Help Net Security

USX Cyber released advanced phishing protection tools within its GUARDIENT XDR platform. This latest enhancement enables organizations to strengthen defenses against sophisticated phishing attacks by providing employees with realistic training and heightened awareness of phishing threats. Phishing attacks are growing increasingly sophisticated and dangerous as threat actors exploit social engineering techniques and AI to enhance their tactics. The new suite includes a phishing simulation tool that mimics real-world phishing techniques, equipping employees to identify and respond … More →

The post USX Cyber strengthens phishing defense in GUARDIENT XDR appeared first on Help Net Security.

In this Help Net Security interview, Tony Perez, CEO at NOC.org, discusses the role of continuous monitoring for real-time threat detection, the unique risks posed by APIs, and strategies for securing web applications. Perez also addresses how AI-driven threats are shaping the future of web security and the need for adaptive defenses. Could you elaborate on the importance of continuous monitoring, especially for detecting zero-day vulnerabilities and runtime threats? Continuous monitoring is probably one of … More →

The post AI’s impact on the future of web application security appeared first on Help Net Security.

In this Help Net Security video, Venkat Gopalakrishnan, Principal Data Science Manager at Microsoft, discusses the development of AI-driven risk scoring models tailored for cybersecurity threats, and how AI is revolutionizing risk assessment and management in cybersecurity.

The post Using AI to drive cybersecurity risk scoring systems appeared first on Help Net Security.

Finance and insurance sectors found to have the highest number of critical vulnerabilities, according to Black Duck. Finance and insurance industry faces highest vulnerabilities The report, which analyzes data from over 200,000 dynamic application security testing (DAST) scans conducted by Black Duck on approximately 1,300 applications across 19 industry sectors from June 2023 to June 2024, found variations in vulnerability types and remediation practices. Of the 96,917 total vulnerabilities identified, the two most critical categories … More →

The post Critical vulnerabilities persist in high-risk sectors appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from Absolute Security, BlackFog, Eurotech, Nirmata, Rakuten Viber, Syteca, and Vectra. Eurotech ReliaGATE 15A-14 enables organizations to meet regulatory standards The ReliaGATE 15A-14 combines flexible feature expansion to adapt to diverse customer requirements with multiple compact form factors ideal for space-constrained deployments. With cellular carrier certification and global coverage, it enables customers to operate across multiple regions with a single device … More →

The post New infosec products of the week: November 15, 2024 appeared first on Help Net Security.

NIST’s latest report, “Hardware Security Failure Scenarios: Potential Hardware Weaknesses” (NIST IR 8517), explores the hidden vulnerabilities in computer hardware, a domain often considered more secure than software. The report highlights how hardware flaws embedded in chip designs can lead to security risks that are difficult to fix post-production. The document outlines 98 failure scenarios, detailing various ways attackers can exploit hardware design and implementation weaknesses. Issues such as improper access control, faulty coding standards … More →

The post NIST report on hardware security risks reveals 98 failure scenarios appeared first on Help Net Security.

The National Institute of Standards and Technology (NIST) is clearing the backlog of unprocessed CVE-numbered vulnerabilities in the National Vulnerability Database (NVD), but has admitted that their initial estimate of when they would finish the job was “optimistic”. About the NVD The National Vulnerability Database is a public repository of vulnerabilities that have been published on MITRE’s CVE List. “NVD staff are tasked with enrichment of CVEs by aggregating data points from the description, references … More →

The post NIST is chipping away at NVD backlog appeared first on Help Net Security.

Versa introduced the VersaONE Universal SASE Platform to enhance security and networking capabilities across WAN, LAN, data centers, and cloud. Powered by AI, VersaONE delivers converged SASE, SSE, SD-WAN, and SD-LAN products via a unified platform to securely connect all users, devices, locations, and workloads across any and all networks. No other vendor provides this comprehensive range of secure connectivity products from a single platform. VersaONE enables customers to reduce risk and improve resilience, while … More →

The post VersaONE unifies security and networking into a single, centrally managed platform appeared first on Help Net Security.

Google has announced new security features for Android that provide real-time protection against scams and harmful apps. These features, powered by advanced on-device AI, enhance user safety without compromising privacy. These new security features are available first on Pixel and are coming soon to more Android devices. Scam Detection One of the key features is Scam Detection, which leverages on-device AI to identify potential scam calls in real-time. This feature analyzes conversation patterns to detect … More →

The post Google launches on-device AI to alert Android users of scam calls in real-time appeared first on Help Net Security.

After months of news reports that Chinese threat actors have breached the networks of US telecommunications and internet service providers, the FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have confirmed the success of the attacks, which were part of a “broad and significant cyber espionage campaign.” “Specifically, we have identified that PRC-affiliated actors have compromised networks at multiple telecommunications companies to enable the theft of customer call records data, the compromise of private … More →

The post FBI confirms China-linked cyber espionage involving breached telecom providers appeared first on Help Net Security.

CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since at least April 2024, ClearSky researchers have revealed. About the vulnerability CVE-2024-43451 affects all supported Windows versions and, when triggered, discloses a user’s NTLMv2 hash to the attacker, who can then use it to either mount pass the hash attacks or extract the user’s password from the hash. The result is in both cases the … More →

The post How a Windows zero-day was exploited in the wild for months (CVE-2024-43451) appeared first on Help Net Security.

Red Hat announced Red Hat Enterprise Linux 9.5. Red Hat Enterprise Linux helps organizations deploy applications and workloads more quickly and with greater reliability, enabling them to lower costs and more effectively manage workloads across hybrid cloud deployments while mitigating IT risks, from the datacenter to public clouds to the edge. According to IDC, “Organizations continue to find themselves at odds with striking the balance between maintaining their Linux operating system environments and the workloads … More →

The post Red Hat Enterprise Linux 9.5 helps organizations simplify operations appeared first on Help Net Security.

Google Cloud unveiled its Cybersecurity Forecast for 2025, offering a detailed analysis of the emerging threat landscape and key security trends that organizations worldwide should prepare for. The report delivers insights into the tactics of cyber adversaries, providing advice for increasing security posture in the coming year. The year of AI-driven cyberattacks The report highlights a shift in the cybersecurity landscape: the rise of artificial intelligence (AI) as a double-edged sword. While AI offers new … More →

The post Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage appeared first on Help Net Security.

In this Help Net Security interview, Arun Gupta, Vice President and General Manager for Open Ecosystem, Intel, discusses the company’s commitment to fostering an open ecosystem as a cornerstone of its software strategy. He explains how this approach empowers developers and shapes Intel’s broader technology and business objectives, enhancing platform innovation. Gupta emphasizes that by actively participating in open-source initiatives, Intel aims to lower complexity and improve security, ultimately enabling developers to create impactful solutions … More →

The post How Intel is making open source accessible to all developers appeared first on Help Net Security.

A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. Zero-day vulnerabilities on the rise The advisory highlights that malicious cyber actors increasingly targeted zero-day vulnerabilities, posing significant threats to enterprise networks. Notably, the exploitation of these zero-days rose compared to 2022. Unlike previous years, where older, unpatched vulnerabilities dominated the list, 2023 saw a spike in zero-day exploits, reflecting … More →

The post Zero-days dominate top frequently exploited vulnerabilities appeared first on Help Net Security.

In this Help Net Security video, David Cottingham, President of rf IDEAS, discusses what he sees as the most prominent areas for improvement and continued change in the space: As we move into 2025, it’s evident that businesses recognize MFA as essential. The next step is implementing MFA seamlessly, ensuring employees’ ease of use. Traditional methods, like sending a PIN to a mobile phone, are cumbersome and vulnerable to theft. As for authenticators, typing in … More →

The post What 2025 holds for user identity protection appeared first on Help Net Security.

Security leaders feel under increasing pressure to provide assurances around cybersecurity, exposing them to greater personal risk – yet many lack the data and resources to accurately report and close cybersecurity gaps, according to Panaseer. The report analyses the findings of a survey of 400 security decision makers (SDMs) across the US and UK. Security leaders turn to indemnity insurance for protection 61% of organizations have suffered a security breach in the past year because … More →

The post How cybersecurity failures are draining business budgets appeared first on Help Net Security.

Vectra AI announced the extension of the Vectra AI Platform to include comprehensive coverage for customers’ Microsoft Azure environments. With the addition of over 40 unique attacker behavior detections for Microsoft Azure, Vectra AI now delivers over 100 AI-driven attacker behavior detections. Now, Microsoft customers achieve comprehensive hybrid and multi-cloud defense for their entire Microsoft environment – Microsoft Active Directory, Microsoft Entra ID, Microsoft M365, Microsoft Copilot for M365 and now Microsoft Azure. According to … More →

The post Vectra AI adds AI-powered detections to help secure Microsoft customers appeared first on Help Net Security.

Cequence Security announced its new API Security Assessment Services. Designed to provide immediate, actionable insights into API security risks, these time-bound and fixed services leverage Cequence’s advanced Unified API Protection platform, enabling companies to identify and address security gaps within their existing infrastructure. As digital transformation accelerates, the reliance on APIs introduces new security challenges. Cequence’s assessment services provide a clear and comprehensive view of an organization’s API environment, helping identify hidden risks and comply … More →

The post Cequence Security enables organizations to elevate their API defenses appeared first on Help Net Security.

Absolute Security launched Enterprise Edition, combining the new Safe Connect for Secure Access and Comply Module for Secure Endpoint. With these innovations, Enterprise Edition is the comprehensive Security Service Edge (SSE) that can ensure only secure and compliant devices are accessing corporate networks, while delivering an optimized user experience for remote and hybrid workers. Backed by firmware-embedded resilience, customers are assured their SSE remains resilient, always on, and fully operational. “Hybrid work, complexity, ransomware, and … More →

The post Absolute Security releases Enterprise Edition appeared first on Help Net Security.