Help Net Security

The ransomware attack on UnitedHealth earlier this year is quickly becoming the healthcare industry’s version of Colonial Pipeline, prompting congressional testimony, lawmaker scrutiny and potential legislation.  Over the past few months, there have been two congressional hearings on the attack — one in the Senate, followed by one in the House — as well as calls from multiple senators for investigations into how the government responded to the incident, not to mention the criticism against UnitedHealth’s CISO, Steven Martin, … More →

The post Five backup lessons learned from the UnitedHealth ransomware attack appeared first on Help Net Security.

In this Help Net Security interview, Stephanie Domas, CISO at Canonical, discusses common misconceptions about open-source security and how the community can work to dispel them. She explains how open-source solutions, contrary to myths, offer enterprise-grade maturity, reliability, and transparency. Domas also shares key factors organizations should prioritize in open-source adoption to enhance security and balance innovation with stability. What are the biggest misconceptions about open-source security, and how can community members and professionals work … More →

The post Debunking myths about open-source security appeared first on Help Net Security.

The integrity of our online ecosystem heavily relies on domain registries, which serve as the foundation for secure and trusted digital experiences. However, threats like Domain Name System (DNS) abuse– manifesting as phishing, malware, and botnets – jeopardize this security. Such abuses harm individuals and undermine the overall trust in the internet. In this Help Net Security video, Ram Mohan, Chief Strategy Officer at Identity Digital, discusses the role registries play in safeguarding the DNS … More →

The post Safeguarding the DNS through registries appeared first on Help Net Security.

Application Security Engineer ENOC | UAE | On-site – View job details As an Application Security Engineer, you will establish and maintain DLP policies to prevent unauthorized access, transmission, or disclosure of sensitive data, focusing on both on-premises and cloud environments. Design, implement, and manage CASB solutions to control and monitor access to cloud applications and safeguard data across cloud services. Application Security Engineer Intellias | Poland | Remote – View job details As an … More →

The post Cybersecurity jobs available right now: November 20, 2024 appeared first on Help Net Security.

GenAI is quickly changing the software development process by automating tasks that once took developers hours, if not days, to complete, bolstering efficiency and productivity, according to Legit Security. “As GenAI transforms software development and becomes increasingly embedded in the development lifecycle, there are some real security concerns among developers and security teams,” said Liav Caspi, CTO at Legit. “Our research found that teams are challenged with balancing the innovations of GenAI and the risks … More →

The post Overreliance on GenAI to develop software compromises security appeared first on Help Net Security.

Microsoft is enhancing its bug bounty initiatives with the launch of the Zero Day Quest hacking event. With $4 million in potential rewards, it focuses on driving research in critical areas such as cloud computing and AI. Event focus The event invites security researchers to discover and report high-impact vulnerabilities in Microsoft AI and Cloud Bounty Programs: AI, Microsoft Azure, Microsoft Identity, M365, Microsoft Dynamics 365, and Power Platform. “To advance AI security, we will … More →

The post Microsoft announces Zero Day Quest hacking event with big rewards appeared first on Help Net Security.

Microsoft has implemented some and is working on delivering several other security-related features and improvements for Windows 11. Administrator protection will allow users to make system changes on their PCs without having administrator rights (that can be abused by attackers who have compromised the system). “With administrator protection, if a system change requires administrator rights, like some app installations, the user is prompted to securely authorize the change using Windows Hello. Windows creates a temporary … More →

The post Microsoft announces new and improved Windows 11 security features appeared first on Help Net Security.

Microsoft has announced the Windows Resiliency Initiative, aimed at avoiding a repeat of the prolonged worldwide IT outage caused by a buggy CrowdStrike update that took down millions of Windows machines and rendered them remotely unfixable. As part of that initiative, the company has announced that its working on Quick Machine Recovery, a feature that “will enable IT administrators to execute targeted fixes from Windows Update on PCs, even when machines are unable to boot, … More →

The post Microsoft plans to boot security vendors out of the Windows kernel appeared first on Help Net Security.

Microsoft unveiled Windows 365 Link, their first purpose-built Cloud PC device for instant, secure connection to Windows 365. Sign-in screen with USB security key option (Source: Microsoft) Windows 365 Link prioritizes security “We have heard concerns from IT pros about the vulnerability of endpoints that store local data, house applications, and allow users administrative privileges on devices,” said Microsoft. Windows 365 Link features a secure, locked-down OS with no local data, apps, or admin rights, … More →

The post Windows 365 Link Cloud PC: Connect securely to Windows 365 appeared first on Help Net Security.

Cross-IdP impersonation – a technique that enables attackers to hijack the single sign-on (SSO) process to gain unauthorized access to downstream software-as-a-service (SaaS) applications without compromising a company’s primary identity provider (IdP) – is expected to gain popularity with attackers, according to Push Security researchers. What is cross-IdP impersonation? Cross-IdP impersonation exploits a flaw in SSO configurations by allowing attackers to create fraudulent IdP accounts matching an organization’s domain, which are then used to access … More →

The post Cross-IdP impersonation bypasses SSO protections appeared first on Help Net Security.

