Help Net Security

Building fake, fraudulent online stores has never been easier: fraudsters are registering domain names for a pittance, using the SHOPYY e-commerce platform to build the websites, and leveraging large language models (LLMs) to rewrite existing product listings to perfect their search engine performance. “We first observed LLM-generated retail product descriptions in July 2024, and similar behaviors continue into the holiday shopping season,” Netcraft Software Engineering Team Lead Will Barnes has shared. From August to October … More →

The post Black Friday shoppers targeted with thousands of fraudulent online stores appeared first on Help Net Security.

Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in Windows Task Scheduler, as zero-days earlier this year. “Chaining together two zero-day vulnerabilities armed RomCom with an exploit that requires no user interaction,” ESET researchers said. The campaign leveraging the zero-click exploit CVE-2024-9680 allowed the attackers to execute code in the restricted context of the browser and CVE-2024-49039 allowed it … More →

The post RomCom hackers chained Firefox and Windows zero-days to deliver backdoor appeared first on Help Net Security.

Bitwarden further strengthened inline autofill capabilities within its browser extension. Users can easily generate and autofill strong, unique passwords for new accounts directly from the inline autofill menu. This update eliminates the need for manual password creation, making account management more efficient and intuitive. Integrating secure account creation directly into the autofill menu enables users to complete the process with just one click, enhancing functionality and convenience. Streamlining account creation and security The latest update … More →

The post Bitwarden enhances inline autofill features to simplify account creation appeared first on Help Net Security.

CampusGuard announced CampusGuard Central, its dynamic customer compliance portal. CampusGuard Central empowers organizations to manage PCI DSS compliance across their enterprise with a single, user-friendly tool. Central’s latest release includes the following enhancements: Updated user interface: Hide or expand the left navigation bar Collapsible group headers on the dashboard Expand the view to full screen Resize and/or filter data tables Full support for PCI DSS v4.0 Customers can define an unlimited number of Custom Fields … More →

The post CampusGuard Central empowers organizations to manage PCI DSS compliance appeared first on Help Net Security.

The combination of remote work, the latest technologies, and never physically meeting your employees has made it very easy for job applicants to mask their true identities from their employer and commit employment fraud. Motivations for this type of fraud vary, so it’s essential to start by quickly reviewing the key forms that employment fraud can take: Nation-state or criminal organization fraud, where employees infiltrate an organization to gain access to systems, data, or payroll … More →

The post How to recognize employment fraud before it becomes a security issue appeared first on Help Net Security.

In this Help Net Security interview, Alona Geckler, Chief of Staff, SVP of Business Operations at Acronis, shares her insights on the diversity environment in the cybersecurity and IT industries. She discusses the progress made over the past two decades, initiatives to foster inclusivity, and the remaining challenges. Geckler addresses unconscious bias and barriers to career advancement, offering practical strategies for organizations to foster more inclusive environments. How has the industry evolved in terms of … More →

The post Practical strategies to build an inclusive culture in cybersecurity appeared first on Help Net Security.

In this Help Net Security video, Vincent D’Angelo, Global Director of Corporate Development and Strategic Alliances with CSC, analyzes the domain security of the Forbes Global 2000. CSC’s 2024 Domain Security Report analyzes the highest and lowest-performing industries based on the adoption of domain security features like registry lock, CAA records, DNS redundancy, type of registrar, DNSSEC, SPF, DKIM, and DMARC. The top five highest-performing industries were Business Services and Supplies, IT Software and Services, … More →

The post Domain security posture of Forbes Global 2000 companies appeared first on Help Net Security.

Application Security Engineer Agoda | UAE | Hybrid – View job details As an Application Security Engineer, you will develop and design application-level security controls and standards. Perform application security design reviews against new products and services. Track and prioritize all security issues. Build internal security tools that help fix security problems at scale. Perform code review and drive remediation of discovered issues. Enable automated security testing at scale to measure vulnerability, and report on … More →

The post Cybersecurity jobs available right now: November 26, 2024 appeared first on Help Net Security.

Forest Blizzard, a threat group associated with Russia’s GRU military intelligence service, repeatedly breached a US-based organization via compromised computer systems of nearby firms, which they leveraged to authenticate to the target’s enterprise Wi-Fi network. The repeated attacks Volexity, a company that specializes in helping organizations detect the presence of and boot out nation-state level intruders from their systems and networks, said that the attackers were first spotted on a server on the target US … More →

The post Faraway Russian hackers breached US organization via Wi-Fi appeared first on Help Net Security.

Participants of the Windows Insider Program that have a Qualcomm Snapdragon-powered Copilot+ PC can now try out Recall, the infamous snapshot-taking, AI-powered feature that was met with much criticism when it was unveiled earlier this year. “We heard your feedback on needing a secure, controllable experience for using Recall in your organizations. Recall will be disabled by default and IT can enable this feature through new policies before it will be made available to individuals … More →

The post Microsoft asks Windows Insiders to try out the controversial Recall feature appeared first on Help Net Security.

