Help Net Security

Recent reports underscore increased fraud losses driven by both old methods and new technologies. As fraudsters exploit advancements in AI and other sophisticated tools, their methods have become more difficult to combat. From AI-driven scams and sophisticated phishing attacks to advanced identity document fraud, the scope and impact of online fraud are more severe than ever before. Old methods, new technologies drive fraud losses Experian | 2024 US Identity and Fraud Report | August 2024 … More →

The post Discover how online fraud can impact your business appeared first on Help Net Security.

Over the past decade, ransomware has been cemented as one of the top cybersecurity threats. In 2023 alone, the FBI received 2,385 ransomware complaints, resulting in over $34 million in losses. To help businesses combat ransomware and other threats, various regulatory bodies have developed cyber compliance frameworks to standardize best security practices across industries. While following governmental and industry-focused guidelines doesn’t necessarily ensure a stronger cyber posture, these frameworks do provide useful starting points as … More →

The post How cyber compliance helps minimize the risk of ransomware infections appeared first on Help Net Security.

Ransomware is seen as the biggest cybersecurity threat across every industry, with 75% of organizations affected by ransomware more than once in the past 12 months – a jump from 61% in 2023, according to SpyCloud. Session hijacking surges as major ransomware threat Traditional tools and solutions like antivirus and MFA are not infallible. For organizations affected by ransomware in the past year, MFA bypass via session hijacking is seen as the greatest emerging threat … More →

The post MFA bypass becomes a critical security issue as ransomware tactics advance appeared first on Help Net Security.

Organizations that plan to upgrade to Windows Server 2025 once it becomes generally available will be able to implement some security updates by hotpatching running processes. What is hotpatching? “Hotpatching has been around for years in Windows Server 2022 Azure Edition, but always required running a VM in Azure or on Azure Stack HCI. When Windows Server 2025 becomes generally available, you will be able to run the edition you want, where you want – … More →

The post Windows Server 2025 gets hotpatching option, without reboots appeared first on Help Net Security.

Cloudflare announced AI Audit, a set of tools to help websites of any size analyze and control how their content is used by AI models. For the first time, website and content creators will be able to quickly and easily understand how AI model providers are using their content, and then take control of whether and how the models are able to access it. Additionally, Cloudflare is developing a new feature where content creators can … More →

The post Cloudflare AI Audit helps websites control how their content is used by AI models appeared first on Help Net Security.

RightCrowd announced significant advancements in its product portfolio with the launch of enhanced RightCrowd SmartAccess platform, the broadest set of mobile credential capabilities with expanded partnerships with Wavelynx, HID, and Sentry, and reinforced visitor management features. These developments mark a pivotal moment in the company’s mission to drive the adoption of PIAM solutions across the security industry. “Our recent innovations and strategic alliances highlight RightCrowd’s dedication to propelling the security industry forward,” said Jason Bohrer, … More →

The post RightCrowd SmartAccess platform enhancements boost enterprise security appeared first on Help Net Security.

More often than not, a cyber attack or a cyber incident that results in business disruption will spur organizations to make changes to improve their cybersecurity and cyber resilience – and sometimes that means changing cybersecurity providers. The recent massive worldwide outage caused by a faulty Crowdstrike sensor content update has had a similar effect on many German organizations, a recent report by the German Federal Office for Information Security (BSI) and Germany’s digital association … More →

The post Organizations are changing cybersecurity providers in wake of Crowdstrike outage appeared first on Help Net Security.

Bitdefender has unveiled Bitdefender GravityZone Proactive Hardening and Attack Surface Reduction (PHASR), a technology that transforms how defense-in-depth-security is applied and managed across businesses. GravityZone PHASR analyzes individual user behavior such as application use, resource privileges, and others, clustering users into groups with similar patterns. This approach ensures security policies and controls are mapped precisely to user intended privileges and behaviors, dynamically adjusting as the attack surface evolves. Security teams struggle to keep pace as … More →

The post Bitdefender debuts GravityZone PHASR, enhancing security through user behavior analysis appeared first on Help Net Security.

Certainly is an open-source offensive security toolkit designed to capture extensive traffic across various network protocols in bit-flip and typosquatting scenarios. Built-in protocols: DNS, HTTP(S), IMAP(S), SMTP(S). “The reason why we created Certainly was to simplify the process of capturing and collecting requests that devices send to domains they where not intended to. By listening on multiple ports and protocols and leveraging a unique approach that certainly holds a new incoming session and, if needed, … More →

The post Certainly: Open-source offensive security toolkit appeared first on Help Net Security.

In this Help Net Security interview, Christopher Jones, Chief Technology Officer and Chief Data Officer at Nightwing, talks about some key misconceptions and complexities surrounding offensive cyber operations. Many myths stem from a simplistic view of these operations, ranging from direct attacks to enhancing defenses through techniques like penetration testing. Advances in AI and quantum computing are expected to reshape the field by improving both offensive capabilities and threats, including more sophisticated attacks and vulnerabilities. … More →

The post Offensive cyber operations are more than just attacks appeared first on Help Net Security.

