Help Net Security

Here’s a look at the most interesting products from the past week, featuring releases from Balbix, Halcyon, Metomic, Red Sift, SAFE Security, Veeam Software, and Legit Security. SAFE X equips CISOs with integrated data from all their existing cybersecurity products SAFE X delivers CISOs real-time business impact insights into their cybersecurity posture, enabling better decision-making and risk prioritization. Powered by AI, it delivers instant answers on an organization’s cyber risk posture and offers personalized risk … More →

The post New infosec products of the week: October 4, 2024 appeared first on Help Net Security.

CVE-2024-29824, an unauthenticated SQL Injection vulnerability in Ivanti Endpoint Manager (EPM) appliances, is being exploited by attackers, the Cybersecurity and Infrastructure Security Agency has confirmed by adding the bug to its Known Exploited Vulnerabilities catalog. Ivanti did the same by updating the relevant security advisory to say that they are aware of a limited number of customers who have been exploited. Further details about the attacks are unavailable at this time. About CVE-2024-29824 CVE-2024-29824, reported … More →

The post Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824) appeared first on Help Net Security.

Malwarebytes released new features for Browser Guard, its free browser extension for Chrome, Edge, Firefox, and Safari that blocks content identified as potentially unwanted and unsafe. Users will now receive a pop-up alert if a website was involved in a recent breach, offering the ability to click and scan their digital footprint to evaluate if private information was exposed. New Auto-Cookie Block empowers users to manage their privacy with ease by preventing the collection of … More →

The post Malwarebytes Browser Guard updates block unwanted and unsafe content appeared first on Help Net Security.

Darktrace announced the expansion of Darktrace / CLOUD to support Microsoft Azure environments. The AI-driven Cloud Detection and Response (CDR) system leverages Microsoft’s virtual network flow logs for agentless deployment, slashing deployment times by 95%. The need for AI-driven cloud security has never been more critical. 51% of US organizations use cloud computing today, and global spending on public cloud services is expected to reach $805 billion in 2024. Moreover, Darktrace’s State of AI Cybersecurity report … More →

The post Darktrace brings real-time cloud detection and response to Microsoft Azure customers appeared first on Help Net Security.

While the Common UNIX Printing System (CUPS) vulnerabilities recently disclosed by researcher Simone “evilsocket” Margaritelli are not easily exploited for remote command execution on vulnerable systems, they could offer more opportunity to attackers who engage in DDoS attacks, Akamai threat researchers have discovered. Potential for RCE CUPS is an open-source printing system based on the Internet Printing Protocol (IPP). While present on many Linux, BSD and other systems, CUPS is not enabled by default on … More →

The post CUPS vulnerabilities could be abused for DDoS attacks appeared first on Help Net Security.

Legit Security launched its new “Legit Posture Score,” delivering a dynamic, comprehensive, and fully transparent ASPM rating system. Now security teams can proactively measure and manage their AppSec posture instantly with a holistic score that eliminates security scanning siloes and continuously assesses all associated risks, policies, and controls across today’s sprawling software development lifecycle (SDLC). Security leaders today struggle simply to see, let alone act or improve on, their application security postures. They’re left with … More →

The post Legit Posture Score empowers security teams to measure and manage their AppSec posture appeared first on Help Net Security.

Undeterred by the indictment issued against one of its alleged members, North Korean APT group Stonefly (aka APT45) continues to target companies in the US, Symantec threat analysts warned. About Stonefly Also known as Andariel and OnyxFleet, Stonefly has been linked to the linked to the Reconnaissance General Bureau (RGB), a North Korean military intelligence agency. Assessed structure of DPRK cyber operations in 2024 (Source: Mandiant) “APT45 relies on a mix of publicly available tools … More →

The post Private US companies targeted by Stonefly APT appeared first on Help Net Security.

AuthenticID released Velocity Checks, a new tool that integrates with its comprehensive identity verification and fraud prevention platform. The solution leverages biometric and document analysis to detect multiple identities for fraudulent activities in real-time. Fraudsters can use different names with the same image so that identical visual data (like headshots or biometric information) is paired with multiple identity documents or account registrations with differing names. Velocity Checks uses sophisticated image comparison algorithms to analyze ID … More →

The post AuthenticID Velocity Checks detects fraudulent activities appeared first on Help Net Security.

According to Gartner, the market for cloud computing services is expected to reach $675 billion in 2024. Companies are shifting from testing the waters of cloud computing to making substantive investments in cloud-native IT, and attackers are shifting with them. As security teams level up to support the transition, we’re seeing three specific issues that impede cloud detection and response. 1) Cloud-native IT blurs the lines between layers of the cloud stack – it’s a … More →

The post Three hard truths hindering cloud-native detection and response appeared first on Help Net Security.

In this Help Net Security interview, Andrius Popovas, Chief Risk Officer at Mano Bank, discusses the most prevalent AI-driven fraud schemes, such as phishing attacks and deepfakes. He explains how AI manipulates videos and audio to deceive victims and highlights key red flags to watch for. Popovas also outlines strategies for professionals to stay ahead of these scams and the role of governments in combating AI fraud. What types of AI-driven fraud schemes are most … More →

The post Spotting AI-generated scams: Red flags to watch for appeared first on Help Net Security.

