Help Net Security

Cost savings and business benefits were quantified in “The Total Economic Impact of Cynet All-in-One Security,” a commissioned study conducted by Forrester Consulting on behalf of Cynet in October 2024. The Total Economic Impact Study framework helps organizations understand the financial effects of their strategic technology investments. Based on interviewed customers with experience using Cynet, Forrester found that Cynet’s All-in-One Cybersecurity Platform generated $2.73 million in savings, paying for itself in under six months, for … More →

The post Cynet enables 426% ROI in Forrester Total Economic Impact Study appeared first on Help Net Security.

North Korean state-sponsored hackers – Jumpy Pisces, aka Andariel, aka Onyx Sleet – have been spotted burrowing into enterprise systems, then seemingly handing matters over to the Play ransomware group. Timeline of the attack (Source: Palo Alto Networks) The attack The ransomware attack was investigated by Palo Alto Networks’ Unit 42 in September 2024, and they determined that North Korean hackers: Gained access to a host using a compromised users account Moved laterally to other … More →

The post North Korean hackers pave the way for Play ransomware appeared first on Help Net Security.

Claro Enterprise Solutions launched Collaboration Security Management solution. This comprehensive service addresses critical security challenges related to file sharing, data loss events, or unknown shadow users, faced by organizations using Microsoft 365. As remote and hybrid work models become the norm, businesses are increasingly reliant on collaboration platforms. However, this shift has also exposed organizations to new security risks, including data breaches, insider threats, and compliance violations. Claro Enterprise Solutions’ Collaboration Security Management offers a … More →

The post Claro Enterprise Solutions helps organizations identify vulnerabilities within Microsoft 365 appeared first on Help Net Security.

Yet again, connected devices are in the news for all the wrong reasons. In October, security researchers found that robot vacuums from Chinese company, Ecovacs, can be compromised via a backdoor. In one case, hackers gained control over the device and shouted slurs at the homeowners. Worse still: the company doesn’t take responsibility and tells users they “do not need to worry excessively” about the vulnerability. This hack is another unfortunate example of connected device … More →

The post IoT needs more respect for its consumers, creations, and itself appeared first on Help Net Security.

In this Help Net Security interview, Lior Div, CEO at Seven AI, discusses the concept of agentic AI and its application in cybersecurity. He explains how it differs from traditional automated security systems by offering greater autonomy and decision-making capabilities. Div emphasizes that agentic AI is particularly well-suited to combat modern AI-driven threats, such as AI-generated phishing or malware, by processing vast volumes of alerts in real time. How would you differentiate agentic security from … More →

The post How agentic AI handles the speed and volume of modern threats appeared first on Help Net Security.

A recent Vectra AI report highlights a growing distrust of threat detection tools. 47% of respondents note they do not trust their tools to work the way they need them to. Moreover, 60% of SOC practitioners say security vendors flood them with pointless alerts to avoid responsibility for a breach. In this Help Net Security video, Mark Wojtasiak, VP of Research and Strategy at Vectra AI, discusses where vendors and tools aren’t owning accountability and … More →

The post Why cyber tools fail SOC teams appeared first on Help Net Security.

The most common challenge for CISOs is resource constraints: not enough staff, budget or technology to support the security program needed or meet compliance requirements, according to DirectDefense. Cybersecurity industry faces ongoing talent shortage The World Economic Forum claims there’s a global shortage of nearly 4 million professionals in the cybersecurity industry – and that shortage is after a 12.6% growth in the cybersecurity workforce between 2022 and 2023. The government and healthcare sectors are … More →

The post 99% of CISOs work extra hours every week appeared first on Help Net Security.

Immuta announced an expansion of its platform with the launch of a new Data Marketplace solution to power fast and safe internal data sharing. Fueling a data marketplace that is owned and managed by the customer, the Immuta Platform enables rapid, data-driven decisions by bringing together data teams and data users to automate discovery and access, while still providing enterprise-grade governance and security. Organizations have larger data volumes and more data consumers than ever before, … More →

The post Immuta Data Marketplace automates data access workflows appeared first on Help Net Security.

XM Cyber launched its innovative Vulnerability Risk Management (VRM) solution, extending its Continuous Exposure Management Platform. This new approach to vulnerability management empowers organizations to see through the fog of false positives left behind by legacy vulnerability assessment tools and confidently embrace an innovative new security methodology. XM Cyber’s Vulnerability Risk Management provides an approach to discover, quantify, and reduce the risk presented by common vulnerabilities. By correlating CVE-related risk attributes with real-world attack techniques … More →

The post XM Cyber Vulnerability Risk Management boosts prioritization with actual impact analysis appeared first on Help Net Security.

A threat actor – or possibly several – has hit approximately 22,000 vulnerable instances of CyberPanel and encrypted files on the servers running it with the PSAUX and other ransomware. The PSAUX ransom note (Source: LeakIX) The CyberPanel vulnerabilities CyberPanel is a widely used open-source control panel that’s used for managing servers used for hosting websites. Two critical command injection vulnerabilities (CVE-2024-51378 and CVE-2024-51567) affecting CyberPanel versions 2.3.6 and (unpatched) 2.3.7 have been publicly documented … More →

The post Ransomware hits web hosting servers via vulnerable CyberPanel instances appeared first on Help Net Security.

