Help Net Security

In this Help Net Security, Erica Banks, VP and a leader in Booz Allen’s civilian services business, discusses the Federal Cybersecurity Strategy’s role in safeguarding national assets. Banks outlines key areas for improvement, including funding, talent retention, and leveraging AI for enhanced cyber defense. The Federal Cybersecurity Strategy is a crucial part of protecting national assets. How effective do you think the current strategy is in mitigating cyber threats, and what areas need more attention … More →

The post Top priorities for federal cybersecurity: Infrastructure, zero trust, and AI-driven defense appeared first on Help Net Security.

AI has become a key player in protecting valuable organizational insights from threats. Thanks to AI-enabled data protection practices such as behavior monitoring, enterprises no longer have to be reactive to a cyberattack but can be proactive before a potential threat arises. In this Help Net Security video, Andrew Riddell, Principal Cybersecurity Architect, Logicalis US, explains the benefits and best practices of leveraging AI for cybersecurity.

The post Benefits and best practices of leveraging AI for cybersecurity appeared first on Help Net Security.

Concerns about the trustworthiness of internal data exist in nearly all organizations globally, according to TeamViewer. 99% of business leaders pointed to factors undermining trust in internal data, citing multiple versions of the truth (38%), conflicting data management practices (32%) and too many instances of poor hardware reliability (31%) as top reasons for mistrust. Organizations face technology connectivity gaps Interestingly this mistrust of internal data varies across company size. It is more likely to be … More →

The post Internal disconnects vs. cybersecurity: How connectivity shapes challenges appeared first on Help Net Security.

Kali Linux 2024.3 is now available for download. Besides the new tools, this release mainly focuses on behind-the-scenes updates and optimization. New tools in Kali Linux 2024.3 This Kali release is about new tools and package updates: goshs – Think SimpleHTTPServer, but written in Go, and with more features graudit – Grep Rough AUDIT: source code auditing tool gsocket – Allows two machines on different networks to communicate with each other hekatomb – Extract and … More →

The post Kali Linux 2024.3 released: 11 new tools, Qualcomm Snapdragon SDM845 SoC support appeared first on Help Net Security.

Mitiga unveiled its Cloud Managed Detection and Response (MDR) service, designed to provide 24/7 protection against the increasingly complex threats targeting cloud and SaaS environments. This comprehensive solution enables organizations to detect, prioritize, and respond to threats in SaaS and Cloud environments in real-time, significantly reducing alert fatigue and strengthening Security Operations (SecOps) capabilities. As yet another testament to its innovative approach to detection and response in the cloud, Mitiga has been named a finalist … More →

The post Mitiga Cloud MDR detects threats in SaaS and cloud environments appeared first on Help Net Security.

Ivanti has fixed a slew of vulnerabilities affecting its Endpoint Manager solution, including a maximum severity one (CVE-2024-29847) that may allow unauthenticated attackers to remotely execute code in the context of the vulnerable system, and use it as a beachhead for burrowing into corporate networks and devices. The fixes CVE-2024-29847 affects the agent portal of Ivanti Endpoint Manager versions 2024 (with the September update) and 2022 SU5 and earlier, and stems from the application’s improper … More →

The post Ivanti fixes critical vulnerabilities in Endpoint Management (CVE-2024-29847) appeared first on Help Net Security.

Opus Security launched its Advanced Multi-Layered Prioritization Engine, designed to revolutionize how organizations manage, prioritize and remediate security vulnerabilities. Leveraging AI-driven intelligence, deep contextual data and automated decision-making capabilities, this innovative engine helps organizations prioritize the most critical vulnerabilities, enhancing both security posture and operational efficiency. A breakthrough in vulnerability remediation Security teams are overwhelmed by the need to rapidly prioritize alerts from multiple tools across various attack surfaces. These may include redundant alerts or … More →

The post Opus Security empowers organizations to prioritize the most critical vulnerabilities appeared first on Help Net Security.

Tenable released AI Aware, advanced detection capabilities designed to surface artificial intelligence solutions, vulnerabilities and weaknesses available in Tenable Vulnerability Management. Tenable AI Aware provides exposure insight into AI applications, libraries and plugins so organizations can confidently expose and close AI risk, without inhibiting business operations. The rapid development and adoption of AI technologies in the past two years has introduced major cybersecurity and compliance risks that organizations must proactively address without established best practices. … More →

The post Tenable AI Aware provides exposure insight into AI applications, libraries and plugins appeared first on Help Net Security.

Proofpoint has expanded capabilities across its platform to provide customers with broader, adaptive human-centric security controls. These new solutions and integrations shield organizations from incoming threats across messaging, collaboration and social media apps; secure SaaS applications and identity posture across a vast array of applications; prevent data loss with smarter, more adaptive data security; and steer employees to safer behaviors through adaptive educational security guidance. These new capabilities set a new standard for how organizations … More →

The post Proofpoint expands platform capabilities for broader, adaptive human-centric security controls appeared first on Help Net Security.

Tanium announced Tanium Automate, which provides organizations running Tanium in the cloud with highly accurate, real-time automation for common IT operations and security tasks. Leveraging the Tanium platform’s breadth of endpoint management and security capabilities, real-time architecture, and ability to scale, Automate allows operators to automate complex tasks in real-time by replacing manual processes with easy to implement no and low code orchestration and automation across operations and security domains. Automate is a key component … More →

The post Tanium helps organizations automate complex tasks in real-time appeared first on Help Net Security.

