Help Net Security

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 2,000 Palo Alto Networks devices compromised in latest attacks Attackers have compromised around 2,000 Palo Alto Networks firewalls by leveraging the two recently patched zero-days (CVE-2024-0012 and CVE-2024-9474), Shadowserver Foundation’s internet-wide scanning has revealed. Researchers unearth two previously unknown Linux backdoors ESET researchers have identified multiple samples of two previously unknown Linux backdoors: WolfsBane and FireWood. ScubaGear: Open-source tool to … More →

The post Week in review: 0-days exploited in Palo Alto Networks firewalls, two unknown Linux backdoors identified appeared first on Help Net Security.

Securiti announced a new solution – Security for AI Copilots in SaaS apps. The biggest impediment in adopting AI Copilots, like Microsoft 365 Copilot, is the security of data. Organizations must ensure that data does not inadvertently leak to the wrong employees via Copilot prompt responses, nor get exposed to third parties and AI plugins. Securiti provides a comprehensive solution for preventing these issues, enabling organizations to confidently boost employee productivity while ensuring robust security … More →

The post Security for AI Copilots in SaaS apps identifies risky access permissions appeared first on Help Net Security.

SentinelOne announced new AI security posture management (AI-SPM) capabilities to protect and secure the use of AI services in the workplace. Built on SentinelOne’s Singularity cybersecurity platform, the new offering will expand SentinelOne’s top-rated Singularity Cloud Security portfolio to give customers visibility into – and protection over – both known and shadow AI cloud services running in their environment. SentinelOne’s AI-SPM will help security teams discover the entire inventory of AI applications and models being … More →

The post SentinelOne AI-SPM detects misconfigurations and vulnerabilities in AI applications appeared first on Help Net Security.

The Proxmox Virtual Environment 8.3 enterprise virtualization solution features management tools and a user-friendly web interface, allowing you to deploy open-source solutions in clustered, highly available setups. This version is based on Debian 12.8 (Bookworm), but uses the Linux kernel 6.8.12-4 as stable default, and allows for opt-in use of kernel 6.11. The software includes updates to the latest versions of leading open-source technologies for virtual environments like QEMU 9.0.2, LXC 6.0.0 , and ZFS … More →

The post Proxmox Virtual Environment 8.3: SDN-firewall integration, faster container backups, and more! appeared first on Help Net Security.

In this Help Net Security interview, Ben Colman, CEO of Reality Defender, discusses the challenges of detecting high-quality deepfakes in real-world applications. He addresses the effectiveness and limitations of watermarking, AI-based detection, and the potential of emerging technologies in securing media authenticity. Colman also emphasizes the importance of public education, sector-specific AI implementation, and proactive research collaboration to counter rapidly advancing deepfake tactics. Given the evolution of deepfake generation technologies, what are the current limitations … More →

The post The limits of AI-based deepfake detection appeared first on Help Net Security.

In this Help Net Security video, Dror Liwer, co-founder of Coro, discusses how the EU’s NIS2, its latest security directive for businesses, officially became enforceable recently. This means EU companies face more demanding requirements for internal cyber resilience strategies and practices. Small businesses will face growing pains around these requirements since those with 50 or more employees and an annual turnover of €10 million are considered “Important or Essential” and must comply.

The post Why the NIS2 Directive causes growing pains for businesses appeared first on Help Net Security.

Threat actors are recruiting pen testers to test and improve the reliability of their ransomware for affiliate programs, according to Cato Networks. Any good developer knows that software needs to be tested before deploying in production environments. This is also true for ransomware gangs. They want to ensure that their ransomware can be deployed successfully against organizations. “Ransomware is one of the most pervasive threats in the cybersecurity landscape. It impacts everyone—businesses and consumers—and threat … More →

The post Cybercriminals turn to pen testers to test ransomware efficiency appeared first on Help Net Security.

As cybercriminals continue to adapt their techniques to find new ways through defenses, AI-assisted fraud is growing increasingly sophisticated and frequent, according to Entrust. The findings reveal a deepfake attack happened every five minutes in 2024, while digital document forgeries increased 244% year-over-year. The rise of amateur fraudsters For the first time, digital document forgery surpassed physical counterfeits as the leading method of fraud in 2024, with digital forgeries accounting for 57% of all document … More →

The post Deepfake attacks occur every five minutes appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from Aon, Arkose Labs, HiddenLayer, Hornetsecurity, Radware, and Tanium. Arkose Device ID detects suspicious activity patterns By adding Arkose Device ID to the Arkose Labs’ platform, enterprises can assign unique device identifiers to all incoming traffic, gaining visibility into user behaviors tied to those devices from the first interaction—without requiring additional vendors or datasets. Aon Cyber Risk Analyzer empowers organizations to … More →

The post New infosec products of the week: November 22, 2024 appeared first on Help Net Security.

Law enforcement unsealed criminal charges against five alleged members of Scattered Spider, who allegedly targeted employees of companies nationwide with phishing text messages and then used the harvested employee credentials to log in and steal non-public company data and information and to hack into virtual currency accounts to steal millions of dollars in cryptocurrency. A federal grand jury indictment charges the following defendants with one count of conspiracy to commit wire fraud, one count of … More →

The post US charges five alleged members of Scattered Spider gang appeared first on Help Net Security.

