Help Net Security

A week after SolarWinds released a fix for a critical code-injection-to-RCE vulnerability (CVE-2024-28986) in Web Help Desk (WHD), another patch for another critical flaw (CVE-2024-28987) in the company’s IT help desk solution has been pushed out. CVE-2024-28987 CVE-2024-28987 stems from Web Help Desk having hardcoded credentials that can be misused by remote unauthenticated users to access internal functionality and modify data. The vulnerability was reported by Horizon3.ai vulnerability researcher Zach Hanley, after after digging into … More →

The post Another critical SolarWinds Web Help Desk bug fixed (CVE-2024-28987) appeared first on Help Net Security.

Drawbridge released its next generation cyber risk assessment service. Provided as a suite of modules, the solution combines a set of analytics with Drawbridge’s client service. Clients can now benchmark and score their cyber programs to prioritize risk remediation by comparing themselves to over 1,000 other managers in real-time. “With our extensive risk data, portfolio analytics, and deep bench of cybersecurity advisors, Drawbridge offers unparalleled insights into the risk posture of alternative asset managers,” said … More →

The post Drawbridge expands cyber risk assessment service appeared first on Help Net Security.

To date, most technology solutions focused on vulnerability management have focused on the prioritization of risks. That usually took the shape of some risk-ranking structure displayed in a table with links out to the CVEs and other advisory or threat intelligence information. This is a necessary step, but it’s insufficient. While knowing which vulnerabilities are the most pressing is nice, the desired outcome is ensuring those vulnerabilities are addressed and mitigated as quickly as possible. … More →

The post Vulnerability prioritization is only the beginning appeared first on Help Net Security.

In the first six months of 2024, Hiya flagged nearly 20 billion calls as suspected spam – more than 107 million spam calls everyday. The data showed spam flag rates of more than 20% of unknown calls (calls coming from outside of someone’s address book) in 25 out of the 42 countries – with some spam flag rates above 50%. The first half of 2024 also saw an increase in AI deepfake scams, which use … More →

The post Fraud tactics and the growing prevalence of AI scams appeared first on Help Net Security.

After peaking in late 2023, the ransomware industry is beginning to stabilize in productivity, with notable developments in ransomware targets, and industry dynamics, according to WithSecure. Sectors impacted by ransomware (Source: WithSecure) While ransomware productivity has shown signs of leveling off in 2024, the frequency of attacks and ransom payments collected remained higher in the first half of 2024 than in 2022 and 2023. “There has been a marked shift towards targeting small and medium-sized … More →

The post The changing dynamics of ransomware as law enforcement strikes appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from Entrust, Fortanix, McAfee, Own, RightCrowd, and Wallarm. Own proactively detects and stores data changes in Salesforce Continuous Data Protection from Own pushes data changes to a backup as they happen, allowing businesses to capture changes in their data in near real-time. In addition to creating a more resilient and scalable approach, the higher-fidelity datasets this offering creates will enable organizations … More →

The post New infosec products of the week: August 23, 2024 appeared first on Help Net Security.

QNAP has released the QTS 5.2 NAS operating system. A standout feature of this release is the debut of Security Center, which actively monitors file activities and thwarts ransomware threats. Additionally, system security receives a boost with the inclusion of support for TCG-Ruby self-encrypting drives (SED). Extensive optimizations have been implemented to streamline operations, configuration, and management processes, significantly elevating the overall user experience. “We greatly appreciate the invaluable feedback provided by our dedicated QTS … More →

The post QNAP releases QTS 5.2 to prevent data loss from ransomware threats appeared first on Help Net Security.

Enzoic released the latest version of Enzoic for Active Directory. The solution provides a frictionless way to continuously monitor, identify and remediate unsafe credentials by screening username and password combinations in Active Directory against Enzoic’s dynamic database. This helps organizations eliminate weak, exposed, or shared passwords, reducing the risk of a successful account takeover. The Verizon DBIR identified that compromised credentials remain a leading way for cybercriminals to access an organization, and Active Directory is … More →

The post Enzoic for Active Directory enhancements help teams identify and remediate unsafe credentials appeared first on Help Net Security.

Anomali announced new capabilities for Anomali Copilot to help security, and now also IT departments, use the latest innovations in AI to successfully defend, protect, and propel their organizations forward. Anomali Copilot empowers security or IT analysts at any skill level to search through petabytes of data––which now includes custom datasets not typically captured by event logs––in seconds. The new capabilities, a result of Anomali’s latest AI model innovations, ensure security and IT professionals can … More →

The post Anomali announces expanded capabilities for Copilot appeared first on Help Net Security.

Prism Infosec launched its innovative PULSE testing service to enable organizations which may not have the bandwidth or resource to dedicate to a full-scale red team exercise to assess their defence capabilities against real-world threats. PULSE addresses the gap that currently exists between penetration testing and red teaming which can prevent organisations from gaining an accurate understanding of their security posture and provides an agile alternative that utilises an intensive testing approach. Penetration tests are … More →

The post Prism Infosec PULSE bridges the gap between penetration testing and red teaming appeared first on Help Net Security.