Help Net Security

Firms in the construction industry are getting breached by hackers via internet-exposed servers running Foundation accounting software, Huntress researchers are warning. “We’re seeing active intrusions among plumbing, HVAC, concrete, and similar sub-industries,” they noted. A way into corporate networks Ohio-based Foundation develops and provides specialized software products and services for companies in the construction industry. “The Foundation software includes a Microsoft SQL Server (MSSQL) instance to handle its database operations,” Huntress researchers explained. Unfortunately, for … More →

The post Hackers breaching construction firms via specialized accounting software appeared first on Help Net Security.

Komodor announced Klaudia, a GenAI agent for troubleshooting and remediating operational issues, as well as optimizing Kubernetes environments. Integrated within the Komodor Kubernetes Management Platform, Klaudia simplifies and accelerates root-cause analysis, empowering both platform and application teams with precise diagnostics to resolve issues with speed and precision. According to Gartner, “Infrastructure and Operations (I&O) teams commonly struggle to manage Kubernetes (K8s) clusters at scale due to the talent shortage — especially on heterogeneous scenarios (multicluster, … More →

The post Komodor Klaudia identifies the root cause of issues in Kubernetes appeared first on Help Net Security.

Another encrypted communication platform used by criminals has been dismantled and its alleged mastermind arrested, the Australian Federal Police has announced on Tuesday. “AFP Operation Kraken charged a NSW man, aged 32, for creating and administering Ghost, a dedicated encrypted communication platform, which the AFP alleges was built solely for the criminal underworld,” the law enforcement agency says. As the man was being arrested, other arrests (51 suspects in all) happened across Australia, Ireland, Italy, … More →

The post Ghost: Criminal communication platform compromised, dismantled by international law enforcement appeared first on Help Net Security.

Fivetran announced Hybrid Deployment, a new solution that allows customers to securely run data pipelines within their own environment from the Fivetran managed platform, providing a single control plane to manage all data sources, whether they are cloud-based SaaS apps or legacy databases with data that needs to be tightly controlled and managed for regulatory or compliance purposes. With the industry’s most comprehensive selection of connectors, destinations and features, Fivetran empowers enterprises to centralize data … More →

The post Fivetran Hybrid Deployment keeps sensitive data within the customer’s environment appeared first on Help Net Security.

Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). “Broadcom is not currently aware of exploitation ‘in the wild’,” the company says, but noted that organizations should promptly act to install one of the updated versions. VMware has patched a similarly critical RCE flaw (CVE-2023-34048) in vCenter Server in October … More →

The post Critical VMware vCenter Server bugs fixed (CVE-2024-38812) appeared first on Help Net Security.

anecdotes has launched Anecdotes Trust Center, a centralized platform for companies to effortlessly share compliance and security information and documentation with prospects, customers, and partners. Reflecting the company’s real-time security and compliance posture, the Trust Center enables companies to decide exactly what information and documentation to share, and to what extent. This helps accelerate the sales cycle by streamlining the security review process. Sales teams can give prospects access to essential documentation early in the … More →

The post Anecdotes Trust Center simplifies compliance and security documentation sharing appeared first on Help Net Security.

Rapid7 has unveiled Vector Command, a fully-managed offensive security service. Vector Command combines the external attack surface assessment capabilities of Rapid7’s recently launched Command Platform with continuous Red Teaming services by its internal experts to help customers identify and validate IT security posture weaknesses from an attacker’s perspective. As the attack surface expands through shadow IT, cloud resources, SaaS solutions, and more, security leaders must maintain visibility of their organization’s internet-facing assets and the security … More →

The post Rapid7 launches Vector Command for continuous red teaming and security gap identification appeared first on Help Net Security.

PlainID announces the PlainID Authorizer for Zscaler, available via PlainID SaaS Authorization Management, centralizes policy management for Zscaler and SaaS applications and tools. Zscaler and other SASE (Secure Access Service Edge) solutions have made significant strides in integrating identity-aware controls into their authorization frameworks – marking a crucial step forward. However, more can be done to address a critical gap. It’s imperative that any security enforcement point responsible for managing network connectivity must also align … More →

The post PlainID introduces identity security for Zscaler appeared first on Help Net Security.

Verimatrix intoduced its Verimatrix XTD Network Monitoring feature, expanding its suite of application cybersecurity solutions to combat evolving network-related threats. Verimatrix XTD has long been at the forefront of identifying and neutralizing mobile app cyberthreats. The new Verimatrix XTD Network Monitoring feature builds on this expertise, offering advanced capabilities to detect and prevent communication with malicious servers. By performing in-depth DNS cache analysis, monitoring for phishing sites, and implementing malware command-and-control (C2) detection, Verimatrix XTD … More →

The post Verimatrix XTD Network Monitoring provides real-time detection of malicious activities appeared first on Help Net Security.

Intezer announced that it has raised $33 million in Series C funding, bringing its total capital raised to $60 million. The funding round was led by Norwest Venture Partners, with participation from all existing investors, including Intel Capital, OpenView, Magma, and Alon Cohen, founder of CyberArk. With these funds, Intezer will expand its go-to-market and product teams. “I know what it’s like to work in SOC and incident response teams, while every day you have … More →

The post Intezer raises $33 million to further develop its AI-based security operations solution appeared first on Help Net Security.

