Help Net Security

The cyber insurance market is set for explosive growth as organizations increasingly seek financial protection against rising cyber threats. This surge in demand reflects a broader shift in how businesses approach risk management, viewing cyber insurance not just as an option but as a necessity. As the market evolves, insurers and businesses alike must adapt to meet the complex demands of protecting against the financial impacts of cyber incidents. The anticipated growth underscores a shift … More →

The post The surge in cyber insurance and what it means for your business appeared first on Help Net Security.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical VMware vCenter Server bugs fixed (CVE-2024-38812) Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). Apple releases iOS 18, with security and privacy improvements Apple has launched iOS 18, the latest significant iteration of … More →

The post Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18 appeared first on Help Net Security.

Resecurity announced that it has joined the Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. Continue ReadingAs an innovator in cybersecurity, Resecurity brings its expertise in threat intelligence, risk management, and cloud security solutions to the CSA. Resecurity’s platform combines AI-driven threat detection and real-time data analytics, helping organizations mitigate risks in cloud environments. By joining the CSA, Resecurity aims … More →

The post Resecurity joins Cloud Security Alliance to help organizations secure cloud technologies appeared first on Help Net Security.

Opnova announced its official launch, introducing an agentic AI platform designed to close the automation gap in complex operational workflows. Backed by $3.75 million in pre-seed funding co-led by Faber, ScaleX, and Preface Ventures, Opnova is set to redefine IT operations by addressing the challenges posed by rework—the time spent on repetitive, mundane, yet essential tasks. Operations teams are the backbone of every business, but the weight of repetitive tasks can seriously impact efficiency and … More →

The post Opnova emerges from stealth with $3.75 million in funding appeared first on Help Net Security.

Bad bot traffic continues to rise year-over-year, accounting for nearly a third of all internet traffic in 2023. Bad bots access sensitive data, perpetrate fraud, steal proprietary information, and degrade site performance. New technologies are enabling fraudsters to strike faster and inflict more damage. Bots’ indiscriminate and large-scale attacks pose a risk to businesses of all sizes in all industries. But there are techniques your business can adopt to address this malicious activity. By leveraging … More →

The post How to detect and stop bot activity appeared first on Help Net Security.

In this Help, Net Security interview, Michael Oberlaender, ex-CISO, and book author, discusses how to strike the right balance between security and operational efficiency. Oberlaender advises companies starting their cybersecurity journey and stresses the importance of aligning with various frameworks. He also introduces his latest book, which provides insights into the CISO role and effective cybersecurity leadership. How do you balance the need for security with operational efficiency and flexibility in an organization’s cybersecurity strategy? … More →

The post Striking the balance between cybersecurity and operational efficiency appeared first on Help Net Security.

As the priority for managing digital identities intensifies, organizations are encountering severe identity security risks. Recent findings indicate that many businesses are struggling with frequent breaches and inadequate security measures, particularly concerning machine identities. Despite increased efforts and awareness, issues such as compromised credentials and complex system vulnerabilities persist. The proliferation of non-human identities Entro Security | 2025 State of Non-Human Identities and Secrets in Cybersecurity report | September 2024 97% of non-human identities (NHIs) … More →

The post Rising identity security risks: Why organizations must act now appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from anecdotes, F5 Networks, Gcore, Rapid7, Strivacity, and Veritas Technologies. Veritas unveils AI-driven features to simplify cyber recovery Veritas Technologies unveiled new AI-driven capabilities to further expand the strength and functionality of the Veritas cyber resilience portfolio. The new innovations, including AI-powered automation and user interface enhancements, provide data protection specialists and IT generalists with intelligent, easy-to-use solutions that remove the … More →

The post New infosec products of the week: September 20, 2024 appeared first on Help Net Security.

Nextcloud has launched Nextcloud Hub 9, a significant update to its open-source cloud-based collaboration platform. It introduces several new features to improve user experience, performance, and security. Enhanced security in Nextcloud Hub 9 Nextcloud Hub 9 lets you strengthen your security and administrative controls even further with several new fine-grained security tools and mechanics: The option to set up a PIN code for passwordless authentication, adding an extra layer of security in case someone gains … More →

The post Nextcloud Hub 9 released: New features, more security, updated performance appeared first on Help Net Security.

For a while now, security researchers have been warning about fake human verification pages tricking Windows users into inadvertently installing malware. A recently exposed campaign showed how some users end up on these pages. Beware of fake human verification pages In late August 2024, Palo Alto Networks’ Unit 42 spotted seven CAPTCHA-style human verification pages that were not what they seemed. “These pages have a button that, when clicked, shows instructions for victims to paste … More →

The post Windows users targeted with fake human verification pages delivering malware appeared first on Help Net Security.

Zenity announced an agent-less security solution for Microsoft 365 Copilot with the Zenity AI Trust Layer. With this product launch, Zenity is continuing to empower its customers to confidently and securely unleash business enablement. Microsoft 365 Copilot is embedded across the Microsoft suite, including SharePoint and M365. This presents massive opportunities for businesses to enable all their employees and third parties to be more efficient and effective through the use of Generative AI. However, Microsoft 365 … More →

The post Zenity unveils agent-less security solution for Microsoft 365 Copilot appeared first on Help Net Security.

