Help Net Security

Crooks are leveraging the event management and ticketing website Eventbrite to deliver their phishing emails to potential targets. “Since July, these attacks have increased 25% week over week, resulting in a total growth rate of 900%,” Perception Point researchers say. The phishing emails impersonate legitimate companies The phishing emails look like they are coming from Eventbrite because they are, but their content is crafted to impersonate legitimate businesses such as NLB Group (financial institution), EnergyAustralia … More →

The post Phishers reach targets via Eventbrite services appeared first on Help Net Security.

Zenity announced they have received $38 million in Series B funding co-led by Third Point Ventures and DTCP, pushing the total capital raised to over $55 million. It follows the recent strategic investment by Microsoft’s venture arm, M12, with strong support from existing investors Intel Capital and Vertex Ventures. The funds will be used to grow the team across product, engineering, sales and marketing, as well as launching a partner program to expand the ecosystem … More →

The post Zenity raises $38 million to secure agentic AI appeared first on Help Net Security.

Akamai launched new capabilities to its Account Protector security solution. These enhancements are designed to safeguard user accounts against abuse throughout their entire lifecycle and provide advanced protection against account opening abuse, account takeover attacks, and other attack schemes. The new capabilities enable organizations to protect accounts from the moment they are created, through password resets, logins, and all post-login activities. In today’s threat landscape, a single security check at login or transaction is no … More →

The post Akamai strenghtens protection against account abuse appeared first on Help Net Security.

Corero Network Security launched a new cloud-based availability protection platform, CORE. CORE by Corero Network Security is a cloud-based availability protection platform designed to seamlessly enhance a company’s existing security infrastructure. It delivers advanced defense, leveraging existing infrastructure, offering flexibility and cost-efficiency to keep an organization secure and agile. Corero CORE leverages comprehensive data lake(s) by gathering feeds from multiple sources across a network and generating AI/ML-assisted insights, turning isolated security events into actionable intelligence. … More →

The post Corero CORE turns isolated security events into actionable intelligence appeared first on Help Net Security.

Despite two patching attempts, a security issue that may allow attackers to compromise Windows user’s NTLM (authentication) credentials via a malicious Windows themes file still affects Microsoft’s operating system, 0patch researchers have discovered. The path to discovery The story starts with CVE-2024-21320, a Windows Themes spoofing vulnerability that was reported by Akamai security researcher Tomer Peled and fixed by Microsoft in January 2024. The vulnerability could be triggered by a .theme file that specified a … More →

The post Patching problems: The “return” of a Windows Themes spoofing vulnerability appeared first on Help Net Security.

PIXM Security launched its new Managed Service Provider (MSP) program for zero-day phishing protection. With over 500,000 end users already protected, PIXM shields MSPs and their customers from credential theft and zero-day phishing attacks that can lead to malware and other exploits on their laptops, desktops and mobile platforms. Over 50 percent of phishing links are clicked outside corporate email. While phishing security is often associated solely with email protection, cybercriminals are adapting and increasingly … More →

The post PIXM protects MSPs from credential theft and phishing attacks appeared first on Help Net Security.

In this Help Net Security interview, security researchers Specter and ChendoChap discuss gaming consoles’ unique security model, highlighting how it differs from other consumer devices. They also share their thoughts on how advancements in console security could shape future consumer and enterprise hardware designs. Specter was a speaker at the Hardwear.io conference that took place last week in Amsterdam. Could you explain what makes the security model of consoles, such as PlayStation, fundamentally different from … More →

The post Inside console security: How innovations shape future hardware protection appeared first on Help Net Security.

EmberOT’s OT PCAP Analyzer, developed for the industrial security community, is a free tool providing a high-level overview of the devices and protocols in packet capture files. “The OT PCAP Analyzer was designed specifically with critical OT environments in mind. We’ve created a novel set of engines to gather and analyze network traffic at speed with unparalleled accuracy. This allows the free PCAP Analyzer to quickly identify OT devices, protocols, and how those elements interact. … More →

The post OT PCAP Analyzer: Free PCAP analysis tool appeared first on Help Net Security.

API Gateway Security Engineer Ness Technologies | Israel | Hybrid – View job details As an API Gateway Security Engineer, you will be responsible for managing and implementing API Gateway solutions with a strong focus on information security. Your responsibilities will include ongoing maintenance of API systems, managing secure permissions and access, monitoring API traffic to identify anomalies, threats, and intrusion attempts, and collaborating with security and infrastructure teams to identify and manage security risks, … More →

The post Cybersecurity jobs available right now: October 29, 2024 appeared first on Help Net Security.

In this Help Net Security video, John Bennett, CEO at Dashlane, discusses their recent Global Password Health Score Report, detailing the global state of password health and hygiene. Poor security habits like password reuse remain widespread. With passwordless technologies like passkeys still in their early stages of adoption, organizations must remain vigilant. The risk of weak, reused, and compromised passwords fuels credential-based breaches, underscoring the need for stronger password management practices even as new technologies … More →

The post The state of password security in 2024 appeared first on Help Net Security.

