Help Net Security

NETSCOUT announced updates to its advanced, scalable deep packet inspection-based Omnis Cyber Intelligence Network Detection and Response (NDR) platform. New MITRE ATT&CK behavioral analytics enable earlier detection of advanced threats like ransomware, suspicious traffic, or unauthorized access attempts while improving remediation to help meet industry and country compliance requirements. “Digital resilience allows enterprises to continuously operate and quickly leverage digital opportunities to serve their customers, especially during economically challenging times,” stated Fernando Montenegro, senior principal … More →

The post NETSCOUT enhances Omnis Cyber Intelligence platform with MITRE ATT&CK behavioral analytics appeared first on Help Net Security.

Among the security updates released by Adobe on Tuesday are those for various versions of Adobe Acrobat and Reader, which fix two critical flaws that could lead to arbitrary code execution: CVE-2024-45112 and CVE-2024-41869. Nothing in the advisory points to a need for users to implement the updates quickly, but the fix for CVE-2024-41869 is actually an additional, more complete fix for CVE-2024-39383, which was supposedly addressed with a security update released in August 2024. … More →

The post Adobe completes fix for Reader bug with known PoC exploit (CVE-2024-41869) appeared first on Help Net Security.

Every type of fraud is on the rise, and 2023 was a particularly devastating year for victims of cryptocurrency and business email compromise (BEC) scams, according to the FBI. Cryptocurrency fraud Based on complaints filed to FBI’s Internet Crime Complaint Center (IC3) in 2023, the year saw over $5.6 billion in losses tied to cryptocurrency fraud alone, marking a dramatic 45% increase over 2022 figures. Criminals are exploiting the difficulties of tracing and recovering cryptocurrency … More →

The post Losses due to cryptocurrency and BEC scams are soaring appeared first on Help Net Security.

Cloudera launched Cloudera Private Link Network to address critical data security and privacy concerns for highly regulated organizations with strict internal data security policies. Cloudera Private Link Network provides secure, private connectivity from customer workloads to the Cloudera Control Plane, ensuring that data does not traverse the public Internet. Organizations in industries such as finance, healthcare and pharmaceuticals often face privacy challenges because providers often cannot guarantee that traffic between tenants, even within the same … More →

The post Cloudera Private Link Network helps enterprises protect their data appeared first on Help Net Security.

VirtualBox is a full virtualizer for x86 hardware designed for servers, desktops, and embedded systems. VirtualBox 7.1 introduces an enhanced user interface, cloud VM management, ARM support, Wayland compatibility, and more. New features in VirtualBox 7.1 This is a major update. The following new features were added: GUI: Modernized look and feel, offering a selection between Basic and Experienced user level with reduced or full UI functionality OCI Integration: Performance dashboard now shows resource usage … More →

The post VirtualBox 7.1: This is a major update, here’s what’s new appeared first on Help Net Security.

In this Help Net Security, Erica Banks, VP and a leader in Booz Allen’s civilian services business, discusses the Federal Cybersecurity Strategy’s role in safeguarding national assets. Banks outlines key areas for improvement, including funding, talent retention, and leveraging AI for enhanced cyber defense. The Federal Cybersecurity Strategy is a crucial part of protecting national assets. How effective do you think the current strategy is in mitigating cyber threats, and what areas need more attention … More →

The post Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense appeared first on Help Net Security.

AI has become a key player in protecting valuable organizational insights from threats. Thanks to AI-enabled data protection practices such as behavior monitoring, enterprises no longer have to be reactive to a cyberattack but can be proactive before a potential threat arises. In this Help Net Security video, Andrew Riddell, Principal Cybersecurity Architect, Logicalis US, explains the benefits and best practices of leveraging AI for cybersecurity.

The post Benefits and best practices of leveraging AI for cybersecurity appeared first on Help Net Security.

Concerns about the trustworthiness of internal data exist in nearly all organizations globally, according to TeamViewer. 99% of business leaders pointed to factors undermining trust in internal data, citing multiple versions of the truth (38%), conflicting data management practices (32%) and too many instances of poor hardware reliability (31%) as top reasons for mistrust. Organizations face technology connectivity gaps Interestingly this mistrust of internal data varies across company size. It is more likely to be … More →

The post Internal disconnects vs. cybersecurity: How connectivity shapes challenges appeared first on Help Net Security.

Kali Linux 2024.3 is now available for download. Besides the new tools, this release mainly focuses on behind-the-scenes updates and optimization. New tools in Kali Linux 2024.3 This Kali release is about new tools and package updates: goshs – Think SimpleHTTPServer, but written in Go, and with more features graudit – Grep Rough AUDIT: source code auditing tool gsocket – Allows two machines on different networks to communicate with each other hekatomb – Extract and … More →

The post Kali Linux 2024.3 released: 11 new tools, Qualcomm Snapdragon SDM845 SoC support appeared first on Help Net Security.

Mitiga unveiled its Cloud Managed Detection and Response (MDR) service, designed to provide 24/7 protection against the increasingly complex threats targeting cloud and SaaS environments. This comprehensive solution enables organizations to detect, prioritize, and respond to threats in SaaS and Cloud environments in real-time, significantly reducing alert fatigue and strengthening Security Operations (SecOps) capabilities. As yet another testament to its innovative approach to detection and response in the cloud, Mitiga has been named a finalist … More →

The post Mitiga Cloud MDR detects threats in SaaS and cloud environments appeared first on Help Net Security.

