Help Net Security

Juniper Networks announced several key enhancements to its AI-Native Networking Platform that enable customers and partners to take full advantage of the emerging 802.11be amendment (Wi-Fi 7), which promises higher throughput, lower latency, extended range and greater reliability than previous Wi-Fi versions. By combining new Juniper Mist Wi-Fi 7 access points (APs) and high-power campus EX switches with Juniper’s Mist AI and cloud-native networking and security services, Juniper’s wired and wireless Local Area Networking (LAN) … More →

The post Juniper extends AI-Native Networking Platform to maximize the full potential of Wi-Fi 7 appeared first on Help Net Security.

Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard for Privileged Passwords (SPP), which could allow attackers to gain full administrative access to the virtual appliance. “Once an attacker has gained an authenticated administrative session on the appliance, they can carry out any action that a legitimate administrator user would be capable of. This includes the ability to reconfigure settings on the appliance, or modify policies to allow … More →

The post Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488) appeared first on Help Net Security.

Picus Security announced it has closed a $45 million growth investment round led by Riverwood Capital with the participation of existing investor Earlybird Digital East Fund, bringing Picus’ total funds raised to $80 million. Picus has over 500 enterprise customers worldwide today, and this latest investment will advance Picus’ continued product innovation and expand customer success, sales, and marketing. Picus offers the only Adversarial Exposure Validation solution that brings together Automated Penetration Testing, Breach and … More →

The post Picus Security raises $45 million to help organizations reduce cyber risk appeared first on Help Net Security.

A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized operations to take control of the botnet’s infrastructure. When the bad guys realized what was happening, they tried to migrate their bots to new servers and even conducted a distributed denial-of-service attack against us,” he told the audience at … More →

The post FBI forced Flax Typhoon to abandon its botnet appeared first on Help Net Security.

Forescout announced its new SaaS Operational Technologies (OT) solution. Forescout for OT Security is a security solution that allows organizations to secure complex, heterogeneous OT, IoT/IoMT, and IT environments whether they are fully in cloud, completely air-gapped, or hybrid. Forescout for OT Security combines: Proactive security and exposure management Threat detection powered by Forescout Research – Vedere Labs’ proprietary threat research of unmanaged devices Critical operational monitoring Control across cloud and on-premises networks “The attack … More →

The post Forescout for OT Security secures OT, IoT, and IT hybrid environments appeared first on Help Net Security.

Strivacity released Strivacity AI Assist, a new “smart assistant” powered by GenAI that makes it easier to manage and secure digital identities across business-to-business (B2B) and business-to-consumer (B2C) use cases. Building on Strivacity’s machine learning capabilities for fraud detection, Strivacity AI Assist is the first GenAI capability embedded across a CIAM platform that provides real-time, contextual guidance throughout the customer journey – spanning customer experience, security, and compliance.  With AI Assist, digital experience leaders, security … More →

The post Strivacity AI Assist optimizes digital identity management appeared first on Help Net Security.

Tenable launched Tenable Enclave Security, a solution that supports the needs of customers operating in highly secure environments, such as those that are classified or otherwise air-gapped. Backed by Tenable Security Center, Tenable Enclave Security protects IT assets and modern workloads with risk assessment and contextual insight so organizations can identify exposures before they cause damage. Federal agencies face unique security and compliance regulations when deploying cloud solutions, and Tenable Enclave Security is key to … More →

The post Tenable Enclave Security enables discovery, assessment and analysis of IT assets appeared first on Help Net Security.

Edera announced it has raised $5 million in a seed round led by 645 Ventures and Eniac Ventures with participation from FPV Ventures, Generationship, Precursor Ventures and Rosecliff Ventures. Angel investors include Joe Beda, Filippo Valsorda, Mandy Andress, Jeff Behl and Kleiner Perkins scout Nikitha Suryadevara, among others. While Kubernetes turned 10 years-old earlier this year, running secure multi-tenancy workloads remains an unsolved problem that’s costing companies millions of dollars. Edera is introducing a diverse … More →

The post Edera raises $5 million to improve Kubernetes security appeared first on Help Net Security.

In the push for secure AI models, many organizations have turned to differential privacy. But is the very tool meant to protect user data holding back innovation? Developers face a tough choice: balance data privacy or prioritize precise results. Differential privacy may secure data, but it often comes at the cost of accuracy—an unacceptable trade-off for industries like healthcare and finance, where even small errors can have major consequences. Finding the balance Differential privacy protects … More →

The post Differential privacy in AI: A solution creating more problems for developers? appeared first on Help Net Security.

With the adoption of digital wallets and the increasing embedding of consumer digital payments into daily life, ensuring security measures is essential. According to a McKinsey report, digital payments are now mainstream and continually evolving, bringing advancements and new data protection and fraud prevention challenges. In this Help Net Security video, Kayne McGladrey, IEEE Senior Member, discusses best practices for using digital wallets safely.

The post How digital wallets work, and best practices to use them safely appeared first on Help Net Security.

