In this Help Net Security video, Dr. Pedram Hayati, CEO at SecDim, and Fil Filiposki, founder of AttackForge, discuss how the two companies have formed a strategic collaboration to tackle the major challenge of resurfacing vulnerabilities. By integrating SecDim’s AppSec…
Category: Help Net Security
SailPoint introduces AI-powered application onboarding capability
SailPoint launches innovative AI-powered application onboarding capability. This new capability will be seamlessly integrated into SailPoint Identity Security Cloud and will simplify the process of integrating critical business applications. By automating the onboarding process, SailPoint will simultaneously be delivering faster…
NetSPI acquires Hubble to address asset and exposure management challenges
NetSPI announced its acquisition of Hubble, a Northern Virginia-based cyber asset attack surface management (CAASM) and cybersecurity posture management solution. The integration of Hubble’s Asset Intelligence and CAASM product, Aurora, into The NetSPI Platform will empower security teams to achieve…
PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)
An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Imperva says the attacks started on June 8, two days after the PHP development team pushed out fixes, and one…
Netskope extends security and data protection for Google Workspace users
Netskope has joined the Google Workspace Security Alliance to extend security and data protection for Workspace users. The Netskope One Platform provides a number of advanced security capabilities that protect data, defend against threats, and ensure users have fast and…
Urgently needed: AI governance in cyber warfare
Artificial intelligence is quickly becoming central to societal growth. AI has great power to improve daily life, from education to healthcare, from sustainability to defense. AI also brings to the forefront a number of risks that cut across the core…
Prosimo and Palo Alto Networks join forces to improve cloud infrastructure security
Prosimo announced an integration with Palo Alto Networks for a powerful new approach to security that protects applications and workloads in multi cloud environments. With Prosimo’s Full Stack Cloud Transit platform, customers can seamlessly integrate with Palo Alto Networks VM-Series…
How businesses can integrate token technology into existing payment systems
In this Help Net Security interview, Mark Nelsen, SVP and Global Head of Consumer Product at Visa, discusses the integration of token technology into existing payment systems. How do businesses integrate tokenization into their existing payment systems, and what challenges…
GenAI keeps cybersecurity pros on high alert
“Businesses across every industry face unprecedented challenges posed by an increasing attack surface, zero-day vulnerabilities, cloud misconfigurations, and new emerging threats driven by AI,” said Andrei Florescu, president and GM of Bitdefender Business Solutions Group. “The findings of our recent…
Maximizing productivity with Copilot for Microsoft 365: A security perspective
In this Help Net Security video, Brian Vecci, Field CTO at Varonis, talks about maximizing the potential of Microsoft Copilot for 365. He highlights its productivity benefits and addresses critical security challenges, providing actionable steps to ensure safe and effective…
AWS unveils new and improved security features
At its annual re:Inforce conference, Amazon Web Services (AWS) has announced new and enhanced security features and tools. Additional multi-factor authentication option To facilitate the concerted push to get customers to secure their accounts with multiple authentication factors, AWS has…
Splunk’s security innovations boost threat detection and response
Splunk announced new security innovations aimed at bolstering threat detection and security operations across multiple data sources. These advancements include Splunk Enterprise 8.0, which empowers security teams to proactively manage and mitigate risks effectively, and a new Federated Analytics feature,…
Prevalent adds AI-powered enhancements to reduce risk assessment time
Prevalent announced that it added several AI-powered timesaving and threat-sensing enhancements to the Prevalent Third-Party Risk Management Platform, its SaaS solution used by hundreds of organizations around the world to manage, monitor and remediate risks associated with their vendors and…
Acronis XDR enhances EDR with comprehensive cybersecurity for MSPs
Acronis has introduced Acronis Advanced Security + XDR the newest addition to the company’s security solution portfolio. Easy to deploy, manage, and maintain, Acronis XDR expands on the current endpoint detection and response (EDR) offering and delivers complete natively integrated,…
CORL Companion automates the security assessment response for healthcare vendors
CORL released CORL Companion, an AI-powered assistant for healthcare vendors to automate and enhance security assessment response. The release reflects CORL’s continued attention on the healthcare vendor as a primary stakeholder in the third-party risk landscape. CORL Companion goes beyond…
20,000 FortiGate appliances compromised by Chinese hackers
Coathanger – a piece of malware specifically built to persist on Fortinet’s FortiGate appliances – may still be lurking on too many devices deployed worldwide. How Coathanger persists on FortiGate devices In February 2024, the Dutch Military Intelligence and Security…
Microsoft launches cybersecurity program to tackle attacks, protect rural hospitals
Microsoft has unveiled a new cybersecurity program to support hospitals serving more than 60 million people living in rural America. In 2023, the healthcare sector reported more ransomware attacks than any other critical infrastructure sector and attacks involving ransomware against…
Major cybersecurity upgrades announced to safeguard American healthcare
Recent cyberattacks targeting the nation’s healthcare system have demonstrated the vulnerability of hospitals and payment systems. Providers across the health system had to scramble for funding after one attack on a key payment system. And some hospitals had to redirect…
Lacework’s visibility enhancements give businesses real time insight into resource inventory
Lacework announced a range of visibility updates to its platform headlined by Continuous Threat Exposure Management (CTEM). These advancements provide customers with continuous visibility, real-time threat detection, and streamlined vulnerability management for cloud-native applications. Continuous Threat Exposure Management (CTEM) The…
AuthenticID introduces deep fake and generative AI detection solution
AuthenticID released a new solution to detect deep fake and generative AI injection attacks. This new enhancement to their identity verification technology, developed by AuthenticID’s Product and Applied Research team, uses proprietary algorithms to prevent the majority of digital injection…