Help Net Security

Android 15 brings enhanced security features to protect your sensitive health, financial, and personal data from theft and fraud. It also introduces productivity improvements for large-screen devices and updates to apps like the camera, messaging, and passkeys. Android theft protection Google has developed and rigorously tested a comprehensive set of features to protect your data at every stage—before, during, and after theft. The new Theft Detection Lock uses AI to protect your data, automatically locking … More →

The post Android 15 unveils new security features to protect sensitive data appeared first on Help Net Security.

Netskope announced new enhancements to the Netskope One platform, extending the company’s data protection solutions to include integrated data security posture management (DSPM) capabilities.  Modern data protection continues to be a top priority for organizations as they optimize hybrid work environments, adopt artificial intelligence and machine learning tools at a rapid pace, grapple with privacy regulations, and encounter an ever-growing number of security threats. The Netskope One platform has for many years seamlessly delivered advanced … More →

The post Netskope extends data security with DSPM capabilities appeared first on Help Net Security.

Akeyless announced its Unified Secrets and Machine Identity Platform, designed to address the leading cause of breaches—compromised identity credentials. Organizations are more exposed than ever as machine identities far outnumber human identities. High-profile breaches in 2024 demonstrate the risks of unsecured machine identities and compromised secrets. As machines —such as applications, containers, and services—proliferate, each carries a unique identity. These machine identities often use multiple secrets, like API keys or certificates, to authenticate securely. When left … More →

The post Akeyless unveils Unified Secrets and Machine Identity Platform appeared first on Help Net Security.

As organizations and their volume of Microsoft 365 data grow, protecting sensitive data and managing access has become even more important. The need for strong security and governance practices is only intensified as more organizations leverage powerful AI tools like Microsoft 365 Copilot. Rubrik announces Rubrik Data Security Posture Management (DSPM) for Microsoft 365 Copilot to provide greater visibility and control of sensitive data, reduce the risk of exposure, and empower organizations to securely adopt … More →

The post Rubrik DSPM for Microsoft 365 Copilot reduces the risk of sensitive data exposure appeared first on Help Net Security.

Arcserve launched Arcserve UDP 10, providing customers with an intuitive, flexible, and affordable way to address their critical data security and business continuity challenges. Arcserve UDP 10 is a unified data protection solution that offers backup, replication, high availability, and advanced ransomware detection. UDP 10 is easy to set up, as it seamlessly integrates with major cloud providers like AWS, Azure, Google Cloud, and Wasabi. With smart deduplication and powerful data compression, UDP 10 is … More →

The post Arcserve UDP 10 accelerates disaster recovery processes appeared first on Help Net Security.

No IT system — no matter how advanced – is completely immune to failure. The promise of a digital ring of steel may sound attractive, but can it protect you against hardware malfunctions? Software bugs? Unexpected environmental conditions? Cybersecurity threats? Human error? And that’s just for starters. As Gartner explained last year in How to Prepare for Cloud Outages: “All systems are subject to failure. We cannot purchase hardware that never breaks, we cannot build … More →

The post Resilience over reliance: Preparing for IT failures in an unpredictable digital world appeared first on Help Net Security.

In this Help Net Security interview, Paolo Mainardi, CTO at SparkFabrik, discusses comprehensive strategies to secure Kubernetes environments from development through deployment. He focuses on best practices, automation, and continuous monitoring. Many security risks in Kubernetes originate from vulnerable container images. What are the key steps developers should take to ensure the security of container images before deploying them to a Kubernetes cluster? Securing container images is a pivotal task in maintaining a robust Kubernetes … More →

The post Strengthening Kubernetes security posture with these essential steps appeared first on Help Net Security.

Application Security Engineer Cognism | France | Hybrid – View job details As an Application Security Engineer, you will conduct in-depth security assessments of web applications, identifying vulnerabilities using automated tools (e.g., SAST, DAST) and manual techniques. You will analyze source code for security vulnerabilities, focusing on secure coding practices, and provide feedback to developers on mitigating risks. Additionally, you will work with DevOps teams to integrate security testing tools and processes into CI/CD pipelines, … More →

The post Cybersecurity jobs available right now: October 16, 2024 appeared first on Help Net Security.

While most organizations are still in the early horizons of their identity security journey, those who achieve maturity are seeing disproportionately higher returns for every dollar spent​, according to SailPoint. Identity security adoption still in early stages The value of identity security remains largely untapped today. Of the organizations surveyed, roughly 41% remain at the very beginning of their identity security journey with only 10% progressing to the more advanced stages; this large gap highlights … More →

The post Unlocking the value of AI-powered identity security appeared first on Help Net Security.

Bitdefender launched Scam Copilot, an advanced technology platform powered by AI and designed to detect and fight scams along with fraud attempts across devices including computers, tablets, and mobile phones. The platform has been integrated into several Bitdefender digital life protection consumer products adding another powerful layer of defense to protect against malware, credential stealing, and data theft. In a report by the Global Anti-Scam Alliance (GASA), global losses from scams amounted to over one … More →

The post Bitdefender Scam Copilot detects and combats online scams appeared first on Help Net Security.