Tanium unveiled new AI-powered autonomous innovations that transform how IT and Security teams execute change safely and reliably in their IT environments – at scale and in real-time. Tanium Autonomous Endpoint Management (AEM) enhances and extends the Tanium platform with a set of autonomous capabilities across the industry’s most comprehensive real-time platform, which includes asset discovery and inventory, vulnerability management, endpoint management, incident response, and digital employee experience. “Tanium AEM leverages real-time insights from millions … More →

The post Tanium delivers autonomous controls that mitigate risk and maintain operational resiliency appeared first on Help Net Security.

Onapsis announced the Onapsis Secure RISE Accelerator, helping organizations execute their RISE with SAP transformation with confidence. The new offering reduces security and compliance obstacles with a structured, bundled solution that simplifies and accelerates an organization’s project planning and execution with SAP-endorsed technology, threat insights and comprehensive SAP cybersecurity expertise and best practices. As companies increasingly choose the RISE with SAP program to move to the cloud and modernize their SAP environments, security and compliance … More →

The post Onapsis Secure RISE Accelerator streamlines security elements of modern SAP deployments appeared first on Help Net Security.

ReasonLabs launched Online Security platform for Android and iOS, available for download on the Google Play Store and Apple App Store. This marks a significant milestone in ReasonLabs’ mission to deliver a comprehensive security platform that empowers over 25 million users with protection for their devices, identities, and privacy. ReasonLabs’ platform, already recognized for its identity and device protection delivered on desktops, now extends its availability to mobile devices. Americans lost more than $12.5 billion … More →

The post ReasonLabs launches Online Security platform for Android and iOS appeared first on Help Net Security.

Hornetsecurity launched DMARC Manager, an advanced tool addresses the complex challenges organisations face in managing DMARC, DKIM, and SPF configurations, especially for those operating across multiple domains. As email threats such as fraud and impersonation attacks continue to rise, the need for robust email authentication practices has never been more critical. DMARC Manager is designed to empower administrators and CISOs by providing an intuitive solution for setting up and maintaining best practices in email authentication. … More →

The post Hornetsecurity DMARC Manager protects against fraud and phishing attacks appeared first on Help Net Security.

Splunk announced its enterprise security, observability and platform offerings on Microsoft Azure. In partnering with Microsoft, Splunk empowers organizations to scale their digital transformation on Azure with unified solutions that accelerate innovation and strengthen security. “Splunk’s strategic partnership with Microsoft to build Splunk natively on Azure demonstrates our commitment to advancing digital resilience to help our customers and partners remain secure and up and running at every step of their cloud journey,” said Tom Casey, … More →

The post Splunk simplifies infrastructure requirements for Microsoft Azure customers appeared first on Help Net Security.

Oracle has released a security patch for CVE-2024-21287, a remotely exploitable vulnerability in the Oracle Agile PLM Framework that is, according to Tenable researchers, being actively exploited by attackers. About CVE-2024-21287 Oracle Agile PLM Framework is an enterprise product lifecycle management solution that enables collaboration between the various teams involved. CVE-2024-21287 affects version 9.3.6 of the Agile PLM Framework – more specifically, the Agile Software Development Kit and the Process Extension components. “This vulnerability is … More →

The post Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287) appeared first on Help Net Security.

The Justice Department unsealed criminal charges against Evgenii Ptitsyn, 42, a Russian national, for allegedly administering the sale, distribution, and operation of Phobos ransomware. Ptitsyn made his initial appearance in the US District Court for the District of Maryland on Nov. 4 after being extradited from South Korea. Phobos ransomware, through its affiliates, victimized more than 1,000 public and private entities in the United States and around the world, and extorted ransom payments worth more … More →

The post Phobos ransomware administrator faces US cybercrime charges appeared first on Help Net Security.

Aon launched its Cyber Risk Analyzer, a digital application that allows risk managers to make data-driven, technology-enabled decisions to mitigate cyber risk. The tool is the latest in a series of new offerings, which brings together Aon’s data, tools and analytics professionals to support clients through an evolving risk landscape across sectors. “As cyber threats continue to grow in frequency, sophistication and severity, organizations face an array of complex risks—from ransomware and business interruption to … More →

The post Aon Cyber Risk Analyzer empowers organizations to evaluate cyber risk appeared first on Help Net Security.

AlmaLinux is a free, open-source, enterprise-grade Linux distribution. Governed and owned by the community, it offers a production-ready platform with binary compatibility to Red Hat Enterprise Linux. AlmaLinux 9.5, codenamed Teal Serval, is now available. Security updates: The OpenSSL TLS toolkit is upgraded to version 3.2.2. OpenSSL now supports certificate compression extension (RFC 8879) and Brainpool curves have been added to the TLS 1.3 protocol (RFC 8734). The SELinux policy now provides a boolean that … More →

The post AlmaLinux 9.5 released: Security updates, new packages, and more! appeared first on Help Net Security.

Belden announces new network and data infrastructure products designed for secure, high-quality performance in critical applications. Data orchestration & management Hirschmann EAGLE40-6M Train Firewalls meet the demands of railway rolling stock with industrial firewall capabilities and multiple industry-relevant certifications. Their robust design allows them to withstand moving trains while providing maximum data security by performing deep packet inspection of onboard rolling stock communication protocols. Hirschmann OpEdge-4D Industrial Edge Gateways feature hazardous location approvals and run … More →

The post Belden announces products designed to enhance data security appeared first on Help Net Security.