Help Net Security

DoControl released a security product suite for Google Workspace, designed to protect data, identities, configurations, and third-party connected apps. DoControl’s SSPM provides Google Workspace customers with security capabilities that are not offered by Google’s built-in security ecosystem. Adopted by top Google Workspace customers, DoControl is the SSPM of choice for securing enterprise Google Workspace environments. DoControl’s Google Workspace Posture Management mitigates admin misconfigurations, preventing them from becoming an organization’s Achilles’ heel. DoControl continuously monitors Google … More →

The post DoControl introduces security product suite for Google Workspace appeared first on Help Net Security.

Google’s decision to write new code into Android’s codebase in Rust, a memory-safe programming language, has resulted in a significant drop in memory safety vulnerabilities, despite old code (written in C/C++) not having been rewritten. The number of memory safety vulnerabilities found in the Android codebase per year (Source: Google) Android evolves, and has fewer memory safety vulnerabilities “The Android team began prioritizing transitioning new development to memory-safe languages around 2019. This decision was driven … More →

The post The number of Android memory safety vulnerabilities has tumbled, and here’s why appeared first on Help Net Security.

Salt Security announced its integration with Google Cloud‘s Apigee API Management platform. With this technical collaboration, customers can discover all of their APIs, including shadow and deprecated APIs, apply posture rules, uncover areas of non-compliance, and stop API-based attacks at their root. The security landscape is witnessing an unprecedented reliance on APIs. Now more than ever, organizations need comprehensive API security mechanisms that proactively detect and prevent threats. Salt Security, a pioneer in API security, … More →

The post Salt Security provides improved API protection with Google Cloud appeared first on Help Net Security.

Deep-learning models have found applications across various industries, from healthcare diagnostics to financial forecasting. However, their high computational demands often require powerful cloud-based servers. This dependency on cloud computing raises notable security concerns, particularly in sensitive sectors like healthcare. Hospitals, for instance, may be reluctant to adopt AI tools for analyzing confidential patient data due to potential privacy risks. To tackle this pressing issue, MIT researchers have developed a security protocol that leverages the quantum … More →

The post New MIT protocol protects sensitive data during cloud-based computation appeared first on Help Net Security.

In July, Wall Street experienced its worst day since 2022, with the tech-focused Nasdaq falling by 3.6%. The downturn was largely triggered by what commentators suggest is the result of underwhelming earnings from some major tech companies. What’s notable is that the companies hit the hardest by this decline were those heavily invested in AI. While AI has driven significant investment and optimism, there is growing concern that its capabilities may have been overhyped. This … More →

The post AI use: 3 essential questions every CISO must ask appeared first on Help Net Security.

In this Help Net Security interview, Andrius Buinovskis, Head of Product at NordLayer, discusses how organizations can assess their compliance management and ensure they meet regulatory requirements. Buinovskis also addresses the challenges of managing multiple frameworks and offers strategies for building a strong security compliance program. To start things off, how can organizations assess their current compliance management level, and what steps should they take to determine whether they are meeting all regulatory requirements? Assessing … More →

The post Compliance management strategies for protecting data in complex regulatory environments appeared first on Help Net Security.

Data privacy has become one of the most pressing challenges of our time, but it didn’t happen overnight. The proliferation of data collection, coupled with the rise of advanced technologies like artificial intelligence and machine learning, has made it easier to piece together detailed profiles of individuals, often from what we consider public information. In this Help Net Security video, Dr. Micah Altman, lead co-author of the TechBrief on Data Privacy Protection and Research Scientist … More →

The post Rethinking privacy: A tech expert’s perspective appeared first on Help Net Security.

The presence of any data relating to an organization on the dark web demonstrably increases its risk of a cyber attack, according to Searchlight Cyber. Dark web insights and breach correlation Marsh McLennan Cyber Risk Intelligence Center analyzed the dark web dataset against a sample of 9,410 organizations with an overall breach rate of 3.7% from 2020 to 2023 to determine whether there was a correlation between data breaches and findings on the dark web … More →

The post Companies mentioned on the dark web at higher risk for cyber attacks appeared first on Help Net Security.

Details about and proof-of-concept (PoC) exploit code for CVE-2024-28987, a recently patched SolarWinds Web Help Desk (WHD) vulnerability that could be exploited by unauthenticated attackers to remotely read and modify all help desk ticket details, are now public. “When assessing the exposure of our own clients, we found that organizations typically revealed sensitive process information for IT procedures such as user onboarding, password resets, and accessing shared resources. While this vulnerability does not lead to … More →

The post PoC for critical SolarWinds Web Help Desk vulnerability released (CVE-2024-28987) appeared first on Help Net Security.

Malwarebytes introduced its latest consumer product, Personal Data Remover, designed to protect user privacy by assisting users with the deletion of personal information from data broker databases and people search sites. This new solution offers regular monitoring to ensure individuals’ data remains private, providing a robust defense against data misuse that can lead to stalking, spam, and identity theft. Today, data brokers have nearly 1,500 data points for every consumer, ranging from addresses and phone … More →

The post Malwarebytes Personal Data Remover protects user privacy appeared first on Help Net Security.