55% of organizations say the security risks for their business have never been higher, according to Vanta. Yet the average company only dedicates 11% of its IT budget to security — far from the ideal allocation of 17%, according to business and IT leaders. Majority of companies do not provide opt-out for AI data training The rapid adoption of AI only adds to the risks with phishing attacks (33%), AI-based malware (32%), and compliance violations … More →

The post Trust and risk in the AI era appeared first on Help Net Security.

Black Basta ransomware affiliates are still trying to trick enterprise employees into installing remote access tool by posing as help desk workers, now also via Microsoft Teams. Phishing via MS Teams Earlier this year, Rapid7 warned about Black Basta using the following social engineering trick: they flood the target employee’s email inbox with spam – typically from automated systems or services that send confirmations or notifications – and then phone them to offer assistance, while … More →

The post Black Basta operators phish employees via Microsoft Teams appeared first on Help Net Security.

Armis announced the close of a $200 million Series D round of investment, increasing its total company valuation to a new high of $4.2 billion. Armis’ latest funding round was led by both top-tier investors General Catalyst and Alkeon Capital, along with existing investors Brookfield Technology Partners and Georgian. The additional capital will enable Armis to continue with its 5 year strategy to build a multi-generational cybersecurity company, fuel strong organic product innovation and global … More →

The post Armis raises $200 million to fuel growth strategy appeared first on Help Net Security.

The Dutch National Police, along with partner law enforcement agencies, has disrupted the operation of the Redline and Meta infostealers and has collected information that may unmask users who paid to leverage the infamous malware. Screenshot of the Redline License Server panel (Source: Operation Magnus) About Redline and Meta Redline and Meta (aka MetaStealer) are infostealers, capable of exfiltrating a variety of sensitive information: Info about the victims’ machine/OS (Windows and macOS) Credentials, credit card … More →

The post Police hacks, disrupts Redline, Meta infostealer operations appeared first on Help Net Security.

Entrust announced an all-in-one consumer banking platform that allows banks and credit unions to provide high-assurance security throughout the customer lifecycle – from account opening to financial credential issuance to on-going, everyday transactions and interactions. The solution integrates leading AI-driven identity verification technology with physical and digital card issuance capabilities to transform the consumer banking experience, dramatically reducing fraud at account opening and providing smart continuous account protection. Approximately 82% of consumers say they access … More →

The post Entrust helps banks fight fraud during account opening appeared first on Help Net Security.

Extreme Networks introduced new features within ExtremeCloud Universal Zero Trust Network Access (ZTNA), an identity-based network access solution. Universal ZTNA unifies cloud Network Access Control and ZTNA in a single, easy-to-use SaaS offering, with one zero trust policy engine for both networks and applications to ensure consistent security, unified observability and a seamless experience when remote or on-site. Integrated with ExtremeCloud IQ, the solution simplifies workflows for network security and management, boosting IT team productivity, … More →

The post ExtremeCloud Universal ZTNA enhancements boost visibility and security appeared first on Help Net Security.

Jumio unveiled Jumio Liveness, an enhanced, in-house technology designed to address increasingly sophisticated fraud tactics. This solution expands beyond traditional presentation attacks, such as paper or screen copies, and employs sophisticated AI models to block advanced threats like injection attacks and deepfakes. “Jumio Liveness is designed to address the growing sophistication of fraud tactics while keeping the user experience simple,” said Bala Kumar, Chief Product and Technology Officer at Jumio. “Our goal is to help … More →

The post Jumio Liveness detects various sophisticated spoofing attacks appeared first on Help Net Security.

Filigran announces the completion of its $35 million Series B fundraise, led by global software investor Insight Partners, with continued support from existing investors Accel and Moonfire. This new round of funding comes just months after the company’s $16 million Series A, underscoring Filigran’s impressive growth and commitment to expanding its global footprint and accelerating product innovation. This funding will fuel the company’s global expansion, particularly in the United States and the Pacific region, while … More →

The post Filigran raises $35 million to drive global expansion appeared first on Help Net Security.

In the war against malicious cyber activity, it’s time for security vendors to step in – and it’s not how you might think. CISA Director Jen Easterly put it right at this year’s Black Hat conference: “We got ourselves into this; we have to get ourselves out.” Geopolitical tensions are rising worldwide, attacks are becoming increasingly sophisticated, and nation-state threats on US organizations and critical infrastructure are at an all-time high. As we prepare to … More →

The post A good cyber leader prioritizes the greater good appeared first on Help Net Security.

In this Help Net Security interview, Emily Long, CEO at Edera, discusses the most common vulnerabilities in Kubernetes clusters and effective mitigation strategies. Long shares insights on emerging isolation technologies that could enhance Kubernetes security and better protect containerized environments. What are the most common vulnerabilities in Kubernetes clusters today, and how can they be mitigated effectively? Kubernetes has made significant progress in security since its inception ten years ago. Security isn’t an afterthought in … More →

The post How isolation technologies are shaping the future of Kubernetes security appeared first on Help Net Security.