Help Net Security

Saviynt announced the release of its Intelligence Suite with general availability of Intelligent Recommendations, which will provide customers with dynamic roles, access recommendations, actionable insights, and a multi-dimensional weighted trust scoring model that will be a true game changer. “Saviynt Intelligence will transform identity security from a set of purely operational processes into ones that are automated with artificial intelligence (AI) and machine learning (ML). Our experience is that this actionable intelligence will reduce access … More →

The post Saviynt Intelligence delivers identity security analytics through ML and AI capabilities appeared first on Help Net Security.

P0 Security announced the closing of its $15 million Series A round, bringing its total raised since inception to $20 million. The investment was led by SYN Ventures with participation from Zscaler, the leader in cloud security, and existing investor Lightspeed Venture Partners. The company also announced the appointment of SYN Ventures Operating Partner, Ryan Permeh, to the Board of Directors. Legacy approaches to access governance and identity security relied on network boundaries. In today’s … More →

The post P0 Security raises $15 million to govern and secure cloud access for all identities appeared first on Help Net Security.

Healthcare institutions are custodians of vast repositories of sensitive patient data, encompassing comprehensive health histories, insurance profiles, and billing data. The ramifications of a data breach often extend far beyond the immediate task of patching the vulnerabilities and notifying the affected parties. Often, the less visible costs of these incidents can be equally, if not more, devastating to healthcare providers and the patients they serve. The aftermath of a cyberattack can reverberate for months, impacting … More →

The post Cybersecurity is a fundamental component of patient care and safety appeared first on Help Net Security.

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other confidential data. “DockerSpy was created to address the growing concern of sensitive data leaks within Docker images, especially those publicly available on DockerHub. Many developers unknowingly publish images containing secrets such as API keys, credentials, or other sensitive information. DockerSpy automates the process of fetching these images and scanning them for secrets, offering a layer of security and … More →

The post DockerSpy: Search for images on Docker Hub, extract sensitive information appeared first on Help Net Security.

In this Help Net Security interview, John Hernandez, President and General Manager at Quest Software, shares practical advice for enhancing cybersecurity resilience against advanced threats. He underscores the need to focus on on-premises and cloud environments, adapt to new regulations, and address supply chain vulnerabilities. Hernandez also discusses how AI and zero-trust architecture are becoming key elements in future cybersecurity strategies. What practical steps can organizations take to improve their cybersecurity resilience in response to … More →

The post How AI and zero trust are transforming resilience strategies appeared first on Help Net Security.

ACISO HTX | Singapore | Hybrid – View job details As an ACISO, you will formulate Agency ICT security strategy and work plan, alignment to MHA and HTX’s IT & Cybersecurity strategic directions. Evaluate existing IT environment against MHA and HTX’s IT & Cybersecurity strategic directions. Ensure security governance, compliance by implementing cyber security risk assessment and risk acceptance at appropriate Agency stakeholders. Review, endorse, develop risk management and mitigation plans. Audit / Risk / … More →

The post Cybersecurity jobs available right now: September 11, 2024 appeared first on Help Net Security.

Organizations sometimes need to plan their cloud migrations with more emphasis on security and compliance. Many, therefore, struggle to keep their data safe after migrating to the cloud. To illustrate, IBM revealed that 82% of data breaches in 2023 involved data stored in the cloud, signaling a need for robust cloud security measures. Organizations need to consider security and compliance when migrating to the cloud to protect their cloud-based assets. This can be challenging, especially … More →

The post eBook: Keep assets secure after cloud migration appeared first on Help Net Security.

September 2024 Patch Tuesday is here and Microsoft has delivered 79 fixes, including those for a handful of zero-days (CVE-2024-38217, CVE-2024-38226, CVE-2024-38014, CVE-2024-43461) exploited by attackers in the wild, and a Windows 10 code defect (CVE-2024-43491) that rolled back earlier CVE fixes. The actively exploited flaws Let’s start with the only one that was previously publicly known: CVE-2024-38217, a vulnerability that allows attackers to bypass Mark of the Web (MotW). Elastic Security researcher Joe Desimone … More →

The post Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes appeared first on Help Net Security.

LOKKER released a new consent management solution available in its Privacy Edge Platform. This builds on LOKKER’s earlier release of its Consent Verification tool, which allows businesses to check whether their existing consent management platform is configured correctly. Many state and federal privacy laws require organizations to provide consumers with the ability to opt in or opt out of their data being shared with third parties and trackers on their websites and ensure that what … More →

The post LOKKER’s consent management solution blocks all unauthorized data collection on websites appeared first on Help Net Security.

Tufin Orchestration Suite (TOS) R24-2 ensures organizations’ network operations are efficient, secure, and always audit-ready by automating complex tasks, enhancing security visibility, and driving compliance. The key benefits TOS R24-2 delivers are: Automation: Automates complex firewall policies and access requests to reduce manual efforts and ensure the accurate implementation of network changes across Microsoft Azure, Google Cloud Platform (GCP) and VMware cloud platforms. Enhanced compliance: Remain audit-ready with comprehensive change tracking, proactive risk analysis, and … More →

The post Tufin improves security automation on Azure, GCP, and VMware clouds appeared first on Help Net Security.