In this Help Net Security interview, Alex Spivakovsky, VP of Research & Cybersecurity at Pentera, discusses essential metrics for evaluating the success of security programs. Spivakovsky explains how automation and proactive testing can reveal vulnerabilities and improve overall security posture. What are the most effective metrics for measuring the success of a security program? The most straightforward metric is: Has your organization been breached? If the answer is yes, it’s clear there’s work to be … More →

The post Essential metrics for effective security program assessment appeared first on Help Net Security.

Data breach episodes have been constantly rising with the number of data breach victims crossing 1 billion in the first half of 2024. A recent Data Breach Report 2023 by Verizon confirms that 74% of data breaches are due to human errors. Although cybersecurity awareness is at an all-time high in organizations still human error, malicious intent & privilege misuse seem to be a cause of most data breach incidents. To build a defense against … More →

The post Data disposal and cyber hygiene: Building a culture of security within your organization appeared first on Help Net Security.

92% of security leaders have concerns about the use of AI-generated code within their organization, according to Venafi. Tension between security and developer teams 83% of security leaders say their developers currently use AI to generate code, with 57% saying it has become common practice. However, 72% feel they have no choice but to allow developers to use AI to remain competitive, and 63% have considered banning AI in coding due to security risks. 66% … More →

The post Security leaders consider banning AI coding due to security risks appeared first on Help Net Security.

Firms in the construction industry are getting breached by hackers via internet-exposed servers running Foundation accounting software, Huntress researchers are warning. “We’re seeing active intrusions among plumbing, HVAC, concrete, and similar sub-industries,” they noted. A way into corporate networks Ohio-based Foundation develops and provides specialized software products and services for companies in the construction industry. “The Foundation software includes a Microsoft SQL Server (MSSQL) instance to handle its database operations,” Huntress researchers explained. Unfortunately, for … More →

The post Hackers breaching construction firms via specialized accounting software appeared first on Help Net Security.

Komodor announced Klaudia, a GenAI agent for troubleshooting and remediating operational issues, as well as optimizing Kubernetes environments. Integrated within the Komodor Kubernetes Management Platform, Klaudia simplifies and accelerates root-cause analysis, empowering both platform and application teams with precise diagnostics to resolve issues with speed and precision. According to Gartner, “Infrastructure and Operations (I&O) teams commonly struggle to manage Kubernetes (K8s) clusters at scale due to the talent shortage — especially on heterogeneous scenarios (multicluster, … More →

The post Komodor Klaudia identifies the root cause of issues in Kubernetes appeared first on Help Net Security.

Another encrypted communication platform used by criminals has been dismantled and its alleged mastermind arrested, the Australian Federal Police has announced on Tuesday. “AFP Operation Kraken charged a NSW man, aged 32, for creating and administering Ghost, a dedicated encrypted communication platform, which the AFP alleges was built solely for the criminal underworld,” the law enforcement agency says. As the man was being arrested, other arrests (51 suspects in all) happened across Australia, Ireland, Italy, … More →

The post Ghost: Criminal communication platform compromised, dismantled by international law enforcement appeared first on Help Net Security.

Fivetran announced Hybrid Deployment, a new solution that allows customers to securely run data pipelines within their own environment from the Fivetran managed platform, providing a single control plane to manage all data sources, whether they are cloud-based SaaS apps or legacy databases with data that needs to be tightly controlled and managed for regulatory or compliance purposes. With the industry’s most comprehensive selection of connectors, destinations and features, Fivetran empowers enterprises to centralize data … More →

The post Fivetran Hybrid Deployment keeps sensitive data within the customer’s environment appeared first on Help Net Security.

Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). “Broadcom is not currently aware of exploitation ‘in the wild’,” the company says, but noted that organizations should promptly act to install one of the updated versions. VMware has patched a similarly critical RCE flaw (CVE-2023-34048) in vCenter Server in October … More →

The post Critical VMware vCenter Server bugs fixed (CVE-2024-38812) appeared first on Help Net Security.

anecdotes has launched Anecdotes Trust Center, a centralized platform for companies to effortlessly share compliance and security information and documentation with prospects, customers, and partners. Reflecting the company’s real-time security and compliance posture, the Trust Center enables companies to decide exactly what information and documentation to share, and to what extent. This helps accelerate the sales cycle by streamlining the security review process. Sales teams can give prospects access to essential documentation early in the … More →

The post Anecdotes Trust Center simplifies compliance and security documentation sharing appeared first on Help Net Security.

Rapid7 has unveiled Vector Command, a fully-managed offensive security service. Vector Command combines the external attack surface assessment capabilities of Rapid7’s recently launched Command Platform with continuous Red Teaming services by its internal experts to help customers identify and validate IT security posture weaknesses from an attacker’s perspective. As the attack surface expands through shadow IT, cloud resources, SaaS solutions, and more, security leaders must maintain visibility of their organization’s internet-facing assets and the security … More →

The post Rapid7 launches Vector Command for continuous red teaming and security gap identification appeared first on Help Net Security.