Help Net Security

Fortinet has finally made public information about CVE-2024-47575, a critical FortiManager vulnerability that attackers have exploited as a zero-day. About CVE-2024-47575 CVE-2024-47575 is a vulnerability stemming from missing authentication for a critical function in FortiManager’s fgfmd daemon. Remote, unauthenticated attackers could exploit the flaw to execute arbitrary code or commands via specially crafted requests. It affects various versions of FortiManager and FortiManager Cloud, as well as some older FortiAnalyzer models. “Reports have shown this vulnerability … More →

The post Fortinet FortiManager flaw exploited in zero-day attacks (CVE-2024-47575) appeared first on Help Net Security.

Nucleus Security announced Nucleus POAM Process Automation, a comprehensive solution for federal agencies and their vendors to streamline risk management and automate their Plan of Action and Milestones (POA&M) process. This solution overcomes error-prone and labor-intensive manual processes by automating repetitive POA&M workflows with real-time tracking and reporting, ensuring that compliance and risk management efforts are efficient and accurate. “Federal agencies and their suppliers must adapt to increasing compliance requirements while maintaining a strong security … More →

The post Nucleus Security unveils POAM Process Automation for federal agencies appeared first on Help Net Security.

F5 announced BIG-IP Next for Kubernetes, an AI application delivery and security solution that equips service providers and large enterprises with a centralized control point to accelerate, secure, and streamline data traffic that flows into and out of large-scale AI infrastructures. The solution harnesses the power of high-performance NVIDIA BlueField-3 DPUs to enhance the efficiency of data center traffic that is critical to large-scale AI deployments. With an integrated view of networking, traffic management, and … More →

The post F5 BIG-IP Next for Kubernetes reduces the complexity of AI deployments appeared first on Help Net Security.

When building a cybersecurity team, you likely asked yourself, “Should I focus on certifications or real-world skills?” And since you rarely encounter entry-level candidates who can hit the ground running, naturally, you’d consider a candidate with both. But that’s not always the best option unless you have the time, money, and patience. One of these factors usually has a priority over the other. Your starting point or a nice-to-have? ISACA’s State of Cybersecurity 2024 Report … More →

The post What’s more important when hiring for cybersecurity roles? appeared first on Help Net Security.

In this Help Net Security interview, John Cohen, Executive Director, Program for Countering Hybrid Threats at the Center for Internet Security, discusses the four pillars of the National Framework for Action, emphasizing how these measures can combat the exploitation of technology and social media by threat actors. Cohen argues that a coordinated, whole-of-society approach is essential to empower communities and counter integrated threats to national security. Can you walk us through the four pillars of … More →

The post Enhancing national security: The four pillars of the National Framework for Action appeared first on Help Net Security.

Cyber insurance is vital for companies mitigating cyber risks, but the industry still encounters significant challenges, including shifting policy requirements and uncertainty around coverage in the event of an incident. As cyberattacks continue to cause problems for organizations worldwide, it’s essential for businesses to take proactive measures to align their insurance strategies with their broader risk management plans. Vishaal Hariprasad, CEO at Resilience, discusses how cyber insurance needs to evolve to prepare companies better to … More →

The post Facing the uncertainty of cyber insurance claims appeared first on Help Net Security.

AI impersonation is now the hardest vector for cybersecurity professionals to protect companies against, according to Teleport. The study, which surveyed 250 senior US and UK decision-makers, shows that social engineering remains one of the top tactics cybercriminals use to install malware and steal sensitive data, with the advancement of AI and deepfakes further fueling the effectiveness of phishing scams. Advanced phishing tactics on the rise When asked to rank the difficulty of each attack … More →

The post AI and deepfakes fuel phishing scams, making detection harder appeared first on Help Net Security.

To safeguard your data, Google Chrome uses Safe Browsing to protect you from: harmful websites and extensions, malicious or intrusive advertisements, malware, phishing attacks, and social engineering threats. Safe Browsing scans and evaluates websites to identify potentially harmful sites, which are then added to its database. Whenever you visit a website or try to download something, Google Chrome consults Safe Browsing according to the protection level you’ve chosen. How to choose your Safe Browsing protection … More →

The post How to enable Safe Browsing in Google Chrome on Android appeared first on Help Net Security.

Cofense released new AI-driven spam reduction capabilities to its Phishing Detection and Response (PDR) platform. These enhancements reduce workload so SOC analysts can concentrate on genuine threats that could quickly harm an organization’s revenue or reputation. “As phishing attacks continue to evolve, security teams demand tools that improve efficiency but also give them an edge in identifying and responding to threats,” said Jason Reinard, SVP of Product Engineering. “With these new AI features, Cofense is … More →

The post Cofense improves visibility of dangerous email-based threats appeared first on Help Net Security.

ESET announced its upgraded consumer offering, ESET HOME Security, with new features, such as ESET Folder Guard and Multithread Scanning. These enhancements to ESET HOME Security, as an all-in-one solution for consumers, correspond to the increasing number of advanced, automated, and AI-driven threats targeting individuals and address growing concerns about data privacy, ransomware attacks, phishing, and scams. “As a progressive digital life protection vendor, ESET is dedicated to always being one step ahead of digital threats,” … More →

The post ESET HOME Security enhancements strengthen protection against AI-driven threats appeared first on Help Net Security.