Adaptiva launched Flex Controls in OneSite Patch, which give users advanced management capabilities over their patch deployment processes, including the ability to immediately pause or cancel patch rollouts as well as rollback patches to previous versions or block unwanted patches. These tools deliver confidence, security, and safety to users by providing the control necessary for efficient autonomous patching and vulnerability remediation. With 90% of successful cyberattacks starting at the endpoint and more than 28,000 vulnerabilities disclosed … More →

The post Adaptiva enables users to instantly control patch rollouts appeared first on Help Net Security.

Netskope announced several new innovations in the Netskope One platform, including expanded digital experience management (DEM) features and benefits. Combining key network and security capabilities, Netskope One continues to revolutionize the effectiveness of enterprise network infrastructure and operations (I&O) and security teams, enabling the entire organization to optimize the user experience while protecting critical data and reducing risk, cost, and complexity. Coming on the heels of Netskope being recognized as a Leader in the 2024 … More →

The post Netskope accelerates cloud networking and security operations appeared first on Help Net Security.

Ketch launched its product suite for digital media brands. The digital media industry faces increasing challenges. Intense FTC scrutiny on targeted advertising, growing pressure to deliver precise, permissioned targeting, and the existential threat of AI-driven content all contribute to a rapidly shifting and highly competitive landscape. Ketch Data Permissioning for Media Companies ensures media companies can activate data with confidence, from dynamic preference collection to real time data stack enforcement and visibility. With Ketch, digital … More →

The post Ketch helps media brands enable privacy-safe data activation appeared first on Help Net Security.

Galileo is delivering fintechs, banks and businesses new ways to fight fraud with the launch of Galileo Instant Verification Engine (GIVE) and Transaction Risk GScore. As digital transactions surge and cyber threats evolve, these tools offer fintechs, financial institutions and businesses advanced real-time fraud detection and risk management capabilities, addressing an industry in which 63% of financial firms reported an increase in fraud, with digital channels contributing to half of the total fraud losses. Galileo … More →

The post Galileo delivers real-time fraud detection for fintechs, banks and businesses appeared first on Help Net Security.

The US Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2024-40766 – a recently fixed improper access control vulnerability affecting SonicWall’s firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming it is being actively exploited by attackers. Though the KEV entry does not say that it’s being leveraged in ransomware campaigns, both Arctic Wolf and Rapid7 say that there is indirect evidence pointing to that. What we know so far On the same day … More →

The post CISA confirms that SonicWall vulnerability is getting exploited (CVE-2024-40766) appeared first on Help Net Security.

Users of Zyxel network-attached storage (NAS) devices are urged to implement hotfixes addressing a critical and easily exploited command injection vulnerability (CVE-2024-6342). About CVE-2024-6342 Zyxel NAS devices are generally used by small to medium-sized businesses (SMBs) for data storage and backup. CVE-2024-6342 – reported by Nanyu Zhong and Jinwei Dong from VARAS@IIE – is a vulnerability in the export-cgi program of Zyxel NAS326 and NAS542 devices that can be triggered by unauthenticated attackers via a … More →

The post Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342) appeared first on Help Net Security.

Huntress announces the arrival of its new Managed SIEM solution, designed to serve small—to mid-sized enterprises and their MSP allies with everything a Security Information and Event Management (SIEM) should provide and none of what makes traditional SIEMs ineffective and expensive. Huntress Managed SIEM is a direct result of the company listening to its partners and incorporating their feedback into this new offering. Traditional SIEMs demand extensive in-house expertise, require continual fine-tuning, and can inundate … More →

The post Huntress launches Managed SIEM, eliminating the complexity of traditional SIEMs appeared first on Help Net Security.

Wing Security has released SaaS Pulse, a free tool for SaaS security management, offering organizations actionable insights and continuous oversight into their SaaS security posture. This free tool continuously monitors threats from issues like critical misconfigurations, offboarding errors, user access risks, and more. SaaS Pulse provides security teams with a SaaS security risk assessment and a simple dashboard, so they can understand their risks and prioritize mitigations quickly and efficiently. Behind the scenes, SaaS Pulse … More →

The post SaaS Pulse tool from Wing Security enhances SaaS security posture appeared first on Help Net Security.

Crashes due to faulty updates are nothing new; in fact, one reason IT teams often delay updates is their unreliability and tendency to disrupt the organization’s day-to-day operations. Zero-days are also an old phenomenon. In the past, due to a lack of cybersecurity awareness among even the largest vendors and their users, zero-days were not only more common but also often publicly available, enabling script kiddies to exploit them. Another thing that was usual in … More →

The post Tech stack uniformity has become a systemic vulnerability appeared first on Help Net Security.

In this Help Net Security interview, Shane Cox, Director, Cyber Fusion Center at MorganFranklin Consulting, discusses the evolving methodologies and strategies in threat hunting and explains how human-led approaches complement each other to form a robust defense. Cox also discusses the ongoing need for skilled threat hunters and the future challenges and opportunities in integrating human intelligence with advanced automation. What are the primary methodologies used in threat hunting? How do they complement each other? … More →

The post How human-led threat hunting complements automation in detecting cyber threats appeared first on Help Net Security.