Hydden announced that it has closed $4.4 million in seed funding led by Access Venture Partners. Other investors include Lockstep, the venture fund of CISOs Rinki Sethi and Lucas Moody, Service Provider Capital, and several cybersecurity angel investors including Andy Grolnick and Paul Trulove. Founded by a team of seasoned identity security product and engineering leaders, Hydden’s innovative platform is used by security leaders to gain control over the identity attack surface. Hydden’s identity security … More →

The post Hydden raises $4.4 million to improve identity security appeared first on Help Net Security.

Crowdsec is an open-source solution that offers crowdsourced protection against malicious IPs. CrowdSec features For this project, the developers have two objectives: Provide free top-quality intrusion detection and protection software. There’s community participation in creating new detection rules as new vulnerabilities are uncovered. Share and validate the attackers’ IPs with the network participants to render hackers’ resources useless as soon as possible. A consensus system gives a real-time actionable blocklist with no false positives. “CrowdSec … More →

The post CrowdSec: Open-source security solution offering crowdsourced protection appeared first on Help Net Security.

Organizations are combating excessive remote access demands with an equally excessive number of tools that provide varying degrees of security, according to Claroty. Data from more than 50,000 remote-access-enabled devices showed that the volume of remote access tools deployed is excessive, with 55% of organizations having four or more and 33% having six or more. Worse, almost 22% have eight or more, with some managing as many as 15 or 16 remote access tools. Remote … More →

The post Organizations overwhelmed by numerous and insecure remote access tools appeared first on Help Net Security.

WTW has launched Indigo Vault, a document protection platform that provides advanced cybersecurity for sharing and storage of business sensitive files. The platform is a combination of cloud and local document management systems, that provides protection against insider threats, AI system exposure and cyber theft, by ensuring documents and assets such as Word, Excel spreadsheets, PowerPoint presentations, PDFs and Outlook messages are protected and controlled, while providing minimal disruption to the user. Using WTW-patented, end-to-end … More →

The post WTW Indigo Vault secures business sensitive files appeared first on Help Net Security.

Apple has launched iOS 18, the latest significant iteration of the operating system powering its iPhones. Along with many new features and welcome customization options, iOS 18 brings several changes for improving users’ security and privacy. A standalone Passwords app In previous iOS versions, there was a Passwords tool in the Settings and it allowed users to leverage iCloud Keychain to generate and save passwords. In iOS 18, that tool has become a standalone app … More →

The post Apple releases iOS 18, with security and privacy improvements appeared first on Help Net Security.

Veritas Technologies unveiled new AI-driven capabilities to further expand the strength and functionality of the Veritas cyber resilience portfolio. The new innovations, including AI-powered automation and user interface enhancements, provide data protection specialists and IT generalists with intelligent, easy-to-use solutions that remove the uncertainty from cyber recovery. Deepak Mohan, EVP of engineering at Veritas, said: “Data security is becoming increasingly complex, and IT teams are under mounting pressure to ensure that data is always available, … More →

The post Veritas unveils AI-driven features to simplify cyber recovery appeared first on Help Net Security.

F5 launched F5 NGINX One, combining advanced load balancing, web and application server capabilities, API gateway functionalities, and security features in a dedicated package. Customers are now able to simply manage and secure F5 NGINX instances and NGINX Open Source from a single cloud management interface. End-to-end visibility speeds apps to market and enables advanced features like AI more efficiently versus a traditional siloed approach. This new offering makes NGINX technology easier to deploy, unlocking … More →

The post F5 NGINX One improves app delivery and security functions appeared first on Help Net Security.

RunSafe Security announced the successful completion of a $12 million Series B funding round. This investment round, which includes participation from new and existing investors, will accelerate new product development and market expansion to EMEA and APAC. Continue ReadingThe investment round led by Critical Ventures and SineWave Venture Partners also includes BMW i Ventures, Working Lab Capital, Lockheed Martin Ventures, HyperLink Ventures, Iron Gate Ventures, Alsop Louie Partners, and NextGen Venture Partners. “This investment round will enable … More →

The post RunSafe Security raises $12 million to reduce attack surface in critical infrastructure appeared first on Help Net Security.

Gcore launched Gcore WAAP, its end-to-end web application and API protection solution. Leveraging AI capabilities, Gcore WAAP integrates four products in one solution: web application firewall (WAF), application-layer DDoS protection, bot management, and API security, all managed through an intuitive user interface. This comprehensive, multi-layered security solution protects digital assets across a wide range of verticals, including retail, financial services, healthcare, public sector, media and entertainment, and technology. Gcore WAAP was developed following the company’s … More →

The post Gcore WAAP protects websites, web applications, and APIs appeared first on Help Net Security.

CVE-2024-8190, an OS command injection vulnerability in Ivanti Cloud Services Appliance (CSA) v4.6, is under active exploitation. Details about the attacks are still unknown, but there may be more in the near future: Horizon3.ai researchers have published their analysis of the flaw and a PoC exploit for it. About CVE-2024-8190 CVE-2024-8190 is a command injection vulnerability that can only be exploited if the attacker manages to log into the appliance’s admin login page first. According … More →

The post PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190) appeared first on Help Net Security.