The latest Apple OS updates (iOS 18, iPadOS 18, macOS Sequoia) have introduced a standalone Passwords app, to make users’ passwords, passkeys, Wi-Fi passwords, and verification codes easily accessible. You can access the Passwords app on your iPhone, iPad, Mac, Apple Vision Pro, and on Windows via the iCloud for Windows app. All passwords sync securely with iCloud Keychain, enabling you to access them across your devices. If you use AutoFill, you can make it … More →

The post How to use the Apple Passwords app appeared first on Help Net Security.

Rigid security protocols — such as complex authentication processes and highly restrictive access controls — can frustrate employees, slow productivity and lead to unsafe workarounds, according to Ivanti. Understanding workplace behavior key to strengthening security In fact, one in two office workers admit to using personal devices to log into work networks, with 32% of them revealing their employers are unaware of this practice. Yet, just 13% of security professionals say user experience (UX) for … More →

The post 15% of office workers use unsanctioned GenAI tools appeared first on Help Net Security.

Ransomware attacks have seen a significant resurgence, disrupting multiple sectors and affecting global supply chains. Despite efforts to disrupt major ransomware groups, incidents continue to rise, signaling an ongoing and growing threat into 2024. In this Help Net Security round-up, industry experts discuss the rise in ransomware attacks, their impact on critical systems like Microsoft Active Directory, and the growing resilience of the threat despite ongoing mitigation efforts. Craig Birch, Technology Evangelist, and Principal Security … More →

The post Ransomware activity shows no signs of slowing down appeared first on Help Net Security.

The cybersecurity skills gap presents ongoing challenges worldwide, so organizations are scrambling to fill cloud security positions. Having a subject matter expert on staff qualified to advise on cloud security requirements is more important now than ever. Because of this demand, cybersecurity professionals are presented with promising career opportunities when they specialize in cloud security. Learn more in the whitepaper, including: Why demand for multicloud security professionals is exploding How continuous learning benefits cyber professionals … More →

The post Whitepaper: Reach higher in your career with cloud security appeared first on Help Net Security.

Venafi introduced new product capabilities in its Control Plane for Machine Identities. This latest version of the Venafi Control Plane will enable security and platform teams to address the most critical machine identity security challenges and help future-proof their organizations, including post-quantum readiness, cloud-to-cloud connectivity and workload identity security. “As today’s security landscape continues to rapidly evolve with multi-cloud and post-quantum readiness as key concerns, security professionals and developers alike are faced with new, emerging … More →

The post Venafi helps organizations solve more machine identity security problems appeared first on Help Net Security.

Metomic released its Data Classification solution, making it possible to discover, classify and secure sensitive data at scale across Google Workspaces. Metomic’s latest innovation is an AI-powered tool that automates complex data management workflows, enabling IT and security teams to maintain control of their data while also ensuring data compliance across cloud-based storage and SaaS environments. Without accurate data classification, businesses can’t prioritize risk, address vulnerabilities or implement effective security measures at scale downstream. With … More →

The post Metomic Data Classification automates complex data management workflows appeared first on Help Net Security.

PlexTrac announced significant enhancements to its platform. These updates are designed to help enterprises and security service providers harness proactive security by offering business context, automating risk scoring to focus on what matters most, streamlining remediation workflows with event-driven interoperability, and measuring the effectiveness of proactive security measures in mitigating risk over time. These new capabilities allow customers and partners to make significant strides in automating the Continuous Threat Exposure Management (CTEM) lifecycle as part … More →

The post PlexTrac unveils new capabilities to prioritize proactive security remediation appeared first on Help Net Security.

Concentric AI announced an AI-based DSPM functionality that identifies data access and activity risk from Copilot requests. With this launch, enterprises can now for leverage AI-driven DSPM to track, monitor and seamlessly enforce access governance around Copilot activity and abnormal user requests, as well as remediate those scenarios to prevent data loss. “Enterprises looking to roll out Copilot are worried that sensitive data can be accessed inappropriately by end users from all of these interactions,” … More →

The post Concentric AI helps monitor and remediate risky Copilot activity appeared first on Help Net Security.

Harmonic Security has secured $17.5 million in Series A funding to bring its “zero-touch data protection” capabilities to enterprises. Total funding has now reached more than $26 million since the company launched in October last year with enterprise customers already in double figures. Harmonic Security has built a completely new approach to data protection using pre-trained, specialized language models. The Series A round is being led by Next47, a leading venture capital firm that has … More →

The post Harmonic Security raises $17.5 million to improve data security for organizations appeared first on Help Net Security.

Attackers are actively exploiting CVE-2024-45519, a critical Zimbra vulnerability that allows them to execute arbitrary commands on vulnerable installations. Proofpoint’s threat researchers say that the attacks started on September 28 – several weeks after Zimbra developers released patches for CVE-2024-45519 and other flaws, and a day after ProjectDiscovery’s analysts published a detailed technical write-up about the vulnerability and a PoC exploit to demonstrate the potential for local exploitation. Other researchers have published PoCs on GitHub … More →

The post Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519) appeared first on Help Net Security.