Help Net Security

Users of the Google Meet video communication service have been targeted by cyber crooks using the ClickFix tactic to infect them with information-stealing malware. Fake Google Meet video conference page with malicious ClickFix pop-up (Source: Sekoia) “The ClickFix tactic deceives users into downloading and running malware on their machines without involving a web browser for download or requiring manual file execution,” Sekoia researchers explained. “It makes it possible to bypass web browser security features, such … More →

The post Fake Google Meet pages deliver infostealers appeared first on Help Net Security.

Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the attackers themselves. (The answers have been lightly edited for clarity.) In your talk at Deep Conference next week, you will be talking about cyber-physical devices being compromised and used by cyber criminals and state-sponsored threat … More →

The post The role of compromised cyber-physical devices in modern cyberattacks appeared first on Help Net Security.

Cognizant announced the debut of Cognizant Neuro Cybersecurity, a new addition to Cognizant’s Neuro suite of platforms, designed to amplify cybersecurity resilience by integrating and orchestrating point cybersecurity solutions across the enterprise. Sophisticated threat actors, hybrid workforces, and the complexity of managing multiple security tools all weigh on an enterprise’s ability to manage cybersecurity risks. Traditional siloed technology and operations often lack the ability to deliver the insights that enable rapid decisions to preserve security … More →

The post Cognizant Neuro Cybersecurity enhances threat detection and response appeared first on Help Net Security.

MongoDB Queryable Encryption allows customers to securely encrypt sensitive application data and store it in an encrypted format within the MongoDB database. It also enables direct equality and range queries on the encrypted data without the need for cryptographic expertise. Adding range query support expands data retrieval options, allowing for more powerful search capabilities. You can configure Queryable Encryption using the following methods: Automatic encryption: Allows encrypted read and write operations to be performed seamlessly, … More →

The post MongoDB Queryable Encryption now supports range queries on encrypted data appeared first on Help Net Security.

GhostStrike is an open-source, advanced cybersecurity tool tailored for ethical hacking and Red Team operations. It incorporates cutting-edge techniques, including process hollowing, to stealthily evade detection on Windows systems, making it an asset for penetration testing and security assessments. “I decided to develop this tool to replicate one of the most commonly utilized process injection techniques employed in attacks, specifically process hollowing. My objective was to demonstrate how implants generated by Sliver C2 can be … More →

The post GhostStrike: Open-source tool for ethical hacking appeared first on Help Net Security.

In this Help Net Security interview, Mick Baccio, Global Security Advisor at Splunk SURGe, discusses the far-reaching implications of the NIS2 Directive beyond traditional IT security. He explains how NIS2 will fundamentally change cybersecurity governance, making it a core aspect of organizational strategy and accountability. Many experts suggest that the NIS2 Directive has far-reaching implications beyond IT security. Could you expand on the specific non-technical requirements that companies must be aware of? The NIS2 Directive … More →

The post How NIS2 will impact sectors from healthcare to energy appeared first on Help Net Security.

A recent Cohesity report found that consumers are highly concerned about the information companies collect from them – especially when it`s used for artificial intelligence – with consumers prepared to punish companies by switching providers for any loss of trust. In this Help Net Security video, James Blake, Global Head of Cyber Resiliency GTM Strategy at Cohesity, discusses the issues related to AI data collection. Key findings from the report: Overcollection concerns: The overwhelming majority … More →

The post AI data collection under fire appeared first on Help Net Security.

While businesses increasingly rely on SaaS tools, many leaders are not fully confident in their ability to safeguard their data, according to Keepit. Growing concerns over SaaS data protection According to the survey, while 28% of respondents expressed high confidence in their data protection measures, a significant 31% reported moderate to severe lapses in their data protection. This lack of confidence is alarming as the use of SaaS applications continues to grow, with critical data … More →

The post Why companies are struggling to keep up with SaaS data protection appeared first on Help Net Security.

ExtraHop unveiled new network-based file analysis capabilities in ExtraHop RevealX to detect malware, combat ransomware, and help prevent data loss. According to the 2024 Global Ransomware Trends Report, organizations experience an average of eight ransomware incidents per year. To carry out these attacks, adversaries often rely on the disparate tools and disjointed workflows deployed in the SOC, ensuring malicious files stay under the radar and go undetected. In response to the rapidly growing threat ransomware … More →

The post ExtraHop RevealX enhancements accelerate investigation workflows appeared first on Help Net Security.

Okta announced new Workforce Identity Cloud capabilities to address top security challenges such as unmanaged SaaS service accounts, governance risks, and identity verification. As part of a unified approach, these innovations help protect business before, during and after authentication, providing greater control, visibility, and streamlined user experience. Why it matters: Identity in the enterprise is under attack, with 80% of breaches involving some kind of compromised credentials and 1.9 billion session cookies stolen from employees … More →

The post Okta helps protect business before, during and after authentication appeared first on Help Net Security.

