Help Net Security

With the adoption of digital wallets and the increasing embedding of consumer digital payments into daily life, ensuring security measures is essential. According to a McKinsey report, digital payments are now mainstream and continually evolving, bringing advancements and new data protection and fraud prevention challenges. In this Help Net Security video, Kayne McGladrey, IEEE Senior Member, discusses best practices for using digital wallets safely.

The post How digital wallets work, and best practices to use them safely appeared first on Help Net Security.

In this Help Net Security interview, Alex Spivakovsky, VP of Research & Cybersecurity at Pentera, discusses essential metrics for evaluating the success of security programs. Spivakovsky explains how automation and proactive testing can reveal vulnerabilities and improve overall security posture. What are the most effective metrics for measuring the success of a security program? The most straightforward metric is: Has your organization been breached? If the answer is yes, it’s clear there’s work to be … More →

The post Essential metrics for effective security program assessment appeared first on Help Net Security.

Data breach episodes have been constantly rising with the number of data breach victims crossing 1 billion in the first half of 2024. A recent Data Breach Report 2023 by Verizon confirms that 74% of data breaches are due to human errors. Although cybersecurity awareness is at an all-time high in organizations still human error, malicious intent & privilege misuse seem to be a cause of most data breach incidents. To build a defense against … More →

The post Data disposal and cyber hygiene: Building a culture of security within your organization appeared first on Help Net Security.

92% of security leaders have concerns about the use of AI-generated code within their organization, according to Venafi. Tension between security and developer teams 83% of security leaders say their developers currently use AI to generate code, with 57% saying it has become common practice. However, 72% feel they have no choice but to allow developers to use AI to remain competitive, and 63% have considered banning AI in coding due to security risks. 66% … More →

The post Security leaders consider banning AI coding due to security risks appeared first on Help Net Security.

Firms in the construction industry are getting breached by hackers via internet-exposed servers running Foundation accounting software, Huntress researchers are warning. “We’re seeing active intrusions among plumbing, HVAC, concrete, and similar sub-industries,” they noted. A way into corporate networks Ohio-based Foundation develops and provides specialized software products and services for companies in the construction industry. “The Foundation software includes a Microsoft SQL Server (MSSQL) instance to handle its database operations,” Huntress researchers explained. Unfortunately, for … More →

The post Hackers breaching construction firms via specialized accounting software appeared first on Help Net Security.

Komodor announced Klaudia, a GenAI agent for troubleshooting and remediating operational issues, as well as optimizing Kubernetes environments. Integrated within the Komodor Kubernetes Management Platform, Klaudia simplifies and accelerates root-cause analysis, empowering both platform and application teams with precise diagnostics to resolve issues with speed and precision. According to Gartner, “Infrastructure and Operations (I&O) teams commonly struggle to manage Kubernetes (K8s) clusters at scale due to the talent shortage — especially on heterogeneous scenarios (multicluster, … More →

The post Komodor Klaudia identifies the root cause of issues in Kubernetes appeared first on Help Net Security.

Another encrypted communication platform used by criminals has been dismantled and its alleged mastermind arrested, the Australian Federal Police has announced on Tuesday. “AFP Operation Kraken charged a NSW man, aged 32, for creating and administering Ghost, a dedicated encrypted communication platform, which the AFP alleges was built solely for the criminal underworld,” the law enforcement agency says. As the man was being arrested, other arrests (51 suspects in all) happened across Australia, Ireland, Italy, … More →

The post Ghost: Criminal communication platform compromised, dismantled by international law enforcement appeared first on Help Net Security.

Fivetran announced Hybrid Deployment, a new solution that allows customers to securely run data pipelines within their own environment from the Fivetran managed platform, providing a single control plane to manage all data sources, whether they are cloud-based SaaS apps or legacy databases with data that needs to be tightly controlled and managed for regulatory or compliance purposes. With the industry’s most comprehensive selection of connectors, destinations and features, Fivetran empowers enterprises to centralize data … More →

The post Fivetran Hybrid Deployment keeps sensitive data within the customer’s environment appeared first on Help Net Security.

Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). “Broadcom is not currently aware of exploitation ‘in the wild’,” the company says, but noted that organizations should promptly act to install one of the updated versions. VMware has patched a similarly critical RCE flaw (CVE-2023-34048) in vCenter Server in October … More →

The post Critical VMware vCenter Server bugs fixed (CVE-2024-38812) appeared first on Help Net Security.

anecdotes has launched Anecdotes Trust Center, a centralized platform for companies to effortlessly share compliance and security information and documentation with prospects, customers, and partners. Reflecting the company’s real-time security and compliance posture, the Trust Center enables companies to decide exactly what information and documentation to share, and to what extent. This helps accelerate the sales cycle by streamlining the security review process. Sales teams can give prospects access to essential documentation early in the … More →

The post Anecdotes Trust Center simplifies compliance and security documentation sharing appeared first on Help Net Security.