Ivanti has fixed a slew of vulnerabilities affecting its Endpoint Manager solution, including a maximum severity one (CVE-2024-29847) that may allow unauthenticated attackers to remotely execute code in the context of the vulnerable system, and use it as a beachhead for burrowing into corporate networks and devices. The fixes CVE-2024-29847 affects the agent portal of Ivanti Endpoint Manager versions 2024 (with the September update) and 2022 SU5 and earlier, and stems from the application’s improper … More →

The post Ivanti fixes critical vulnerabilities in Endpoint Management (CVE-2024-29847) appeared first on Help Net Security.

Opus Security launched its Advanced Multi-Layered Prioritization Engine, designed to revolutionize how organizations manage, prioritize and remediate security vulnerabilities. Leveraging AI-driven intelligence, deep contextual data and automated decision-making capabilities, this innovative engine helps organizations prioritize the most critical vulnerabilities, enhancing both security posture and operational efficiency. A breakthrough in vulnerability remediation Security teams are overwhelmed by the need to rapidly prioritize alerts from multiple tools across various attack surfaces. These may include redundant alerts or … More →

The post Opus Security empowers organizations to prioritize the most critical vulnerabilities appeared first on Help Net Security.

Tenable released AI Aware, advanced detection capabilities designed to surface artificial intelligence solutions, vulnerabilities and weaknesses available in Tenable Vulnerability Management. Tenable AI Aware provides exposure insight into AI applications, libraries and plugins so organizations can confidently expose and close AI risk, without inhibiting business operations. The rapid development and adoption of AI technologies in the past two years has introduced major cybersecurity and compliance risks that organizations must proactively address without established best practices. … More →

The post Tenable AI Aware provides exposure insight into AI applications, libraries and plugins appeared first on Help Net Security.

Proofpoint has expanded capabilities across its platform to provide customers with broader, adaptive human-centric security controls. These new solutions and integrations shield organizations from incoming threats across messaging, collaboration and social media apps; secure SaaS applications and identity posture across a vast array of applications; prevent data loss with smarter, more adaptive data security; and steer employees to safer behaviors through adaptive educational security guidance. These new capabilities set a new standard for how organizations … More →

The post Proofpoint expands platform capabilities for broader, adaptive human-centric security controls appeared first on Help Net Security.

Tanium announced Tanium Automate, which provides organizations running Tanium in the cloud with highly accurate, real-time automation for common IT operations and security tasks. Leveraging the Tanium platform’s breadth of endpoint management and security capabilities, real-time architecture, and ability to scale, Automate allows operators to automate complex tasks in real-time by replacing manual processes with easy to implement no and low code orchestration and automation across operations and security domains. Automate is a key component … More →

The post Tanium helps organizations automate complex tasks in real-time appeared first on Help Net Security.

Trellix announced Trellix Email Security Cloud with integrated Trellix Data Loss Prevention (DLP) capabilities, available globally. The enhanced solution uniquely improves data security and protects organizations’ sensitive information by monitoring and blocking email-borne data risks like exfiltration by insiders or accidental data sharing. “Email is the primary attack vector for threat actors and organizations’ riskiest channel for data loss,” said Gareth Maclachlan, Network and Collaboration Security GM, Trellix. “Trellix integrated our DLP capabilities into Trellix … More →

The post Trellix strengthens email security with DLP capabilities appeared first on Help Net Security.

Saviynt announced the release of its Intelligence Suite with general availability of Intelligent Recommendations, which will provide customers with dynamic roles, access recommendations, actionable insights, and a multi-dimensional weighted trust scoring model that will be a true game changer. “Saviynt Intelligence will transform identity security from a set of purely operational processes into ones that are automated with artificial intelligence (AI) and machine learning (ML). Our experience is that this actionable intelligence will reduce access … More →

The post Saviynt Intelligence delivers identity security analytics through ML and AI capabilities appeared first on Help Net Security.

P0 Security announced the closing of its $15 million Series A round, bringing its total raised since inception to $20 million. The investment was led by SYN Ventures with participation from Zscaler, the leader in cloud security, and existing investor Lightspeed Venture Partners. The company also announced the appointment of SYN Ventures Operating Partner, Ryan Permeh, to the Board of Directors. Legacy approaches to access governance and identity security relied on network boundaries. In today’s … More →

The post P0 Security raises $15 million to govern and secure cloud access for all identities appeared first on Help Net Security.

Healthcare institutions are custodians of vast repositories of sensitive patient data, encompassing comprehensive health histories, insurance profiles, and billing data. The ramifications of a data breach often extend far beyond the immediate task of patching the vulnerabilities and notifying the affected parties. Often, the less visible costs of these incidents can be equally, if not more, devastating to healthcare providers and the patients they serve. The aftermath of a cyberattack can reverberate for months, impacting … More →

The post Cybersecurity is a fundamental component of patient care and safety appeared first on Help Net Security.

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other confidential data. “DockerSpy was created to address the growing concern of sensitive data leaks within Docker images, especially those publicly available on DockerHub. Many developers unknowingly publish images containing secrets such as API keys, credentials, or other sensitive information. DockerSpy automates the process of fetching these images and scanning them for secrets, offering a layer of security and … More →

The post DockerSpy: Search for images on Docker Hub, extract sensitive information appeared first on Help Net Security.