A new report from Mandiant reveals that the average time-to-exploit vulnerabilities before or after a patch is released has plunged to just five days in 2023, down from 32 days in 2021 in 2022. One reason for this is the fact that, in 2023, exploitation of zero-day vulnerabilities (unknown to vendors, with no patches available) considerably outpaced the exploitation of n-day flaws (publicly disclosed bugs, with patches available). Another is that n-day exploitation continues to … More →

The post Defenders must adapt to shrinking exploitation timelines appeared first on Help Net Security.

Akamai has unveiled the availability of its Behavioral DDoS Engine for the App & API Protector solution. This new capability leverages machine learning for automatic, proactive protection against application-layer DDoS attacks. Behavioral DDoS Engine offers advanced detection and mitigation by analyzing anomalies and correlating multidimensional traffic data, ensuring robust defense against sophisticated and evolving DDoS threats. The engine provides customized, hands-off protection tailored to specific traffic baselines and risk sensitivities, minimizing manual intervention. Powered by … More →

The post Akamai releases Behavioral DDoS Engine for App & API Protection appeared first on Help Net Security.

Lookout announced new features for its Mobile Threat Defense (MTD) solution, Lookout Mobile Endpoint Security. These advancements provide comprehensive protection against two fast-growing advanced social engineering tactics: smishing (SMS phishing) and executive impersonation fraud texts. Lookout offers a defense-in-depth approach to cybersecurity that is designed to protect against the modern tactics used to breach an organization’s cloud infrastructure. Mobile devices are now the cornerstones of enterprise productivity, collaboration, communication and cloud identity verification. But as … More →

The post Lookout offers protection against social engineering and executive impersonation attacks appeared first on Help Net Security.

Cybersecurity threats have become increasingly prevalent and sophisticated in recent years, posing significant risks to businesses of all sizes. In 2023, there were 3,122 data breaches affecting approximately 349 million victims, highlighting the urgent need for robust network security solutions in our fast-paced, distributed work environments. NordLayer offers a sophisticated, scalable solution designed for businesses that require high-level protection without sacrificing flexibility. Developed using NordVPN’s world-class standards, NordLayer builds on a foundation of expertise to … More →

The post Product showcase: Secure and scale your network with NordLayer’s advanced security solutions appeared first on Help Net Security.

Swift announced that it is rolling out new AI-enhanced fraud detection to help the global payments industry step up its defence as bad actors grow increasingly sophisticated. Available from January 2025, the service is the result of extensive collaboration with banks from around the world and a successful pilot earlier this year. The new capability builds on Swift’s existing Payment Controls Service — used by many small and medium-sized financial institutions — by drawing on … More →

The post Swift launches AI-powered fraud detection service appeared first on Help Net Security.

Android 15 brings enhanced security features to protect your sensitive health, financial, and personal data from theft and fraud. It also introduces productivity improvements for large-screen devices and updates to apps like the camera, messaging, and passkeys. Android theft protection Google has developed and rigorously tested a comprehensive set of features to protect your data at every stage—before, during, and after theft. The new Theft Detection Lock uses AI to protect your data, automatically locking … More →

The post Android 15 unveils new security features to protect sensitive data appeared first on Help Net Security.

Netskope announced new enhancements to the Netskope One platform, extending the company’s data protection solutions to include integrated data security posture management (DSPM) capabilities.  Modern data protection continues to be a top priority for organizations as they optimize hybrid work environments, adopt artificial intelligence and machine learning tools at a rapid pace, grapple with privacy regulations, and encounter an ever-growing number of security threats. The Netskope One platform has for many years seamlessly delivered advanced … More →

The post Netskope extends data security with DSPM capabilities appeared first on Help Net Security.

Akeyless announced its Unified Secrets and Machine Identity Platform, designed to address the leading cause of breaches—compromised identity credentials. Organizations are more exposed than ever as machine identities far outnumber human identities. High-profile breaches in 2024 demonstrate the risks of unsecured machine identities and compromised secrets. As machines —such as applications, containers, and services—proliferate, each carries a unique identity. These machine identities often use multiple secrets, like API keys or certificates, to authenticate securely. When left … More →

The post Akeyless unveils Unified Secrets and Machine Identity Platform appeared first on Help Net Security.

As organizations and their volume of Microsoft 365 data grow, protecting sensitive data and managing access has become even more important. The need for strong security and governance practices is only intensified as more organizations leverage powerful AI tools like Microsoft 365 Copilot. Rubrik announces Rubrik Data Security Posture Management (DSPM) for Microsoft 365 Copilot to provide greater visibility and control of sensitive data, reduce the risk of exposure, and empower organizations to securely adopt … More →

The post Rubrik DSPM for Microsoft 365 Copilot reduces the risk of sensitive data exposure appeared first on Help Net Security.

Arcserve launched Arcserve UDP 10, providing customers with an intuitive, flexible, and affordable way to address their critical data security and business continuity challenges. Arcserve UDP 10 is a unified data protection solution that offers backup, replication, high availability, and advanced ransomware detection. UDP 10 is easy to set up, as it seamlessly integrates with major cloud providers like AWS, Azure, Google Cloud, and Wasabi. With smart deduplication and powerful data compression, UDP 10 is … More →

The post Arcserve UDP 10 accelerates disaster recovery processes appeared first on Help Net Security.