Trellix announced Trellix Email Security Cloud with integrated Trellix Data Loss Prevention (DLP) capabilities, available globally. The enhanced solution uniquely improves data security and protects organizations’ sensitive information by monitoring and blocking email-borne data risks like exfiltration by insiders or accidental data sharing. “Email is the primary attack vector for threat actors and organizations’ riskiest channel for data loss,” said Gareth Maclachlan, Network and Collaboration Security GM, Trellix. “Trellix integrated our DLP capabilities into Trellix … More →

The post Trellix strengthens email security with DLP capabilities appeared first on Help Net Security.

Saviynt announced the release of its Intelligence Suite with general availability of Intelligent Recommendations, which will provide customers with dynamic roles, access recommendations, actionable insights, and a multi-dimensional weighted trust scoring model that will be a true game changer. “Saviynt Intelligence will transform identity security from a set of purely operational processes into ones that are automated with artificial intelligence (AI) and machine learning (ML). Our experience is that this actionable intelligence will reduce access … More →

The post Saviynt Intelligence delivers identity security analytics through ML and AI capabilities appeared first on Help Net Security.

P0 Security announced the closing of its $15 million Series A round, bringing its total raised since inception to $20 million. The investment was led by SYN Ventures with participation from Zscaler, the leader in cloud security, and existing investor Lightspeed Venture Partners. The company also announced the appointment of SYN Ventures Operating Partner, Ryan Permeh, to the Board of Directors. Legacy approaches to access governance and identity security relied on network boundaries. In today’s … More →

The post P0 Security raises $15 million to govern and secure cloud access for all identities appeared first on Help Net Security.

Healthcare institutions are custodians of vast repositories of sensitive patient data, encompassing comprehensive health histories, insurance profiles, and billing data. The ramifications of a data breach often extend far beyond the immediate task of patching the vulnerabilities and notifying the affected parties. Often, the less visible costs of these incidents can be equally, if not more, devastating to healthcare providers and the patients they serve. The aftermath of a cyberattack can reverberate for months, impacting … More →

The post Cybersecurity is a fundamental component of patient care and safety appeared first on Help Net Security.

DockerSpy scans Docker Hub for images and retrieves sensitive information, including authentication secrets, private keys, and other confidential data. “DockerSpy was created to address the growing concern of sensitive data leaks within Docker images, especially those publicly available on DockerHub. Many developers unknowingly publish images containing secrets such as API keys, credentials, or other sensitive information. DockerSpy automates the process of fetching these images and scanning them for secrets, offering a layer of security and … More →

The post DockerSpy: Search for images on Docker Hub, extract sensitive information appeared first on Help Net Security.

In this Help Net Security interview, John Hernandez, President and General Manager at Quest Software, shares practical advice for enhancing cybersecurity resilience against advanced threats. He underscores the need to focus on on-premises and cloud environments, adapt to new regulations, and address supply chain vulnerabilities. Hernandez also discusses how AI and zero-trust architecture are becoming key elements in future cybersecurity strategies. What practical steps can organizations take to improve their cybersecurity resilience in response to … More →

The post How AI and zero trust are transforming resilience strategies appeared first on Help Net Security.

ACISO HTX | Singapore | Hybrid – View job details As an ACISO, you will formulate Agency ICT security strategy and work plan, alignment to MHA and HTX’s IT & Cybersecurity strategic directions. Evaluate existing IT environment against MHA and HTX’s IT & Cybersecurity strategic directions. Ensure security governance, compliance by implementing cyber security risk assessment and risk acceptance at appropriate Agency stakeholders. Review, endorse, develop risk management and mitigation plans. Audit / Risk / … More →

The post Cybersecurity jobs available right now: September 11, 2024 appeared first on Help Net Security.

Organizations sometimes need to plan their cloud migrations with more emphasis on security and compliance. Many, therefore, struggle to keep their data safe after migrating to the cloud. To illustrate, IBM revealed that 82% of data breaches in 2023 involved data stored in the cloud, signaling a need for robust cloud security measures. Organizations need to consider security and compliance when migrating to the cloud to protect their cloud-based assets. This can be challenging, especially … More →

The post eBook: Keep assets secure after cloud migration appeared first on Help Net Security.

September 2024 Patch Tuesday is here and Microsoft has delivered 79 fixes, including those for a handful of zero-days (CVE-2024-38217, CVE-2024-38226, CVE-2024-38014, CVE-2024-43461) exploited by attackers in the wild, and a Windows 10 code defect (CVE-2024-43491) that rolled back earlier CVE fixes. The actively exploited flaws Let’s start with the only one that was previously publicly known: CVE-2024-38217, a vulnerability that allows attackers to bypass Mark of the Web (MotW). Elastic Security researcher Joe Desimone … More →

The post Microsoft fixes 4 exploited zero-days and a code defect that nixed earlier security fixes appeared first on Help Net Security.

LOKKER released a new consent management solution available in its Privacy Edge Platform. This builds on LOKKER’s earlier release of its Consent Verification tool, which allows businesses to check whether their existing consent management platform is configured correctly. Many state and federal privacy laws require organizations to provide consumers with the ability to opt in or opt out of their data being shared with third parties and trackers on their websites and ensure that what … More →

The post LOKKER’s consent management solution blocks all unauthorized data collection on websites appeared first on Help Net Security.