Help Net Security

Commvault launched Cloud Rewind on the Commvault Cloud platform. This offering, which integrates cloud-native distributed application recovery and rebuild capabilities from the Appranix acquisition, gives cloud-first organizations a secret weapon to transform their cyber resilience capabilities. Today, when organizations are attacked, restoring the data is only half the battle. The truly laborious task is actually restoring the distributed cloud applications, which are used to run and power that data. Think of it like this: a … More →

The post Commvault Cloud Rewind helps businesses bounce back from cyber incidents appeared first on Help Net Security.

Frontegg launched Flows, a journey-time orchestration capability that uses generative AI to simplify the creation of advanced customer identity processes. As growing businesses emerge from startup mode and enter scale-up mode, their user identities start to enter the thousands. In addition, managing workflows across multiple applications and often in various programming languages leads to inefficiencies, a high risk of errors, and prolonged development cycles. As a result, identity becomes fraught with business and security risks … More →

The post Frontegg Flows simplifies customer identity processes appeared first on Help Net Security.

Edgio launched Premier Bot Manager, a next-generation bot management solution designed to protect enterprise applications against increasingly sophisticated automated threats. Premier Bot Manager introduces enhanced detection capabilities, AI-powered threat intelligence, and granular categorization of known and unknown bot attacks, providing organizations with comprehensive visibility and defense against bots including credential abusers, scrapers, and DDoS attackers. Building on the success of Edgio’s previous Advanced Bot Management solution that saw wide adoption upon its release, Premier Bot … More →

The post Edgio Premier Bot Manager detects, classifies and mitigates bot traffic appeared first on Help Net Security.

Bitwarden expanded its integration capabilities with the release of a Microsoft Sentinel integration to enhance security information and event management (SIEM) for organizations. Security teams can now monitor, detect, and respond to password management, account access activities, and potential threats in real-time using Microsoft Sentinel’s advanced features. Microsoft Sentinel equips security teams with enhanced visibility into account activity, helping to reduce the attack surface and defend against emerging threats. Enhancing password security and incident response … More →

The post Bitwarden integrates with Microsoft Sentinel to strengthen real-time threat detection appeared first on Help Net Security.

Trulioo launched Trulioo Fraud Intelligence, a new capability that delivers predictive risk insights across more than 195 countries. Trulioo Fraud Intelligence transforms how global businesses fight synthetic and third-party fraud. The capability provides comprehensive coverage across diverse markets by combining hundreds of risk indicators with consortium data, advanced velocity monitoring and real-time signal monitoring, all through a modern, single API. The Trulioo API streamlines integration, reduces time to market and enables developers to access all … More →

The post Trulioo Fraud Intelligence fights fraud during onboarding appeared first on Help Net Security.

Governance, risk, and compliance frameworks are critical. They enable cybersecurity professionals to accurately identify an organization’s risk posture, align business and strategic objectives with technology, and meet compliance responsibilities. However, selecting the right framework can be challenging. Inside this guide to European Union frameworks, you’ll find answers to these questions and more: How does Governance, Risk and Compliance protect organizations? What are the essential GRC frameworks? What frameworks address cybersecurity and privacy? What international frameworks … More →

The post Guide for selecting the right GRC framework, EU edition appeared first on Help Net Security.

Tidal Cyber announced that it now incorporates test results from Breach and Attack Simulation (BAS) tools and other sources to complement the company’s existing Threat-Informed Defense capabilities. With this new integration, Tidal Cyber Enterprise Edition users can gain greater insight into the true state of their defenses as a result of better targeted tests, ultimately completing the cycle of effective defenses and efficient operations. This enhancements provide users with the increased confidence that their threat … More →

The post Tidal Cyber empowers organizations to improve their protection efforts appeared first on Help Net Security.

YARA is a powerful tool designed primarily to aid malware researchers in identifying and categorizing malware samples, though its applications are broader. The tool enables users to create detailed descriptions, or “rules,” for malware families or any other target based on textual or binary patterns. Each rule comprises a collection of strings and a logical expression, forming the criteria for its detection and classification. YARA is a multi-platform tool compatible with Windows, Linux, and macOS. … More →

The post YARA: Open-source tool for malware research appeared first on Help Net Security.

In this Help Net Security interview, Emily Wienhold, Cyber Education Specialist at Optiv, discusses how business leaders can promote a security-first culture within their organizations. Wienhold also discusses strategies for maintaining ongoing cybersecurity awareness and making security protocols accessible to non-technical staff. What specific actions can business leaders take to consistently set the tone for cybersecurity throughout the organization? Setting the tone for cybersecurity within an organization is vital, and business leaders play a pivotal … More →

The post Cultivating a security-first mindset: Key leadership actions appeared first on Help Net Security.

ESET researchers have discovered a series of attacks that took place in Europe from May 2022 to March 2024, where the attackers used a toolset capable of targeting air-gapped systems, in a governmental organization of a European Union country. Cyberespionage campaign aims to steal sensitive data from isolated networks ESET attributes the campaign to GoldenJackal, a cyberespionage APT group that targets government and diplomatic entities. By analyzing the toolset deployed by the group, ESET identified … More →

The post GoldenJackal APT group breaches air-gapped systems in Europe appeared first on Help Net Security.

