Help Net Security

Vanta announced new product features and milestones, allowing customers to automate existing GRC workflows and gain continuous visibility across their security and compliance program. Vanta’s new Report Center, enhancements to VRM and milestone achievements for pre-built integrations and frameworks give GRC and security teams always-on visibility with actionable insights so they can establish and promote trust internally and externally. Vanta’s latest releases and milestones help resource-strapped teams to maintain a strong security and compliance posture. … More →

The post Vanta empowers GRC teams to make their security and compliance automated appeared first on Help Net Security.

Proofpoint introduced its Digital Communications Governance (DCG) offering, bolstering its existing offerings in pace with the evolving modern data governance and enterprise archiving market. The new offering helps organizations simplify governance of communication data and provides security insights across all major digital channels for conduct risk. It leverages artificial intelligence (AI) to surface key data insights, reducing false positives while facilitating high efficacy information discovery and supervisory review. Today’s data governance and compliance market has … More →

The post Proofpoint helps organizations simplify governance of communication data appeared first on Help Net Security.

Bitdefender unveiled Bitdefender Security for Creators, a service specifically designed for digital content producers, online creative professionals and social media influencers who are prime targets for account takeovers, fraud, and other cybercrimes. Initially the new offering protects YouTube accounts with additional platform support such as Facebook, TikTok, Instagram and others to follow. In the 2024 Consumer Cybersecurity Assessment Report, based on an independent global survey of over 7,000 consumers, nearly a quarter (24.3%) experienced a … More →

The post Bitdefender Security for Creators protects YouTube content creators and influencers from hackers appeared first on Help Net Security.

Binarly announced Binarly Transparency Platform 2.5 with several features designed to enhance software vulnerability management and improve security posture across enterprise environments. The key highlight of this release is the innovative Reachability Analysis, a feature that identifies and prioritizes vulnerabilities based on their exploitability within the system’s execution flow, allowing for more targeted and effective remediation. With the introduction of Reachability Analysis, Binarly’s Transparency Platform 2.5 provides a truly innovative method to evaluate risk by … More →

The post Binarly Transparency Platform 2.5 identifies critical vulnerabilities before they can be exploited appeared first on Help Net Security.

The automotive industry is facing many of the same cybersecurity risks and threats that successful organizations in other sectors are up against, but it’s also battling some distinct ones. In this Help Net Security interview, Josh Smith, Principal Threat Analyst at Nuspire – a managed security services provider that has deep roots in the automotive sector and protects clients like GM and Subaru – talks about the present risks and threats and opines on the … More →

The post The future of automotive cybersecurity: Treating vehicles as endpoints appeared first on Help Net Security.

Organizations’ preparedness and resilience against threats isn’t keeping pace with cybercriminals’ advancements. Some CEOs still believe that cybersecurity requires episodic intervention rather than ongoing attention. That isn’t the reality for many companies; cyber threat preparedness requires a concerted training effort, so cybersecurity teams are ready when an attack occurs. Cybersecurity practitioners often share curiosity as a key personality trait, and many enjoy hands-on learning approaches. This naturally makes gamified experiences like competitions and capture-the-flags a … More →

The post How to gamify cybersecurity preparedness appeared first on Help Net Security.

In this Help Net Security video, Jesse Sedler, VP of Product at 1touch.io, provides a compelling overview of the company’s innovative data security posture management solutions. Founded in 2017 by industry veterans, 1touch.io leverages cutting-edge AI to deliver continuous monitoring and contextual visibility of sensitive data across industries such as finance, healthcare, technology, etc. Sedler highlights how the platform addresses key challenges like risk mitigation, compliance, digital transformation, and governance automation. With its unique approach … More →

The post Enterprise DSPM for Fortune 500 – 1touch.io is your go-to solution appeared first on Help Net Security.

While 75% of service providers report high customer demand for vCISO functionality, a new Cynomi report reveals that only 21% are actively offering it—opening a window onto a growth area for service providers while emphasizing the growing centrality of vCISO services to cybersecurity operations. This increased demand for vCISO services among SMB customers can be attributed to several factors. Compliance frameworks and regulations are proliferating, cyberattacks continue to escalate in number and intensity, and the … More →

The post vCISO services thrive, but challenges persist appeared first on Help Net Security.

trackd has released a powerful rules engine that uses its patch disruption data to enable auto-patching with confidence, and based on actual data. “There’s only one reason that vulnerability management exists as a discipline in cyber security, and that’s because operators are afraid that applying patches will break things,” noted Mike Starr, CEO of trackd. “If there were no fear of disruption, everyone would auto-patch everything immediately and be done with it. trackd’s new AutoPilot … More →

The post trackd AutoPilot leverages historical patch disruption data appeared first on Help Net Security.

“North Korean malicious cyber actors conducted research on a variety of targets connected to cryptocurrency exchange-traded funds (ETFs) over the last several months,” the FBI has warned through a public service announcement. This suggests that they are likely to target companies associated with cryptocurrency ETFs or other cryptocurrency-related financial products, the Bureau added. North Korean hackers are after money State-sponsored North Korean hackers have specialized in brazen crypto-heists, aimed at bringing income into the hermit … More →

The post North Korean hackers’ social engineering tricks appeared first on Help Net Security.