Wireshark, the popular network protocol analyzer, has reached version 4.4.2. It is used for troubleshooting, analysis, development and education. The following vulnerabilities have been fixed: wnpa-sec-2024-14 FiveCo RAP dissector infinite loop. wnpa-sec-2024-15 ECMP dissector crash. Updated protocol support: ARTNET, ASN.1 PER, BACapp, BT BR/EDR, CQL, DOF, ECMP, ENIP, FiveCo RAP, Frame, FTDI FT, HSRP, HTTP/2, ICMPv6, IEEE 802.11, MBTCP, MMS, MPEG PES, PN-DCP, POP, ProtoBuf, PTP, RPC, RTCP, SIP, SRT, Syslog, TCP, UMTS RLC, USB … More →

The post Wireshark 4.4.2: Security updates, bug fixes, updated protocol support appeared first on Help Net Security.

As we continue to delegate more infrastructure operations to artificial intelligence (AI), quantum computers are advancing towards Q-day (i.e., the day when quantum computers can break current encryption methods). This could compromise the security of digital communications, as well as autonomous control systems that use AI and ML to make decisions. As AI and quantum converge to reveal extraordinary novel technologies, they will also combine to produce new threat vectors and quantum cryptanalysis. AI and … More →

The post AI Kuru, cybersecurity and quantum computing appeared first on Help Net Security.

In this Help Net Security interview, Balázs Pózner, CEO at Hackrate, discusses the essential technical skills for ethical hackers and how they vary across different security domains. He explains how AI and machine learning enhance ethical hacking by streamlining vulnerability detection and boosting defenses. Pózner also discusses legal challenges and highlights the role of community testing and user education in improving cybersecurity tools. What are the most critical technical skills an ethical hacker should possess, … More →

The post Overcoming legal and organizational challenges in ethical hacking appeared first on Help Net Security.

The Kali SOC in AWS project is a Terraform-based implementation that enables the deployment of a Security Operations Center (SOC) in AWS, utilizing the Kali Linux toolset for purple team activities. This environment is ideal for honing skills in security operations, threat detection, incident response, and training scenarios. The project is inspired by the original CloudFormation-based deployment by ZoccoCss. About the Kali SOC project “I created this project to address the need for accessible and … More →

The post Deploy a SOC using Kali Linux in AWS appeared first on Help Net Security.

In this Help Net Security video, Frank Kim, SANS Institute Fellow, explains why more enterprises must consider many challenges before implementing advanced technology in their platforms. Without adequately assessing and understanding the risks accompanying AI integration, organizations will not be able to harness its full potential or even just ensure that it’s in the best interest of their organization to utilize it. Some important considerations to think about include: Data risks – Ensuring that the … More →

The post Assessing AI risks before implementation appeared first on Help Net Security.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: 2,000 Palo Alto Networks devices compromised in latest attacks Attackers have compromised around 2,000 Palo Alto Networks firewalls by leveraging the two recently patched zero-days (CVE-2024-0012 and CVE-2024-9474), Shadowserver Foundation’s internet-wide scanning has revealed. Researchers unearth two previously unknown Linux backdoors ESET researchers have identified multiple samples of two previously unknown Linux backdoors: WolfsBane and FireWood. ScubaGear: Open-source tool to … More →

The post Week in review: 0-days exploited in Palo Alto Networks firewalls, two unknown Linux backdoors identified appeared first on Help Net Security.

Securiti announced a new solution – Security for AI Copilots in SaaS apps. The biggest impediment in adopting AI Copilots, like Microsoft 365 Copilot, is the security of data. Organizations must ensure that data does not inadvertently leak to the wrong employees via Copilot prompt responses, nor get exposed to third parties and AI plugins. Securiti provides a comprehensive solution for preventing these issues, enabling organizations to confidently boost employee productivity while ensuring robust security … More →

The post Security for AI Copilots in SaaS apps identifies risky access permissions appeared first on Help Net Security.

SentinelOne announced new AI security posture management (AI-SPM) capabilities to protect and secure the use of AI services in the workplace. Built on SentinelOne’s Singularity cybersecurity platform, the new offering will expand SentinelOne’s top-rated Singularity Cloud Security portfolio to give customers visibility into – and protection over – both known and shadow AI cloud services running in their environment. SentinelOne’s AI-SPM will help security teams discover the entire inventory of AI applications and models being … More →

The post SentinelOne AI-SPM detects misconfigurations and vulnerabilities in AI applications appeared first on Help Net Security.

The Proxmox Virtual Environment 8.3 enterprise virtualization solution features management tools and a user-friendly web interface, allowing you to deploy open-source solutions in clustered, highly available setups. This version is based on Debian 12.8 (Bookworm), but uses the Linux kernel 6.8.12-4 as stable default, and allows for opt-in use of kernel 6.11. The software includes updates to the latest versions of leading open-source technologies for virtual environments like QEMU 9.0.2, LXC 6.0.0 , and ZFS … More →

The post Proxmox Virtual Environment 8.3: SDN-firewall integration, faster container backups, and more! appeared first on Help Net Security.

In this Help Net Security interview, Ben Colman, CEO of Reality Defender, discusses the challenges of detecting high-quality deepfakes in real-world applications. He addresses the effectiveness and limitations of watermarking, AI-based detection, and the potential of emerging technologies in securing media authenticity. Colman also emphasizes the importance of public education, sector-specific AI implementation, and proactive research collaboration to counter rapidly advancing deepfake tactics. Given the evolution of deepfake generation technologies, what are the current limitations … More →

The post The limits of AI-based deepfake detection appeared first on Help Net Security.