Help Net Security

While most organizations are still in the early horizons of their identity security journey, those who achieve maturity are seeing disproportionately higher returns for every dollar spent​, according to SailPoint. Identity security adoption still in early stages The value of identity security remains largely untapped today. Of the organizations surveyed, roughly 41% remain at the very beginning of their identity security journey with only 10% progressing to the more advanced stages; this large gap highlights … More →

The post Unlocking the value of AI-powered identity security appeared first on Help Net Security.

Bitdefender launched Scam Copilot, an advanced technology platform powered by AI and designed to detect and fight scams along with fraud attempts across devices including computers, tablets, and mobile phones. The platform has been integrated into several Bitdefender digital life protection consumer products adding another powerful layer of defense to protect against malware, credential stealing, and data theft. In a report by the Global Anti-Scam Alliance (GASA), global losses from scams amounted to over one … More →

The post Bitdefender Scam Copilot detects and combats online scams appeared first on Help Net Security.

Threat actors are leveraging the open-source EDRSilencer tool to evade endpoint detection and response systems, Trend Micro researchers have noticed. About EDRSilencer The software, which is intended for red teaming, is being abused to “silence” EDR solutions. It works by leveraging the Windows Filtering Platform (WFP), which allows the creation of custom rules to monitor, block, and modify network traffic. “The code leverages WFP [Windows Filtering Platform] by dynamically identifying running EDR processes and creating … More →

The post Attackers deploying red teaming tool for EDR evasion appeared first on Help Net Security.

Secuvy released several new features designed to enhance data security, mitigate insider threats, and streamline privacy operations. These innovations strengthen Secuvy’s capabilities in compliance, risk management, data leakage prevention, and secure collaboration, further empowering organizations to protect their critical data assets. The new features include advanced integrations and policy-based engines that provide actionable insights and automation to address today’s most pressing security and compliance challenges. 1. Observability cassification: This feature enables organizations to establish a … More →

The post Secuvy unveils features designed to improve data security appeared first on Help Net Security.

More than 50% of executives expect deepfake attacks to increase over the next 12 months, but only 7% report using new technologies to detect deepfakes. Meanwhile, researchers are repeatedly demonstrating how AI-generated ID documents, selfie photos, and videos can successfully fool antiquated Know Your Customer (KYC) verification checks. To address this gaping security hole, Nametag announced Deepfake Defense. This next-generation identity verification (IDV) engine is addressing the escalating global threats posed by modern AI-powered impersonation. … More →

The post Nametag Deepfake Defense blocks AI-powered impersonation threats appeared first on Help Net Security.

Data Zoo launched its latest service, ID Fraud & Risk Signals. This new solution is designed to enhance customer identification and Know Your Customer (KYC) processes by providing deeper insights into fraud detection and risk assessment, helping businesses stay at the forefront of identity fraud prevention. ID Fraud & Risk Signals integrates seamlessly into existing workflows, enabling businesses to quickly use mobile phone numbers, email addresses, domains and IP addresses to identify suspicious activities and … More →

The post Data Zoo ID Fraud & Risk Signals enhances fraud detection appeared first on Help Net Security.

Cato Networks expanded the Cato SASE Cloud Platform by introducing Cato Digital Experience Monitoring (DEM). This announcement is the third major expansion to the Cato SASE Cloud Platform in 2024, following the additions of extended detection and response (XDR) and endpoint protection (EPP/EDR) earlier this year. A true SASE platform must evolve beyond secure connectivity without compromising on the elegance and simplicity that defines SASE,” said Shlomo Kramer, CEO at Cato Networks. “Cato DEM embodies … More →

The post Cato DEM helps IT teams overcome network performance problems appeared first on Help Net Security.

Sectigo announced SiteLock 2.0, a major upgrade to SiteLock, its website security and protection platform. SiteLock 2.0 is designed to simplify website protection for small to medium-sized businesses (SMBs). At the core of SiteLock 2.0 is Site Health, a new, innovative feature offering users a clear, concise, and actionable assessment of a website’s overall security posture. Now, SMBs are empowered to proactively safeguard their websites and act with confidence when it comes to website security … More →

The post Sectigo SiteLock 2.0 simplifies website protection for SMBs appeared first on Help Net Security.

Last week, CISA added CVE-2024-23113 – a critical vulnerability that allows unauthenticated remote code/command execution on unpatched Fortinet FortiGate firewalls – to its Known Exploited Vulnerabilities catalog, thus confirming that it’s being leveraged by attackers in the wild. The Shadowserver Foundation shared on Sunday that there are still 87,000+ internet-facing Fortinet devices likely vulnerable to the flaw. About CVE-2024-23113 CVE-2024-23113, a format string vulnerability that affects the FortiOS FGFM (FortiGate to FortiManager) daemon and can … More →

The post 87,000+ Fortinet devices still open to attack, are yours among them? (CVE-2024-23113) appeared first on Help Net Security.

Calix announced significant updates to Calix SmartHome that will help broadband service providers (BSPs) meet every home internet need with enhanced security and comprehensive offerings. These SmartHome innovations make it easier for BSPs to support the growing demands of residential subscribers, seamlessly handling online work, play, and more—all on one network. The redesigned Calix Command IQ app lets subscribers manage advanced network settings, ensuring a smooth experience for everyone in the home. Critical security services—Protect … More →

The post Calix enhances SmartHome to improve protection for residential subscribers appeared first on Help Net Security.