Threat actors are leveraging the open-source EDRSilencer tool to evade endpoint detection and response systems, Trend Micro researchers have noticed. About EDRSilencer The software, which is intended for red teaming, is being abused to “silence” EDR solutions. It works by leveraging the Windows Filtering Platform (WFP), which allows the creation of custom rules to monitor, block, and modify network traffic. “The code leverages WFP [Windows Filtering Platform] by dynamically identifying running EDR processes and creating … More →

The post Attackers deploying red teaming tool for EDR evasion appeared first on Help Net Security.

Secuvy released several new features designed to enhance data security, mitigate insider threats, and streamline privacy operations. These innovations strengthen Secuvy’s capabilities in compliance, risk management, data leakage prevention, and secure collaboration, further empowering organizations to protect their critical data assets. The new features include advanced integrations and policy-based engines that provide actionable insights and automation to address today’s most pressing security and compliance challenges. 1. Observability cassification: This feature enables organizations to establish a … More →

The post Secuvy unveils features designed to improve data security appeared first on Help Net Security.

More than 50% of executives expect deepfake attacks to increase over the next 12 months, but only 7% report using new technologies to detect deepfakes. Meanwhile, researchers are repeatedly demonstrating how AI-generated ID documents, selfie photos, and videos can successfully fool antiquated Know Your Customer (KYC) verification checks. To address this gaping security hole, Nametag announced Deepfake Defense. This next-generation identity verification (IDV) engine is addressing the escalating global threats posed by modern AI-powered impersonation. … More →

The post Nametag Deepfake Defense blocks AI-powered impersonation threats appeared first on Help Net Security.

Data Zoo launched its latest service, ID Fraud & Risk Signals. This new solution is designed to enhance customer identification and Know Your Customer (KYC) processes by providing deeper insights into fraud detection and risk assessment, helping businesses stay at the forefront of identity fraud prevention. ID Fraud & Risk Signals integrates seamlessly into existing workflows, enabling businesses to quickly use mobile phone numbers, email addresses, domains and IP addresses to identify suspicious activities and … More →

The post Data Zoo ID Fraud & Risk Signals enhances fraud detection appeared first on Help Net Security.

Cato Networks expanded the Cato SASE Cloud Platform by introducing Cato Digital Experience Monitoring (DEM). This announcement is the third major expansion to the Cato SASE Cloud Platform in 2024, following the additions of extended detection and response (XDR) and endpoint protection (EPP/EDR) earlier this year. A true SASE platform must evolve beyond secure connectivity without compromising on the elegance and simplicity that defines SASE,” said Shlomo Kramer, CEO at Cato Networks. “Cato DEM embodies … More →

The post Cato DEM helps IT teams overcome network performance problems appeared first on Help Net Security.

Sectigo announced SiteLock 2.0, a major upgrade to SiteLock, its website security and protection platform. SiteLock 2.0 is designed to simplify website protection for small to medium-sized businesses (SMBs). At the core of SiteLock 2.0 is Site Health, a new, innovative feature offering users a clear, concise, and actionable assessment of a website’s overall security posture. Now, SMBs are empowered to proactively safeguard their websites and act with confidence when it comes to website security … More →

The post Sectigo SiteLock 2.0 simplifies website protection for SMBs appeared first on Help Net Security.

Last week, CISA added CVE-2024-23113 – a critical vulnerability that allows unauthenticated remote code/command execution on unpatched Fortinet FortiGate firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming that it’s being leveraged by attackers in the wild. The Shadowserver Foundation shared on Sunday that there are still 87,000+ internet-facing Fortinet devices likely vulnerable to the flaw. About CVE-2024-23113 CVE-2024-23113, a format string vulnerability that affects the FortiOS FGFM (FortiGate to FortiManager) daemon and can … More →

The post 87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113) appeared first on Help Net Security.

Calix announced significant updates to Calix SmartHome that will help broadband service providers (BSPs) meet every home internet need with enhanced security and comprehensive offerings. These SmartHome innovations make it easier for BSPs to support the growing demands of residential subscribers, seamlessly handling online work, play, and more—all on one network. The redesigned Calix Command IQ app lets subscribers manage advanced network settings, ensuring a smooth experience for everyone in the home. Critical security services—Protect … More →

The post Calix enhances SmartHome to improve protection for residential subscribers appeared first on Help Net Security.

Netwrix announced that Grady Summers has been appointed CEO effective immediately. Summers succeeds Steve Dickson, who has successfully led the company through record growth during his six-year tenure. Under Dickson’s leadership, Netwrix achieved significant growth and value creation. Since joining the Netwrix board in 2017 and becoming CEO in 2018, Dickson has expanded the portfolio organically and through twelve acquisitions from one to more than fifteen product families, leading to a 23x growth in annual … More →

The post Netwrix appoints Grady Summers as CEO appeared first on Help Net Security.

An employee is exiting your organization. Regardless of the terms of departure, an ex-staffer has the potential when they leave or change roles to impact a wide range of non-human identities, digital credentials, and other secrets. Those secrets include the credentials for accessing corporate networks, sending and receiving email, and sharing files. For each non-human identity in an enterprise, an average of 92 non-human identities (NHIs) are created. When employees exit, NHIs can become unmanaged, … More →

The post The NHI management challenge: When employees leave appeared first on Help Net Security.