Help Net Security

Kaseya announced Kaseya 365 User, joining Kaseya 365 Endpoint which launched in April 2024. Kaseya 365 User gives managed service providers (MSPs) the ability to help their customers prevent, respond to and recover from threats to user identity and security. Kaseya also announced it has acquired SaaS Alerts, a cybersecurity company that helps MSPs monitor and protect customer’s SaaS application usage. SaaS Alerts’ technology is included for free as part of the Kaseya 365 User … More →

The post Kaseya 365 User helps MSPs to protect user data appeared first on Help Net Security.

Seclore announced the extension of its Seclore Enterprise Digital Rights Management (EDRM) capabilities to support neutral or interoperable computer-aided design (CAD) files for industries that create, manage, and share intellectual property (IP). The support for neutral CAD files creates better visibility for manufacturers with compliance reporting and auditing needs. The Seclore Data-Centric Security Platform brings granular security and control to industries like automotive, healthcare, aerospace, energy, pharmaceutical, and others, which have historically lacked adequate data … More →

The post Seclore secures sensitive intellectual property and data in CAD files appeared first on Help Net Security.

Cybersecurity is an overly reactive industry. Too often we act like firefighters, rushing from blaze to blaze, extinguishing flames hoping to keep the damage to a minimum, rather than fire suppression experts designing environments that refuse to burn. Just consider the litany of “detect and respond” technologies advanced by analysts and enthusiastically purchased by enterprises over the past decade. A recap: 2013 – Gartner coins the term Endpoint Detection and Response (EDR) 2016 – Managed … More →

The post Risk hunting: A proactive approach to cyber threats appeared first on Help Net Security.

In this Help Net Security interview, Carla Roncato, VP of Identity at WatchGuard Technologies, discusses how companies can balance privacy, security, and usability in digital identity systems. She emphasizes modern techniques like biometrics and passkeys to replace knowledge-based authentication methods and highlights the need for global standardization in decentralized identity solutions. How can companies balance privacy, security and usability in digital identity systems—especially in sectors such as financial services and healthcare? One technique is to … More →

The post Simplifying decentralized identity systems for everyday use appeared first on Help Net Security.

Medical practices remain vulnerable to cyberattacks, with over a third unable to cite a cybersecurity incident response plan, according to Software Advice. This gap exposes healthcare providers to risks of patient data breaches, HIPAA violations, financial penalties, and patient safety concerns. The findings come at a critical time, as the Health Infrastructure Security and Accountability Act seeks to establish minimum cybersecurity standards across the healthcare industry. Software Advice’s survey found that 59% of medical practices … More →

The post 6 key elements for building a healthcare cybersecurity response plan appeared first on Help Net Security.

The identity of a suspected developer and administrator of the Redline malware-as-a-service operation has been revealed: Russian national Maxim Rudometov. Infrastructure takedown As promised on Monday when they announced the disruption of the Redline and Meta infostealer operations, law enforcement Operation Magnus has unveiled on Tuesday how the takedown played out. “Investigations into Redline and Meta started after victims came forward and a security company notified authorities about possible servers in the Netherlands linked to … More →

The post US charges suspected Redline infostealer developer, admin appeared first on Help Net Security.

Kentik launched The Cloud Latency Map, a free public tool allowing anyone to explore the latencies measured between over 100 cloud regions worldwide. Users can identify recent changes in latencies globally between various public clouds and data center regions for the first time. “The Cloud Latency Map benefits anyone trying to determine if there is a connectivity issue impacting the latencies to particular clouds and cloud regions,” said Doug Madory, Director of Internet Analysis at … More →

The post The Cloud Latency Map measures latency across 100+ cloud regions appeared first on Help Net Security.

Securiti released Gencore AI, a holistic solution to easily build safe, enterprise-grade GenAI systems, copilots and AI agents. This new solution accelerates GenAI adoption in the enterprise by making it easy to build unstructured and structured data + AI pipelines utilizing proprietary enterprise data across hundreds of diverse data systems and applications. GenAI is set to drive significant productivity gains, leading to massive economic growth. For enterprise organizations, the biggest barrier to deploying GenAI systems … More →

The post Securiti Gencore AI accelerates GenAI adoption in the enterprise appeared first on Help Net Security.

Aviatrix unveiled new features and functionality designed to fill critical cloud network security gaps in cloud environments. With its latest software release and introduction of new features, including the Hybrid Cloud Transit and Distributed Cloud Firewall (DCF) integration with enhanced threat intelligence capabilities, Aviatrix is equipping enterprises to secure their cloud egress and hybrid-cloud connectivity, areas that have long posed challenges for cloud-first organizations. As enterprises migrate more workloads and modernize on cloud workloads, they … More →

The post Aviatrix unveils features to simplify network security management appeared first on Help Net Security.

Crooks are leveraging the event management and ticketing website Eventbrite to deliver their phishing emails to potential targets. “Since July, these attacks have increased 25% week over week, resulting in a total growth rate of 900%,” Perception Point researchers say. The phishing emails impersonate legitimate companies The phishing emails look like they are coming from Eventbrite because they are, but their content is crafted to impersonate legitimate businesses such as NLB Group (financial institution), EnergyAustralia … More →

The post Phishers reach targets via Eventbrite services appeared first on Help Net Security.