Netwrix announced that Grady Summers has been appointed CEO effective immediately. Summers succeeds Steve Dickson, who has successfully led the company through record growth during his six-year tenure. Under Dickson’s leadership, Netwrix achieved significant growth and value creation. Since joining the Netwrix board in 2017 and becoming CEO in 2018, Dickson has expanded the portfolio organically and through twelve acquisitions from one to more than fifteen product families, leading to a 23x growth in annual … More →

The post Netwrix appoints Grady Summers as CEO appeared first on Help Net Security.

An employee is exiting your organization. Regardless of the terms of departure, an ex-staffer has the potential when they leave or change roles to impact a wide range of non-human identities, digital credentials, and other secrets. Those secrets include the credentials for accessing corporate networks, sending and receiving email, and sharing files. For each non-human identity in an enterprise, an average of 92 non-human identities (NHIs) are created. When employees exit, NHIs can become unmanaged, … More →

The post The NHI management challenge: When employees leave appeared first on Help Net Security.

In this Help Net Security interview, Ismael Valenzuela, Vice President of Threat Research & Intelligence at BlackBerry, discusses the impact of geopolitical tensions on the frequency and sophistication of cyberattacks. He explains how nation-states and politically motivated groups exploit unrest for strategic advantages, providing examples of recent conflicts and their cyber implications. How do geopolitical tensions directly affect the frequency and sophistication of cyberattacks? Can you give examples of how nation-states or politically motivated groups … More →

The post How nation-states exploit political instability to launch cyber operations appeared first on Help Net Security.

APIs are the backbone of digital transformation efforts, connecting applications across organizations, so their security is of the utmost importance. In this Help Net Security video, Lori MacVittie, a Distinguished Engineer at F5, discusses the current state of API security. A recent F5 State of Application Strategy report found that: Most organizations’ API estates are expected to expand by 10% over the next two to three years, making security a major priority. Less than 70% … More →

The post The dark side of API security appeared first on Help Net Security.

Cyber claims have continued their upwards trend over the past year, driven in large part by a rise in data and privacy breach incidents, according to Allianz. Cyber claims frequency exceeds €1 million The frequency of large cyber claims (>€1 million) in the first six months of 2024 was up 14% while severity increased by 17%, according to the insurer’s claims analysis, following just a 1% increase in severity during 2023. Data and privacy breach-related … More →

The post Data breaches trigger increase in cyber insurance claims appeared first on Help Net Security.

Starting with iOS 18, iPadOS 18, macOS Sequoia, and visionOS 2, the Apple Passwords app enables you to manage your passwords, passkeys, and verification codes. For websites and apps that support two-factor (2FA) or multi-factor authentication (MFA), the Passwords app can generate and store automatic verification codes. This allows you to benefit from 2FA security without relying on SMS messages or external apps. If a site supports 2FA, you can set up verification codes directly … More →

The post How to create verification codes in Apple Passwords app appeared first on Help Net Security.

Ridge Security released RidgeBot 5.0, a substantial upgrade to its automated penetration testing platform. This release introduces AI-driven Web API testing, expanded vulnerability management integrations, and an upgraded operating system. RidgeBot 5.0 is an automated penetration testing platform to support HTTP-based API testing, a critical feature in today’s security landscape. This capability allows RidgeBot to perform Web API penetration testing, detecting and validating vulnerabilities such as OWASP API security Top 10 risks, Broken Authentication, hidden … More →

The post Ridge Security delivers enhanced capabilities for web application security appeared first on Help Net Security.

OneSpan announced an innovation in phishing-resistant transaction security, VISION FX. This new solution combines OneSpan’s patented CRONTO transaction signing with FIDO2 protocols that strengthen protection against phishing and account takeover threats (ATO), setting a standard for banking security. Merging both technologies into a single authentication solution delivers secure and user-friendly option on the market for banking customers logging on to execute transactions. Changes in the banking sector associated with new digital initiatives have ushered in … More →

The post OneSpan strenghtens banking security with phishing-resistant authentication appeared first on Help Net Security.

Rancher Government Solutions launched Harvester Government, the first fully compliant, out-of-the-box Hyperconverged Infrastructure (HCI) solution tailored specifically for US Government and Military operations. Designed to meet the strict security standards required for government use cases, Harvester Government offers a pre-hardened HCI infrastructure platform that seamlessly combines compliance, security, and flexibility. Harvester Government is derived from the upstream open-source product but reimagined and enhanced to meet the unique operational and security needs of the US Government. … More →

The post Rancher Government Solutions introduces Harvester Government appeared first on Help Net Security.

Stolen credentials remain the most common cause of a data breach. Various methods exist to prevent such breaches, and the most effective ones will have the least impact on developer productivity while catching issues as early as possible in the development process, when they’re still inexpensive and easy to fix. That’s precisely the mission of GitGuardian’s new Visual Studio Code extension: bringing robust shift-left security practices directly into the developer’s workflow. The extension works by … More →

The post GitGuardian Visual Studio Code extension helps developers protect their sensitive information appeared first on Help Net Security.