Juniper Networks announced several key enhancements to its AI-Native Networking Platform that enable customers and partners to take full advantage of the emerging 802.11be amendment (Wi-Fi 7), which promises higher throughput, lower latency, extended range and greater reliability than previous Wi-Fi versions. By combining new Juniper Mist Wi-Fi 7 access points (APs) and high-power campus EX switches with Juniper’s Mist AI and cloud-native networking and security services, Juniper’s wired and wireless Local Area Networking (LAN) … More →

The post Juniper extends AI-Native Networking Platform to maximize the full potential of Wi-Fi 7 appeared first on Help Net Security.

Researchers have released technical details about CVE-2024-45488, a critical authentication bypass vulnerability affecting One Identity’s Safeguard for Privileged Passwords (SPP), which could allow attackers to gain full administrative access to the virtual appliance. “Once an attacker has gained an authenticated administrative session on the appliance, they can carry out any action that a legitimate administrator user would be capable of. This includes the ability to reconfigure settings on the appliance, or modify policies to allow … More →

The post Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488) appeared first on Help Net Security.

Picus Security announced it has closed a $45 million growth investment round led by Riverwood Capital with the participation of existing investor Earlybird Digital East Fund, bringing Picus’ total funds raised to $80 million. Picus has over 500 enterprise customers worldwide today, and this latest investment will advance Picus’ continued product innovation and expand customer success, sales, and marketing. Picus offers the only Adversarial Exposure Validation solution that brings together Automated Penetration Testing, Breach and … More →

The post Picus Security raises $45 million to help organizations reduce cyber risk appeared first on Help Net Security.

A botnet operated by the Chinese state-sponsored threat actor known as Flax Typhoon has been disrupted by the law enforcement agency and abandoned by the group, FBI Director Chris Wray confirmed on Wednesday. “We executed court-authorized operations to take control of the botnet’s infrastructure. When the bad guys realized what was happening, they tried to migrate their bots to new servers and even conducted a distributed denial-of-service attack against us,” he told the audience at … More →

The post FBI forced Flax Typhoon to abandon its botnet appeared first on Help Net Security.

Forescout announced its new SaaS Operational Technologies (OT) solution. Forescout for OT Security is a security solution that allows organizations to secure complex, heterogeneous OT, IoT/IoMT, and IT environments whether they are fully in cloud, completely air-gapped, or hybrid. Forescout for OT Security combines: Proactive security and exposure management Threat detection powered by Forescout Research – Vedere Labs’ proprietary threat research of unmanaged devices Critical operational monitoring Control across cloud and on-premises networks “The attack … More →

The post Forescout for OT Security secures OT, IoT, and IT hybrid environments appeared first on Help Net Security.

Strivacity released Strivacity AI Assist, a new “smart assistant” powered by GenAI that makes it easier to manage and secure digital identities across business-to-business (B2B) and business-to-consumer (B2C) use cases. Building on Strivacity’s machine learning capabilities for fraud detection, Strivacity AI Assist is the first GenAI capability embedded across a CIAM platform that provides real-time, contextual guidance throughout the customer journey – spanning customer experience, security, and compliance.  With AI Assist, digital experience leaders, security … More →

The post Strivacity AI Assist optimizes digital identity management appeared first on Help Net Security.

Tenable launched Tenable Enclave Security, a solution that supports the needs of customers operating in highly secure environments, such as those that are classified or otherwise air-gapped. Backed by Tenable Security Center, Tenable Enclave Security protects IT assets and modern workloads with risk assessment and contextual insight so organizations can identify exposures before they cause damage. Federal agencies face unique security and compliance regulations when deploying cloud solutions, and Tenable Enclave Security is key to … More →

The post Tenable Enclave Security enables discovery, assessment and analysis of IT assets appeared first on Help Net Security.

Edera announced it has raised $5 million in a seed round led by 645 Ventures and Eniac Ventures with participation from FPV Ventures, Generationship, Precursor Ventures and Rosecliff Ventures. Angel investors include Joe Beda, Filippo Valsorda, Mandy Andress, Jeff Behl and Kleiner Perkins scout Nikitha Suryadevara, among others. While Kubernetes turned 10 years-old earlier this year, running secure multi-tenancy workloads remains an unsolved problem that’s costing companies millions of dollars. Edera is introducing a diverse … More →

The post Edera raises $5 million to improve Kubernetes security appeared first on Help Net Security.

In the push for secure AI models, many organizations have turned to differential privacy. But is the very tool meant to protect user data holding back innovation? Developers face a tough choice: balance data privacy or prioritize precise results. Differential privacy may secure data, but it often comes at the cost of accuracy—an unacceptable trade-off for industries like healthcare and finance, where even small errors can have major consequences. Finding the balance Differential privacy protects … More →

The post Differential privacy in AI: A solution creating more problems for developers? appeared first on Help Net Security.