Prompt Security launched a security and governance solution for Copilot for Microsoft 365, marking a significant milestone in GenAI Security for enterprise applications. As organizations rapidly adopt GenAI tools to boost productivity and innovation, the need for robust security measures has never been more critical. Prompt Security’s latest offering addresses this need by providing comprehensive protection for the full suite of AI-powered tools integrated into Microsoft’s popular productivity applications, including Microsoft’s Office applications and Windows … More →

The post Prompt Security helps organizations monitor data shared with Microsoft 365 Copilot appeared first on Help Net Security.

Researchers have unearthed a cryptographic vulnerability in popular Yubico (FIDO) hardware security keys and modules that may allow attackers to clone the devices. But the news is not as catastrophic as it may seem at first glance. “The attacker would need physical possession of the YubiKey, Security Key, or YubiHSM [hardware security module], knowledge of the accounts they want to target, and specialized equipment to perform the necessary attack. Depending on the use case, the … More →

The post Vulnerability allows Yubico security keys to be cloned appeared first on Help Net Security.

Proofpoint launched a proprietary, partner-friendly, end-to-end information protection framework, providing organizations access to expertise, industry benchmark data and proven methodology in designing, implementing and maturing data loss prevention (DLP) programs. While DLP programs and technology are undoubtedly maturing, only 38% of organizations say they have a “mature” DLP program. Today, organizations with complex needs are looking for more comprehensive solutions that go beyond traditional DLP measures. Until now, the industry has been lacking a practical … More →

The post Proofpoint launches NIST-inspired framework to tackle data loss prevention challenges appeared first on Help Net Security.

Samba is the standard suite of programs that enables seamless interoperability between Linux/Unix and Windows systems. Version 4.21 has been officially released. Hardening In previous versions of Samba, if a user or group name in either option could not be resolved to a valid SID, the user (or group) would be skipped without any notification. This could result in unexpected and insecure behavior. Starting with this version of Samba, if any user or group name … More →

The post Samba 4.21 comes with upgraded security features appeared first on Help Net Security.

The Bluetooth Special Interest Group (SIG), the organization that oversees Bluetooth technology, released Bluetooth Channel Sounding, a new secure, fine-ranging feature that promises to enhance the convenience, safety, and security of Bluetooth connected devices. By enabling true distance awareness in billions of everyday devices, Bluetooth Channel Sounding opens countless possibilities for developers and users alike. “Bluetooth technology has become an ingredient of everyday life,” said Neville Meijers, CEO, Bluetooth Special Interest Group. “When connected devices … More →

The post Bluetooth Channel Sounding enhances security of Bluetooth connected devices appeared first on Help Net Security.

With cyber threats becoming increasingly sophisticated and targeting critical infrastructure, in this Help Net Security interview, David Ferbrache, managing director of Beyond Blue, discusses the current state of cybersecurity readiness and resilience. Ferbrache talks about the complexities of managing both traditional and digital infrastructures, the critical role of regulatory bodies, the urgent need for public and private sector collaboration to counteract these threats, and much more. With the increasing sophistication of cyber threats targeting national … More →

The post Protecting national interests: Balancing cybersecurity and operational realities appeared first on Help Net Security.

OpenBAS is an open-source platform that enables organizations to plan, schedule, and execute crisis exercises, adversary simulations, and breach simulations. Compliant with ISO 22398 standards, OpenBAS is built as a modern web application featuring a user-centric interface and a RESTful API. The platform includes various modules – scenarios, team management, simulations, communication verification, and encryption – offering benefits like collaborative workflows, real-time monitoring, detailed analytics, and feedback management. “OpenBAS is unique in its capability to … More →

The post OpenBAS: Open-source breach and attack simulation platform appeared first on Help Net Security.

Cyber Systems Operations United States Air Force | USA | On-site – View job details The United States Air Force is looking for a Cyber Systems Operations Specialist to design, install, and support systems to ensure they operate properly and remain secure from outside intrusion. Cloud Security Service Manager SAP Fioneer | Germany | Remote – View job details You will be responsible for driving continuous improvement of security standards and system hardening, supporting audits … More →

The post Cybersecurity jobs available right now: September 4, 2024 appeared first on Help Net Security.

Ransomware remains a concerning cybersecurity threat, with attacks becoming more frequent, severe, and costly. Recent reports highlight alarming trends, including increased attacks on critical sectors like healthcare, education, and manufacturing. The US, leading in global ransomware incidents, faces an exceptionally high risk, especially in education and healthcare. Organizations are frequently hit multiple times, and ransom payments, while common, often fail to prevent further disruption. Most ransomware attacks occur between 1 a.m. and 5 a.m. Malwarebytes … More →

The post Ransomware attacks escalate as critical sectors struggle to keep up appeared first on Help Net Security.

Ping Identity announced the addition of key identity capabilities to its FedRAMP High & DoD IL5 offerings. With Ping Government Identity Cloud, federal agencies and government suppliers now have access to capabilities that enable them to boost compliance, security and experiences through modernizing identity, credential and access management. Following FedRAMP High certification, DOD Impact Level 5 (IL5) authorization, and joining with ForgeRock, Ping Government Identity Cloud now offers authorized identity capabilities for multi-factor authentication (MFA), … More →

The post Ping Identity strengthens security for federal agencies and government suppliers appeared first on Help Net Security.