Neon, the serverless Postgres database built for developers, launched Neon Authorize. It enables developers to manage permissions and access controls with ease. This new offering leverages Postgres RLS (Row-Level Security) – a Postgres primitive that protects data from malicious actors even when accessed through third-party tooling – and makes it much simpler to use via new deployment models for application developers. “It makes perfect sense to set up authorization policies at the database layer – … More →

The post Neon Authorize: Granular access controls at the database layer appeared first on Help Net Security.

With the proliferation of APIs, and the speed at which AI functionality is helping fuel innovation, a strategic approach for securing APIs is no longer a nice to have, it’s a criticality. Without a proactive approach, your APIs could become easy targets for attackers. StackHawk is here to flip the script by offering a proactive, Shift-left API security solution that helps organizations secure their APIs from the start, not after it’s too late. StackHawk’s platform … More →

The post Product showcase: Shift API security left with StackHawk appeared first on Help Net Security.

Midnight Blizzard – a cyber espionage group that has been linked to the Russian Foreign Intelligence Service (SVR) – is targeting government, academia, defense, and NGO workers with phishing emails containing a signed Remote Desktop Protocol (RDP) configuration file. “Based on our investigation of previous Midnight Blizzard spear-phishing campaigns, we assess that the goal of this operation is likely intelligence collection,” Microsoft’s threat analysts say. Midnight Blizzard Midnight Blizzard (aka Cozy Bear, APT29, and UNC2452) … More →

The post Russian hackers deliver malicious RDP configuration files to thousands appeared first on Help Net Security.

Kaseya announced Kaseya 365 User, joining Kaseya 365 Endpoint which launched in April 2024. Kaseya 365 User gives managed service providers (MSPs) the ability to help their customers prevent, respond to and recover from threats to user identity and security. Kaseya also announced it has acquired SaaS Alerts, a cybersecurity company that helps MSPs monitor and protect customer’s SaaS application usage. SaaS Alerts’ technology is included for free as part of the Kaseya 365 User … More →

The post Kaseya 365 User helps MSPs to protect user data appeared first on Help Net Security.

Seclore announced the extension of its Seclore Enterprise Digital Rights Management (EDRM) capabilities to support neutral or interoperable computer-aided design (CAD) files for industries that create, manage, and share intellectual property (IP). The support for neutral CAD files creates better visibility for manufacturers with compliance reporting and auditing needs. The Seclore Data-Centric Security Platform brings granular security and control to industries like automotive, healthcare, aerospace, energy, pharmaceutical, and others, which have historically lacked adequate data … More →

The post Seclore secures sensitive intellectual property and data in CAD files appeared first on Help Net Security.

Cybersecurity is an overly reactive industry. Too often we act like firefighters, rushing from blaze to blaze, extinguishing flames hoping to keep the damage to a minimum, rather than fire suppression experts designing environments that refuse to burn. Just consider the litany of “detect and respond” technologies advanced by analysts and enthusiastically purchased by enterprises over the past decade. A recap: 2013 – Gartner coins the term Endpoint Detection and Response (EDR) 2016 – Managed … More →

The post Risk hunting: A proactive approach to cyber threats appeared first on Help Net Security.

In this Help Net Security interview, Carla Roncato, VP of Identity at WatchGuard Technologies, discusses how companies can balance privacy, security, and usability in digital identity systems. She emphasizes modern techniques like biometrics and passkeys to replace knowledge-based authentication methods and highlights the need for global standardization in decentralized identity solutions. How can companies balance privacy, security and usability in digital identity systems—especially in sectors such as financial services and healthcare? One technique is to … More →

The post Simplifying decentralized identity systems for everyday use appeared first on Help Net Security.

Medical practices remain vulnerable to cyberattacks, with over a third unable to cite a cybersecurity incident response plan, according to Software Advice. This gap exposes healthcare providers to risks of patient data breaches, HIPAA violations, financial penalties, and patient safety concerns. The findings come at a critical time, as the Health Infrastructure Security and Accountability Act seeks to establish minimum cybersecurity standards across the healthcare industry. Software Advice’s survey found that 59% of medical practices … More →

The post 6 key elements for building a healthcare cybersecurity response plan appeared first on Help Net Security.

The identity of a suspected developer and administrator of the Redline malware-as-a-service operation has been revealed: Russian national Maxim Rudometov. Infrastructure takedown As promised on Monday when they announced the disruption of the Redline and Meta infostealer operations, law enforcement Operation Magnus has unveiled on Tuesday how the takedown played out. “Investigations into Redline and Meta started after victims came forward and a security company notified authorities about possible servers in the Netherlands linked to … More →

The post US charges suspected Redline infostealer developer, admin appeared first on Help Net Security.

Kentik launched The Cloud Latency Map, a free public tool allowing anyone to explore the latencies measured between over 100 cloud regions worldwide. Users can identify recent changes in latencies globally between various public clouds and data center regions for the first time. “The Cloud Latency Map benefits anyone trying to determine if there is a connectivity issue impacting the latencies to particular clouds and cloud regions,” said Doug Madory, Director of Internet Analysis at … More →

The post The Cloud Latency Map measures latency across 100+ cloud regions appeared first on Help Net Security.