Onapsis announced new capabilities for its flagship solutions, Onapsis Defend and Onapsis Assess, designed to secure the SAP Business Technology Platform (SAP BTP). As more customers adopt SAP S/4HANA cloud and move to RISE with SAP, SAP BTP provides a unified environment for analytics, application development, AI, and automation. However, this also introduces security and compliance challenges that cloud customers must address as part of their shared security responsibilities. “With more organizations transitioning to SAP … More →

The post Onapsis expands security for SAP Business Technology Platform appeared first on Help Net Security.

Tamnoon announced it has raised $12 million in Series A funding. The round was led by cybersecurity investment firm Bright Pixel Capital (formerly Sonae IM), with participation by new investors Blu Ventures and Mindset Ventures as well as existing investors Merlin Ventures, Secret Chord Ventures, Inner Loop Capital, and Elron Ventures. Tamnoon is the first and only hybrid human-AI managed service developed from the ground up specifically for cloud security remediation. Founded by cloud security … More →

The post Tamnoon raises $12 million to reduce critical cloud exposures appeared first on Help Net Security.

Nudge Security unveiled an automated SaaS spend discovery capabilities, building on the company’s patented approach to SaaS discovery to include analysis and insights into previously unknown SaaS spend. At a time when organizations are trying to rationalize app estates to reduce spend, mitigate risk, and improve efficiency, Nudge Security is the only solution to provide the whole picture: SaaS adoption, usage, risk, and spend insights that were previously difficult for IT and security teams to … More →

The post Nudge Security introduces automated SaaS spend discovery capabilities appeared first on Help Net Security.

Portnox announced support for Microsoft External Authentication Methods (EAM) for its Conditional Access for Applications solution. This new integration extends Portnox’s commitment to delivering phishing-resistant passwordless authentication with risk-based assessment and compliance validation for enterprise applications. Microsoft’s EAM capability allows users to authenticate using non-Microsoft solutions, such as certificate-based authentication, FIDO2 keys, and third-party identity providers, further strengthening their access control policies across cloud, hybrid, and on-prem environments. By incorporating Microsoft EAM into its Conditional Access … More →

The post Portnox enhances passwordless risk-based access for enterprise applications appeared first on Help Net Security.

CVE-2024-7593, a critical authentication bypass vulnerability affecting Ivanti Virtual Traffic Manager (vTM) appliances, is actively exploited by attackers. The confirmation comes from the Cybersecurity and Infrastructure Security Agency (CISA), which added the flaw to its Known Exploited Vulnerabilities catalog, thus mandating all US federal civilian executive branch agencies to remediate it by October 15, 2024. About CVE-2024-7593 Ivanti Virtual Traffic Manager is a software-based application delivery controller and load balancing solution. It includes a web-based … More →

The post Ivanti vTM auth bypass flaw exploited in attacks, CISA warns (CVE-2024-7593) appeared first on Help Net Security.

NETSCOUT announced enhancements to its nGenius Enterprise Performance Management solution, which includes a new notification center that helps streamline and automate alerts and contextual workflows to identify and resolve problems faster. Secured Reliable Transport (SRT) was added to support live video streaming, and additional supervisory control and data acquisition (SCADA) protocols were added to support international utility networks. Performance degradations, application unavailability, and lengthy outages can have a crippling effect on any business. Organizations need … More →

The post NETSCOUT’s nGeniusONE notification center streamlines and automates alerts appeared first on Help Net Security.

ManageEngine announced a significant upgrade to its flagship IT analytics solution, Analytics Plus. Version 6.0 introduces Spotlight, a contextual recommendations engine powered by AI, designed to identify key inefficiencies in IT operations and suggest corrective strategies. The 2023 State of Analytics Engineering report found that time to business insight is the biggest challenge for nearly 50% of surveyed directors. Spotlight dramatically reduces the time IT managers and CIOs spend analyzing various IT metrics and coming … More →

The post ManageEngine Analytics Plus 6.0 identifies key inefficiencies in IT operations appeared first on Help Net Security.

OneTrust announced new capabilities to help organizations enhance resilience across the financial sector and operationalize compliance with the EU’s Digital Operational Resilience Act (DORA). Building upon its comprehensive OneTrust Third-Party Management solution, OneTrust will now offer first-to-market capabilities such as automated DORA “register of information” report creation and out-of-the-box depth of screening and compliance data. “An organization’s supply chain can be one of its biggest assets for efficiency and innovation, as well as its most … More →

The post OneTrust helps organizations operationalize DORA compliance appeared first on Help Net Security.

Bitwarden announced further enhancements to inline autofill capabilities within the Bitwarden browser extension. Following the recent addition of autofill for cards and identities, this update ensures seamless autofill of passkeys, providing a faster, more secure, and convenient way for users to log into websites and applications that support passkey authentication. Bitwarden continues to see strong momentum in passkey adoption. Since announcing passkey management earlier this year, daily passkey creation peaked this summer at more than … More →

The post Bitwarden inline autofill empowers users to fill passkeys directly from their vault appeared first on Help Net Security.

Commvault announced it will acquire Clumio, a technology leader in data protection for critical cloud data in AWS. This transaction enables Commvault to leverage Clumio’s AWS offerings to provide cyber resilience to next generation applications built on AWS. Clumio serves a wide range of customers including Atlassian, Cox Automotive, Duolingo, and LexisNexis. More and more organizations are relying on Amazon S3 as their de facto storage offering, including for AI development in the cloud. Clumio … More →

The post Commvault acquires Clumio to accelerate cyber resilience capabilities for AWS appeared first on Help Net Security.