Zenity announced they have received $38 million in Series B funding co-led by Third Point Ventures and DTCP, pushing the total capital raised to over $55 million. It follows the recent strategic investment by Microsoft’s venture arm, M12, with strong support from existing investors Intel Capital and Vertex Ventures. The funds will be used to grow the team across product, engineering, sales and marketing, as well as launching a partner program to expand the ecosystem … More →

The post Zenity raises $38 million to secure agentic AI appeared first on Help Net Security.

Akamai launched new capabilities to its Account Protector security solution. These enhancements are designed to safeguard user accounts against abuse throughout their entire lifecycle and provide advanced protection against account opening abuse, account takeover attacks, and other attack schemes. The new capabilities enable organizations to protect accounts from the moment they are created, through password resets, logins, and all post-login activities. In today’s threat landscape, a single security check at login or transaction is no … More →

The post Akamai strenghtens protection against account abuse appeared first on Help Net Security.

Corero Network Security launched a new cloud-based availability protection platform, CORE. CORE by Corero Network Security is a cloud-based availability protection platform designed to seamlessly enhance a company’s existing security infrastructure. It delivers advanced defense, leveraging existing infrastructure, offering flexibility and cost-efficiency to keep an organization secure and agile. Corero CORE leverages comprehensive data lake(s) by gathering feeds from multiple sources across a network and generating AI/ML-assisted insights, turning isolated security events into actionable intelligence. … More →

The post Corero CORE turns isolated security events into actionable intelligence appeared first on Help Net Security.

Despite two patching attempts, a security issue that may allow attackers to compromise Windows user’s NTLM (authentication) credentials via a malicious Windows themes file still affects Microsoft’s operating system, 0patch researchers have discovered. The path to discovery The story starts with CVE-2024-21320, a Windows Themes spoofing vulnerability that was reported by Akamai security researcher Tomer Peled and fixed by Microsoft in January 2024. The vulnerability could be triggered by a .theme file that specified a … More →

The post Patching problems: The “return” of a Windows Themes spoofing vulnerability appeared first on Help Net Security.

PIXM Security launched its new Managed Service Provider (MSP) program for zero-day phishing protection. With over 500,000 end users already protected, PIXM shields MSPs and their customers from credential theft and zero-day phishing attacks that can lead to malware and other exploits on their laptops, desktops and mobile platforms. Over 50 percent of phishing links are clicked outside corporate email. While phishing security is often associated solely with email protection, cybercriminals are adapting and increasingly … More →

The post PIXM protects MSPs from credential theft and phishing attacks appeared first on Help Net Security.

In this Help Net Security interview, security researchers Specter and ChendoChap discuss gaming consoles’ unique security model, highlighting how it differs from other consumer devices. They also share their thoughts on how advancements in console security could shape future consumer and enterprise hardware designs. Specter was a speaker at the Hardwear.io conference that took place last week in Amsterdam. Could you explain what makes the security model of consoles, such as PlayStation, fundamentally different from … More →

The post Inside console security: How innovations shape future hardware protection appeared first on Help Net Security.

EmberOT’s OT PCAP Analyzer, developed for the industrial security community, is a free tool providing a high-level overview of the devices and protocols in packet capture files. “The OT PCAP Analyzer was designed specifically with critical OT environments in mind. We’ve created a novel set of engines to gather and analyze network traffic at speed with unparalleled accuracy. This allows the free PCAP Analyzer to quickly identify OT devices, protocols, and how those elements interact. … More →

The post OT PCAP Analyzer: Free PCAP analysis tool appeared first on Help Net Security.

API Gateway Security Engineer Ness Technologies | Israel | Hybrid – View job details As an API Gateway Security Engineer, you will be responsible for managing and implementing API Gateway solutions with a strong focus on information security. Your responsibilities will include ongoing maintenance of API systems, managing secure permissions and access, monitoring API traffic to identify anomalies, threats, and intrusion attempts, and collaborating with security and infrastructure teams to identify and manage security risks, … More →

The post Cybersecurity jobs available right now: October 29, 2024 appeared first on Help Net Security.

In this Help Net Security video, John Bennett, CEO at Dashlane, discusses their recent Global Password Health Score Report, detailing the global state of password health and hygiene. Poor security habits like password reuse remain widespread. With passwordless technologies like passkeys still in their early stages of adoption, organizations must remain vigilant. The risk of weak, reused, and compromised passwords fuels credential-based breaches, underscoring the need for stronger password management practices even as new technologies … More →

The post The state of password security in 2024 appeared first on Help Net Security.

55% of organizations say the security risks for their business have never been higher, according to Vanta. Yet the average company only dedicates 11% of its IT budget to security — far from the ideal allocation of 17%, according to business and IT leaders. Majority of companies do not provide opt-out for AI data training The rapid adoption of AI only adds to the risks with phishing attacks (33%), AI-based malware (32%), and compliance violations … More →

The post Trust and risk in the AI era appeared first on Help Net Security.