70% of customer-facing APIs are secured using HTTPS, leaving nearly one-third of these APIs completely unprotected, according to F5. This is a stark contrast to the 90% of web pages that are now accessed via HTTPS, following the push for secure web communications over the past decade. “APIs are becoming the backbone of digital transformation efforts, connecting critical services and applications across organizations,” said Lori MacVittie, Distinguished Engineer at F5. “However, as our report indicates, … More →

The post 30% of customer-facing APIs are completely unprotected appeared first on Help Net Security.

Cloud Cybersecurity Analyst III Texas Health and Human Services | USA | Hybrid – View job details As a Cloud CSAIII, you will be responsible for designing, implementing, and managing security solutions for cloud environments. You will ensure that cloud infrastructures are secure, resilient, and compliant with organizational policies and industry regulations. Your role will involve collaborating with various stakeholders to integrate security best practices into cloud solutions, maintaining a robust security posture, and supporting … More →

The post Cybersecurity jobs available right now: October 9, 2024 appeared first on Help Net Security.

For October 2024 Patch Tuesday, Microsoft has released fixes for 117 security vulnerabilities, including two under active exploitation: CVE-2024-43573, a spoofing bug affecting the Windows MSHTML Platform, and CVE-2024-43572, a remote code execution flaw in the Microsoft Management Console (MMC). About CVE-2024-43573 and CVE-2024-43572 As far as it can be deduced from the accompanying advisory, CVE-2024-43573 is similar to CVE-2024-38112, a vulnerability in MSHTML, a browser engine for the now deprecated Internet Explorer, which has … More →

The post Microsoft patches two zero-days exploited in the wild (CVE-2024-43573, CVE-2024-43572) appeared first on Help Net Security.

Ivanti has patched three additional Cloud Service Appliance (CSA) zero-day flaws, which have been exploited by attackers in conjuction with a zero-day bug the company accidentally fixed in September. The fixed zero-days “We are aware of a limited number of customers running CSA 4.6 patch 518 and prior who have been exploited when CVE-2024-9379, CVE-2024-9380 or CVE-2024-9381 are chained with CVE-2024-8963,” the company announced on Tuesday. CVE-2024-8963 is a path traversal vulnerability that allows a … More →

The post Ivanti fixes three CSA zero-days exploited in the wild (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381) appeared first on Help Net Security.

OpenBSD is a free, multi-platform 4.4BSD-based UNIX-like operating system. The 57th release, OpenBSD 7.6, comes with new features, various improvements, bug fixes, and tweaks. Security improvements Added -fret-clean option to the compiler, defaulting to off. This new option causes the caller to clean the return address off the stack after a call completes. The -fret-clean option was then enabled on amd64 for libc, libcrypto, ld.so, kernel, and all the ssh tools. Expose branch target identification … More →

The post OpenBSD 7.6 released: security improvements, new hardware support, and more! appeared first on Help Net Security.

Dashlane launched Credential Risk Detection, a solution that continuously monitors and detects at-risk credential activity in real-time across the workforce, whether employees use a password manager or not. The web extension-based solution is the latest Dashlane innovation that shifts credential security from passive defense to proactive protection, enabling enterprises to prevent credential-based breaches, rather than react to them. IT and security teams can’t secure what they can’t see. And while organizations and their users have … More →

The post Dashlane Credential Risk Detection prevents credential-based breaches appeared first on Help Net Security.

Data Theorem launched Code Secure, the latest evolution in application security designed to protect the software supply chain from code to deployment. Code Secure uniquely integrates Static Application Security Testing (SAST), Software Composition Analysis (SCA), and Supply Chain Security capabilities—including Software Bill of Materials (SBOM) management—into a comprehensive product offering. This solution offers application security teams dynamically verified insights into vulnerabilities, open-source dependencies, and the overall software composition, encompassing both first and third-party components. By … More →

The post Data Theorem Code Secure helps security and DevOps teams secure their software appeared first on Help Net Security.

OTAVA introduced the OTAVA S.E.C.U.R.E. Score to help businesses further improve their security posture. The S.E.C.U.R.E. Score is a dynamic metric that assesses vulnerabilities, and makes recommendations on how to close security gaps and minimize risk. The S.E.C.U.R.E. acronym stands for Shrink, Examine, Contain, Undo, Recover, and Evaluate – the incremental steps to understanding areas of vulnerability, and how to protect businesses from evolving and escalating cyber threats. “Businesses continue to face increasing threats of … More →

The post OTAVA S.E.C.U.R.E. Score simplifies cybersecurity strategy for businesses appeared first on Help Net Security.

Juniper Networks announced its new Juniper Secure AI-Native Edge solution, with a new Security Assurance product, combining Juniper Mist’s AI-Native and cloud-native network operations with the efficacy security solution. By integrating network and security operations together under a single cloud and Mist AI engine, customers and partners have a holistic, integrated solution that accelerates the detection, diagnosis and resolution of potential network threats in various environments. Network and content security is crucial for organizations in … More →

The post Juniper Secure AI-Native Edge accelerates detection of potential network threats appeared first on Help Net Security.

An actively exploited zero-day vulnerability (CVE-2024-43047) affecting dozens of Qualcomm’s chipsets has been patched by the American semiconductor giant. About CVE-2024-43047 On Monday, Qualcomm has confirmed patches for 20 vulnerabilities affecting both proprietary and open source software running on its various chipsets. Among those is CVE-2024-43047, a use-after-free vulnerability in the Digital Signal Processor (DSP) service that could lead to “memory corruption while maintaining memory maps of [high level operating system (HLOS)] memory.” The vulnerability’s … More →

The post Qualcomm zero-day under targeted exploitation (CVE-2024-43047) appeared first on Help Net Security.