help Net Security.

MongoDB Queryable Encryption allows customers to securely encrypt sensitive application data and store it in an encrypted format within the MongoDB database. It also enables direct equality and range queries on the encrypted data without the need for cryptographic expertise. Adding range query support expands data retrieval options, allowing for more powerful search capabilities. You can configure Queryable Encryption using the following methods: Automatic encryption: Allows encrypted read and write operations to be performed seamlessly, … More →

The post MongoDB Queryable Encryption now supports range queries on encrypted data appeared first on Help Net Security.

GhostStrike is an open-source, advanced cybersecurity tool tailored for ethical hacking and Red Team operations. It incorporates cutting-edge techniques, including process hollowing, to stealthily evade detection on Windows systems, making it an asset for penetration testing and security assessments. “I decided to develop this tool to replicate one of the most commonly utilized process injection techniques employed in attacks, specifically process hollowing. My objective was to demonstrate how implants generated by Sliver C2 can be … More →

The post GhostStrike: Open-source tool for ethical hacking appeared first on Help Net Security.

In this Help Net Security interview, Mick Baccio, Global Security Advisor at Splunk SURGe, discusses the far-reaching implications of the NIS2 Directive beyond traditional IT security. He explains how NIS2 will fundamentally change cybersecurity governance, making it a core aspect of organizational strategy and accountability. Many experts suggest that the NIS2 Directive has far-reaching implications beyond IT security. Could you expand on the specific non-technical requirements that companies must be aware of? The NIS2 Directive … More →

The post How NIS2 will impact sectors from healthcare to energy appeared first on Help Net Security.

A recent Cohesity report found that consumers are highly concerned about the information companies collect from them – especially when it`s used for artificial intelligence – with consumers prepared to punish companies by switching providers for any loss of trust. In this Help Net Security video, James Blake, Global Head of Cyber Resiliency GTM Strategy at Cohesity, discusses the issues related to AI data collection. Key findings from the report: Overcollection concerns: The overwhelming majority … More →

The post AI data collection under fire appeared first on Help Net Security.

While businesses increasingly rely on SaaS tools, many leaders are not fully confident in their ability to safeguard their data, according to Keepit. Growing concerns over SaaS data protection According to the survey, while 28% of respondents expressed high confidence in their data protection measures, a significant 31% reported moderate to severe lapses in their data protection. This lack of confidence is alarming as the use of SaaS applications continues to grow, with critical data … More →

The post Why companies are struggling to keep up with SaaS data protection appeared first on Help Net Security.

ExtraHop unveiled new network-based file analysis capabilities in ExtraHop RevealX to detect malware, combat ransomware, and help prevent data loss. According to the 2024 Global Ransomware Trends Report, organizations experience an average of eight ransomware incidents per year. To carry out these attacks, adversaries often rely on the disparate tools and disjointed workflows deployed in the SOC, ensuring malicious files stay under the radar and go undetected. In response to the rapidly growing threat ransomware … More →

The post ExtraHop RevealX enhancements accelerate investigation workflows appeared first on Help Net Security.

Okta announced new Workforce Identity Cloud capabilities to address top security challenges such as unmanaged SaaS service accounts, governance risks, and identity verification. As part of a unified approach, these innovations help protect business before, during and after authentication, providing greater control, visibility, and streamlined user experience. Why it matters: Identity in the enterprise is under attack, with 80% of breaches involving some kind of compromised credentials and 1.9 billion session cookies stolen from employees … More →

The post Okta helps protect business before, during and after authentication appeared first on Help Net Security.

A new report from Mandiant reveals that the average time-to-exploit vulnerabilities before or after a patch is released has plunged to just five days in 2023, down from 32 days in 2021 in 2022. One reason for this is the fact that, in 2023, exploitation of zero-day vulnerabilities (unknown to vendors, with no patches available) considerably outpaced the exploitation of n-day flaws (publicly disclosed bugs, with patches available). Another is that n-day exploitation continues to … More →

The post Defenders must adapt to shrinking exploitation timelines appeared first on Help Net Security.

Akamai has unveiled the availability of its Behavioral DDoS Engine for the App & API Protector solution. This new capability leverages machine learning for automatic, proactive protection against application-layer DDoS attacks. Behavioral DDoS Engine offers advanced detection and mitigation by analyzing anomalies and correlating multidimensional traffic data, ensuring robust defense against sophisticated and evolving DDoS threats. The engine provides customized, hands-off protection tailored to specific traffic baselines and risk sensitivities, minimizing manual intervention. Powered by … More →

The post Akamai releases Behavioral DDoS Engine for App & API Protection appeared first on Help Net Security.

Lookout announced new features for its Mobile Threat Defense (MTD) solution, Lookout Mobile Endpoint Security. These advancements provide comprehensive protection against two fast-growing advanced social engineering tactics: smishing (SMS phishing) and executive impersonation fraud texts. Lookout offers a defense-in-depth approach to cybersecurity that is designed to protect against the modern tactics used to breach an organization’s cloud infrastructure. Mobile devices are now the cornerstones of enterprise productivity, collaboration, communication and cloud identity verification. But as … More →

The post Lookout offers protection against social engineering and executive impersonation attacks appeared first on Help Net Security.

Cybersecurity threats have become increasingly prevalent and sophisticated in recent years, posing significant risks to businesses of all sizes. In 2023, there were 3,122 data breaches affecting approximately 349 million victims, highlighting the urgent need for robust network security solutions in our fast-paced, distributed work environments. NordLayer offers a sophisticated, scalable solution designed for businesses that require high-level protection without sacrificing flexibility. Developed using NordVPN’s world-class standards, NordLayer builds on a foundation of expertise to … More →

The post Product showcase: Secure and scale your network with NordLayer’s advanced security solutions appeared first on Help Net Security.

Swift announced that it is rolling out new AI-enhanced fraud detection to help the global payments industry step up its defence as bad actors grow increasingly sophisticated. Available from January 2025, the service is the result of extensive collaboration with banks from around the world and a successful pilot earlier this year. The new capability builds on Swift’s existing Payment Controls Service — used by many small and medium-sized financial institutions — by drawing on … More →

The post Swift launches AI-powered fraud detection service appeared first on Help Net Security.