An analysis of the websites belonging to companies that served as a front for getting North Korean IT workers remote jobs with businesses worldwide has revealed an active network of such companies originating in China. Unearthing North Korean IT front companies US authorities have been warning about North Korean IT workers’ tactics to bypass sanctions for a number of years, and have repeatedly seized website domains that looked like they belong to legitimate IT services … More →

The post Active network of North Korean IT front companies exposed appeared first on Help Net Security.

Attackers have compromised around 2,000 Palo Alto Networks firewalls by leveraging the two recently patched zero-days (CVE-2024-0012 and CVE-2024-9474), Shadowserver Foundation’s internet-wide scanning has revealed. Compromised devices are predominantly located in the US and India, the nonprofit says. Manual and automated scanning activity has been spotted Approximately two weeks ago, Palo Alto Networks warned that attackers have been spotted leveraging a zero-day flaw to achieve remote code execution on vulnerable devices, and advised admins to … More →

The post 2,000 Palo Alto Networks devices compromised in latest attacks appeared first on Help Net Security.

HP announced HP Enterprise Security Edition, a suite of security capabilities designed to enhance the physical security of HP business class PCs. HP Enterprise Security Edition includes multilayered safeguards to protect PC hardware and firmware from targeted physical attacks, while giving IT admins unparalleled visibility to help detect unauthorized firmware, and component tampering throughout a device’s lifecycle. The rise of hybrid work and Work from Anywhere (WFA) has increased the risk of PCs being compromised … More →

The post HP Enterprise Security Edition protects PC hardware and firmware from physical attacks appeared first on Help Net Security.

HiddenLayer launched Automated Red Teaming solution for artificial intelligence, a transformative tool that enables security teams to rapidly and thoroughly assess generative AI system vulnerabilities. The addition of this new product extends HiddenLayer’s AISec platform capabilities to include Automated Red Teaming, Model Scanning, and GenAI Detection & Response – all under one platform. This innovative solution provides fast, reliable protection for AI deployments, helping businesses safeguard sensitive data and intellectual property, and prevent malicious manipulation … More →

The post HiddenLayer Automated Red Teaming prevents malicious manipulation of AI models appeared first on Help Net Security.

ESET researchers have identified multiple samples of two previously unknown Linux backdoors: WolfsBane and FireWood. The goal of the backdoors and tools discovered is cyberespionage that targets sensitive data such as system information, user credentials, and specific files and directories. These tools are designed to maintain persistent access and execute commands stealthily, enabling prolonged intelligence gathering while evading detection. WolfsBane execution chain (Source: ESET) WolfsBane Researchers discovered the WolfsBane samples at VirusTotal, uploaded from Taiwan, … More →

The post Researchers unearth two previously unknown Linux backdoors appeared first on Help Net Security.

Lenovo introduced ThinkShield Firmware Assurance as part of its portfolio of enterprise-grade cybersecurity solutions. ThinkShield Firmware Assurance is one of the only computer OEM solutions to enable deep visibility and protection below the operating system (OS) by embracing Zero Trust Architecture (ZTA) component-level visibility to generate more accurate and actionable risk management insights. As a security paradigm, ZTA explicitly identifies users and devices to grant appropriate levels of access so a business can operate with … More →

The post Lenovo introduces ThinkShield Firmware Assurance appeared first on Help Net Security.

Owl Cyber Defense Solutions announced the latest release of Owl Talon, which includes integration with a new all-in-one PCIe data diode card – Owl Talon One. The new data diode card will enable Federal agencies and critical infrastructure providers to leverage Commercial-off-the-shelf (COTS) PCs or Servers as data diodes. This effectively isolates sensitive systems and eliminates the risk of cyberattacks on vital national assets. The single-card solution – the Owl Talon One – enables up … More →

The post Owl Cyber Defense Solutions unveils all-in-one PCIe data diode card appeared first on Help Net Security.

Vanta announced a number of new and upcoming products enabling customers to build, demonstrate and enhance their GRC and trust programs. The new offerings include Vanta for Marketplaces to strengthen trust across a company’s entire ecosystem; adaptive scoping; AI-powered chat for Trust Centers; developer-first workflows for faster remediation; and expanded reporting capabilities. The announcements coincide with a number of highlights for the company in 2024: Now continuously monitoring over 92 million resources across customers—from laptops … More →

The post Vanta announces new products to enhance GRC and trust programs appeared first on Help Net Security.

Deep Instinct launched Deep Instinct DSX for Cloud Amazon S3. As organizations increasingly rely on the cloud to power their digital transformation, businesses are generating and storing record amounts of data in the cloud. Cybercriminals know this and are leveraging generative AI to create sophisticated malware that evades existing security tools and takes advantage of the “assume breach” mindset. DSX for Cloud enables businesses to protect sensitive data across cloud storage environments by preventing and … More →

The post Deep Instinct delivers malware and ransomware prevention for cloud data stored in S3 buckets appeared first on Help Net Security.

The Computer Emergency Response Team of Ukraine (CERT-UA), part of the State Service of Special Communications and Information Protection (SSSCIP), has joined forces with the simulation training platform Cyber Ranges to unveil TRYZUB, a cyber resilience training and capability development service. TRYZUB primarily protects military, government entities, and critical infrastructure sectors such as energy, healthcare, finance, telecommunications, and education. Its training is designed for military units, law enforcement, government agencies, and operators of essential infrastructure … More →

The post Ukrainian cyberwar experience becomes blueprint for TRYZUB cyber training service appeared first on Help Net Security.