Paid maintainers are 55% more likely to implement critical security and maintenance practices than unpaid maintainers and are dedicating more time to implementing security practices like those included in industry standards like the OpenSSF Scorecard and the NIST Secure Software Development Framework (SSDF), according to Tidelift. Open source is the modern application development platform, with up to 98% of applications containing open-source components and open-source code making up 70% or more of the average application. … More →

The post Paid open-source maintainers spend more time on security appeared first on Help Net Security.

The cyber insurance market is set for explosive growth as organizations increasingly seek financial protection against rising cyber threats. This surge in demand reflects a broader shift in how businesses approach risk management, viewing cyber insurance not just as an option but as a necessity. As the market evolves, insurers and businesses alike must adapt to meet the complex demands of protecting against the financial impacts of cyber incidents. The anticipated growth underscores a shift … More →

The post The surge in cyber insurance and what it means for your business appeared first on Help Net Security.

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Critical VMware vCenter Server bugs fixed (CVE-2024-38812) Broadcom has released fixes for two vulnerabilities affecting VMware vCenter Server that can be triggered by sending a specially crafted network packet, and could lead to remote code execution (CVE-2024-38812) or privilege escalation (CVE-2024-38813). Apple releases iOS 18, with security and privacy improvements Apple has launched iOS 18, the latest significant iteration of … More →

The post Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18 appeared first on Help Net Security.

Resecurity announced that it has joined the Cloud Security Alliance (CSA), the world’s leading organization dedicated to defining and raising awareness of best practices to help ensure a secure cloud computing environment. Continue ReadingAs an innovator in cybersecurity, Resecurity brings its expertise in threat intelligence, risk management, and cloud security solutions to the CSA. Resecurity’s platform combines AI-driven threat detection and real-time data analytics, helping organizations mitigate risks in cloud environments. By joining the CSA, Resecurity aims … More →

The post Resecurity joins Cloud Security Alliance to help organizations secure cloud technologies appeared first on Help Net Security.

Opnova announced its official launch, introducing an agentic AI platform designed to close the automation gap in complex operational workflows. Backed by $3.75 million in pre-seed funding co-led by Faber, ScaleX, and Preface Ventures, Opnova is set to redefine IT operations by addressing the challenges posed by rework—the time spent on repetitive, mundane, yet essential tasks. Operations teams are the backbone of every business, but the weight of repetitive tasks can seriously impact efficiency and … More →

The post Opnova emerges from stealth with $3.75 million in funding appeared first on Help Net Security.

Bad bot traffic continues to rise year-over-year, accounting for nearly a third of all internet traffic in 2023. Bad bots access sensitive data, perpetrate fraud, steal proprietary information, and degrade site performance. New technologies are enabling fraudsters to strike faster and inflict more damage. Bots’ indiscriminate and large-scale attacks pose a risk to businesses of all sizes in all industries. But there are techniques your business can adopt to address this malicious activity. By leveraging … More →

The post How to detect and stop bot activity appeared first on Help Net Security.

In this Help, Net Security interview, Michael Oberlaender, ex-CISO, and book author, discusses how to strike the right balance between security and operational efficiency. Oberlaender advises companies starting their cybersecurity journey and stresses the importance of aligning with various frameworks. He also introduces his latest book, which provides insights into the CISO role and effective cybersecurity leadership. How do you balance the need for security with operational efficiency and flexibility in an organization’s cybersecurity strategy? … More →

The post Striking the balance between cybersecurity and operational efficiency appeared first on Help Net Security.

As the priority for managing digital identities intensifies, organizations are encountering severe identity security risks. Recent findings indicate that many businesses are struggling with frequent breaches and inadequate security measures, particularly concerning machine identities. Despite increased efforts and awareness, issues such as compromised credentials and complex system vulnerabilities persist. The proliferation of non-human identities Entro Security | 2025 State of Non-Human Identities and Secrets in Cybersecurity report | September 2024 97% of non-human identities (NHIs) … More →

The post Rising identity security risks: Why organizations must act now appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from anecdotes, F5 Networks, Gcore, Rapid7, Strivacity, and Veritas Technologies. Veritas unveils AI-driven features to simplify cyber recovery Veritas Technologies unveiled new AI-driven capabilities to further expand the strength and functionality of the Veritas cyber resilience portfolio. The new innovations, including AI-powered automation and user interface enhancements, provide data protection specialists and IT generalists with intelligent, easy-to-use solutions that remove the … More →

The post New infosec products of the week: September 20, 2024 appeared first on Help Net Security.

Nextcloud has launched Nextcloud Hub 9, a significant update to its open-source cloud-based collaboration platform. It introduces several new features to improve user experience, performance, and security. Enhanced security in Nextcloud Hub 9 Nextcloud Hub 9 lets you strengthen your security and administrative controls even further with several new fine-grained security tools and mechanics: The option to set up a PIN code for passwordless authentication, adding an extra layer of security in case someone gains … More →

The post Nextcloud Hub 9 released: New features, more security, updated performance appeared first on Help Net Security.