Rapid7 has unveiled Vector Command, a fully-managed offensive security service. Vector Command combines the external attack surface assessment capabilities of Rapid7’s recently launched Command Platform with continuous Red Teaming services by its internal experts to help customers identify and validate IT security posture weaknesses from an attacker’s perspective. As the attack surface expands through shadow IT, cloud resources, SaaS solutions, and more, security leaders must maintain visibility of their organization’s internet-facing assets and the security … More →

The post Rapid7 launches Vector Command for continuous red teaming and security gap identification appeared first on Help Net Security.

PlainID announces the PlainID Authorizer for Zscaler, available via PlainID SaaS Authorization Management, centralizes policy management for Zscaler and SaaS applications and tools. Zscaler and other SASE (Secure Access Service Edge) solutions have made significant strides in integrating identity-aware controls into their authorization frameworks – marking a crucial step forward. However, more can be done to address a critical gap. It’s imperative that any security enforcement point responsible for managing network connectivity must also align … More →

The post PlainID introduces identity security for Zscaler appeared first on Help Net Security.

Verimatrix intoduced its Verimatrix XTD Network Monitoring feature, expanding its suite of application cybersecurity solutions to combat evolving network-related threats. Verimatrix XTD has long been at the forefront of identifying and neutralizing mobile app cyberthreats. The new Verimatrix XTD Network Monitoring feature builds on this expertise, offering advanced capabilities to detect and prevent communication with malicious servers. By performing in-depth DNS cache analysis, monitoring for phishing sites, and implementing malware command-and-control (C2) detection, Verimatrix XTD … More →

The post Verimatrix XTD Network Monitoring provides real-time detection of malicious activities appeared first on Help Net Security.

Intezer announced that it has raised $33 million in Series C funding, bringing its total capital raised to $60 million. The funding round was led by Norwest Venture Partners, with participation from all existing investors, including Intel Capital, OpenView, Magma, and Alon Cohen, founder of CyberArk. With these funds, Intezer will expand its go-to-market and product teams. “I know what it’s like to work in SOC and incident response teams, while every day you have … More →

The post Intezer raises $33 million to further develop its AI-based security operations solution appeared first on Help Net Security.

Hydden announced that it has closed $4.4 million in seed funding led by Access Venture Partners. Other investors include Lockstep, the venture fund of CISOs Rinki Sethi and Lucas Moody, Service Provider Capital, and several cybersecurity angel investors including Andy Grolnick and Paul Trulove. Founded by a team of seasoned identity security product and engineering leaders, Hydden’s innovative platform is used by security leaders to gain control over the identity attack surface. Hydden’s identity security … More →

The post Hydden raises $4.4 million to improve identity security appeared first on Help Net Security.

Crowdsec is an open-source solution that offers crowdsourced protection against malicious IPs. CrowdSec features For this project, the developers have two objectives: Provide free top-quality intrusion detection and protection software. There’s community participation in creating new detection rules as new vulnerabilities are uncovered. Share and validate the attackers’ IPs with the network participants to render hackers’ resources useless as soon as possible. A consensus system gives a real-time actionable blocklist with no false positives. “CrowdSec … More →

The post CrowdSec: Open-source security solution offering crowdsourced protection appeared first on Help Net Security.

Organizations are combating excessive remote access demands with an equally excessive number of tools that provide varying degrees of security, according to Claroty. Data from more than 50,000 remote-access-enabled devices showed that the volume of remote access tools deployed is excessive, with 55% of organizations having four or more and 33% having six or more. Worse, almost 22% have eight or more, with some managing as many as 15 or 16 remote access tools. Remote … More →

The post Organizations overwhelmed by numerous and insecure remote access tools appeared first on Help Net Security.

WTW has launched Indigo Vault, a document protection platform that provides advanced cybersecurity for sharing and storage of business sensitive files. The platform is a combination of cloud and local document management systems, that provides protection against insider threats, AI system exposure and cyber theft, by ensuring documents and assets such as Word, Excel spreadsheets, PowerPoint presentations, PDFs and Outlook messages are protected and controlled, while providing minimal disruption to the user. Using WTW-patented, end-to-end … More →

The post WTW Indigo Vault secures business sensitive files appeared first on Help Net Security.

Apple has launched iOS 18, the latest significant iteration of the operating system powering its iPhones. Along with many new features and welcome customization options, iOS 18 brings several changes for improving users’ security and privacy. A standalone Passwords app In previous iOS versions, there was a Passwords tool in the Settings and it allowed users to leverage iCloud Keychain to generate and save passwords. In iOS 18, that tool has become a standalone app … More →

The post Apple releases iOS 18, with security and privacy improvements appeared first on Help Net Security.

Veritas Technologies unveiled new AI-driven capabilities to further expand the strength and functionality of the Veritas cyber resilience portfolio. The new innovations, including AI-powered automation and user interface enhancements, provide data protection specialists and IT generalists with intelligent, easy-to-use solutions that remove the uncertainty from cyber recovery. Deepak Mohan, EVP of engineering at Veritas, said: “Data security is becoming increasingly complex, and IT teams are under mounting pressure to ensure that data is always available, … More →

The post Veritas unveils AI-driven features to simplify cyber recovery appeared first on Help Net Security.