Cohesity introduced a patent-pending visual data exploration capability to Cohesity Gaia, its AI-powered search assistant launched earlier this year. By providing customers with a visual categorization of the themes across documents and files within a data set, the visual data explorer brings new context to the data and suggests queries that help users gain insights faster. With traditional approaches, enterprises often struggle to gain insights across unstructured data and text. This challenge only grows as … More →

The post Cohesity Gaia brings the power of generative AI to enterprise data appeared first on Help Net Security.

Reality Defender announced that its Series A fundraising has been expanded, securing a total of $33 million in capital investment. The expanded fundraising round was led by Illuminate Financial, with additional participation from Booz Allen Ventures, IBM Ventures, the Jefferies Family Office, and Accenture, as well as additional participation from original Series A lead investor DCVC and past investors The Partnership Fund for New York City and Y Combinator. Founded in 2021, Reality Defender is … More →

The post Reality Defender secures $33 million to enhance AI detection capabilities appeared first on Help Net Security.

Stream.Security closed a $30 million Series B funding round led by U.S. Venture Partners, with participation from new investors, Citi Ventures, and existing investors, Energy Impact Partners (EIP), Cervin Ventures, TLV Partners, and Glilot Capital Partners VC. This new round of funding brings the total investment in Stream.Security to $55 million. Stream.Security’s Cloud Twin technology provides SecOps teams with real-time cloud threat and exposure modeling to accelerate response. As a result, SecOps teams can trust … More →

The post Stream.Security raises $30 million to boost cloud security appeared first on Help Net Security.

In this Help Net Security interview, Detective Superintendent Ian Kirby, CEO of the National Cyber Resilience Centre Group (NCRCG), discusses the emerging cyber threats and strategies organizations can use to increase cyber resilience. He emphasizes basic cyber hygiene, security awareness training, multi-factor authentication, and stakeholder involvement at all levels in building a resilient organizational culture. What are the most significant emerging cyber threats organizations should prioritize when developing resilience strategies? There are a myriad of … More →

The post Effective strategies for measuring and testing cyber resilience appeared first on Help Net Security.

Argus is an open-source toolkit that simplifies information gathering and reconnaissance. It features a user-friendly interface and a collection of powerful modules, enabling the exploration of networks, web applications, and security configurations. Argus offers a collection of tools categorized into three main areas: Network and infrastructure tools These tools help you gather data about a network, uncovering vital details about servers, IP addresses, DNS records, and more: Associated Hosts: Discover domains associated with the target. … More →

The post Argus: Open-source information gathering toolkit appeared first on Help Net Security.

Recently, IBM X-Force released its 2024 Cloud Threat Landscape Report. This uses incident data and insights to reveal how attackers successfully compromise organizations by leveraging adversary-in-the-middle (AITM) attacks to bypass multi-factor authentication (MFA). This often leads to business email compromise (BEC), which IBM X-Force observed as threat actors’ #1 objective when targeting cloud-based environments. In this Help Net Security video, Austin Zeizel, Threat Intelligence Consultant at IBM X-Force, discusses the cloud threat landscape. Key findings … More →

The post Evolving cloud threats: Insights and recommendations appeared first on Help Net Security.

Cybersecurity Engineer Texas Instruments | USA | On-site – View job details As a Cybersecurity Engineer, you will design, implement and maintain cybersecurity controls for security tools to help drive zero trust and secure by design principles across complex environments. Validate and test security configurations and controls to a variety of security (e.g., firewalls, email gateway, WAFs, DLP, endpoint protection, baselines, etc.). Cyber Security Architect – Product Security Honeywell | USA | On-site – View … More →

The post Cybersecurity jobs available right now: October 23, 2024 appeared first on Help Net Security.

As a historically male-dominated industry, many IT companies have been described as having limited career development opportunities for female employees, according to Acronis. Issues like lack of mentorship, inadequate policies for work-life balance, and sometimes even a culture of exclusion have contributed to this. To gain insight into the current state of gender diversity in IT, Acronis commissioned a survey of full-time female employees to gauge their sentiments on equality in the IT industry and … More →

The post Most women in IT work overtime to advance in their careers appeared first on Help Net Security.

Cranium launched Detect AI, an AI discovery tool at scale. With this launch, Cranium is extending its platform capabilities to include visibility and access across an organization’s AI instances, which enables security and compliance teams to uncover and label all AI systems within hours, instead of days or weeks. “Large organizations are integrating AI into thousands of instances within their digital ecosystem. With incoming and existing regulations, we are seeing companies racing to discover and … More →

The post Cranium Detect AI accelerates AI governance appeared first on Help Net Security.

SailPoint launched SailPoint Machine Identity Security, a new Identity Security Cloud product. SailPoint Machine Identity Security is a dedicated product built specifically for machine accounts such as service accounts and bots. Built on SailPoint Atlas, Machine Identity Security unifies the process of identity security for both machine and human identities, allowing enterprises to manage all identities in a more simplified, holistic manner. SailPoint’s recent research report, “Machine identity crisis: The challenges of manual processes and … More →

The post SailPoint Machine Identity Security reduces the risk associated with unmanaged machine identities appeared first on Help Net Security.