“I didn’t really have a choice,” says Ben Bernstein, the former CEO and co-founder of Twistlock (acquired by Palo Alto Networks in 2019) and the CEO and co-founder of a new cybersecurity startup that is still in stealth. “Building a…
Category: Help Net Security
How should SMBs navigate the phishing minefield?
In this Help Net Security interview, Pete Hoff, CISO at Wursta, offers advice to SMB security leaders and professionals on how to minimize the threat phishing presents to their organization’s operations and long-term success. What makes phishing attacks particularly challenging…
Privacy concerns cast a shadow on AI’s potential for software development
Organizations are optimistic about AI, but AI adoption requires attention to privacy and security, productivity, and training, according to GitLab. “The transformational opportunity with AI goes way beyond creating code,” said David DeSanto, CPO, GitLab. “According to the GitLab Global…
Latest fraud schemes targeting the payments ecosystem
Threat actors continued to exploit technical misconfigurations through various fraud schemes, according to a new report from Visa. These include the use of malvertising and search engine optimization (SEO) techniques to cultivate compelling and effective phishing and social engineering campaigns,…
Microsoft, Adobe fix zero-days exploited by attackers (CVE-2023-26369, CVE-2023-36761, CVE-2023-36802)
September 2023 Patch Tuesday is here, with fixes for actively exploited vulnerabilities in Adobe Acrobat and Reader (CVE-2023-26369), Microsoft Word (CVE-2023-36761), and Microsoft Streaming Service Proxy (CVE-2023-36802). Microsoft vulnerabilities of note Microsoft has delivered fixes for 61 CVE-numbered flaws: 5…
Sentra enhances data classification engine with LLMs to tackle data complexity and AI security
Sentra has unveiled that large language models (LLMs) are now included in its data classification engine, enabling enterprises to accurately identify and understand sensitive unstructured data such as employee contracts, source code and user generated content. With LLMs now built…
Kingston launches IronKey D500S, a hardware-encrypted USB flash drive
Kingston Digital has launched the Kingston IronKey D500S, a hardware-encrypted USB flash drive that provides military-grade security for classified data in transit. D500S is FIPS 140-3 Level 3 (Pending) certified with new enhancements from NIST requiring secure microprocessor upgrades for…
GCX launches GNSX in partnership with Palo Alto Networks
Global Cloud Xchange (GCX) has launched GNSX, a managed solution that delivers global end-to-end, zero trust hybrid networking coupled with real-time visibility, security, and control, all backed by user experience metrics and Experience Level agreements (XLAs). A seamless integration of…
Netskope joins MXDR by Deloitte to expand strategic alliance
Netskope has unveiled that its existing strategic alliance with Deloitte has expanded with the addition of Netskope to the Managed Extended Detection and Response (MXDR) by Deloitte platform. The new Netskope module on MXDR by Deloitte will include advanced cloud…
GroupSense Tracelight Fuse empowers MSPs and MSSPs to automate remediation actions
GroupSense announced that it has made its security intelligence available to managed service providers (MSPs) and managed security service providers (MSSPs) through a new Tracelight Fuse security threat intelligence offering. GroupSense provides finished security intelligence about specific organizations that service…
CTERA Vault safeguards against risks related to data tampering
CTERA unveiled CTERA Vault, Write Once, Read Many (WORM) protection technology which provides regulatory compliant storage for the CTERA Enterprise Files Services Platform. CTERA Vault aids enterprises in guaranteeing the preservation and tamperproofing of their data, while also ensuring compliance…
Swissbit introduces iShield Archive memory card that protects sensitive information
With ‘iShield Archive’, Swissbit introduces a new microSD card designed for encryption and access protection of video and image records, expanding the Swissbit iShield product line for plug-and-play security solutions. The card is intended particularly for manufacturers and users for…
Wing and Drata join forces to ensure a way to keep SaaS compliant
Wing Security has partnered with Drata to integrate SaaS security controls, robust insights, and automation in order to streamline and expedite user access reviews and vendor risk assessments for compliance frameworks and standards such as SOC 2 and ISO 27001.…
Trua integrates with Apple Wallet to eliminate the need for physical documents
Trua is integrating its Smart Wallet with the Apple Wallet, providing users an added way to securely share their verified digital identity. This seamless integration of Trua’s Smart Wallet with Apple Wallet opens up new avenues for people to manage…
Netcraft acquires FraudWatch to deliver online brand protection at scale
Netcraft announced the acquisition of FraudWatch, an Australian online brand protection provider focused on phishing, social media, brand infringement, and fake mobile apps. Netcraft and FraudWatch together are committed to providing global organizations cybersecurity products and services. With its global…
Gigamon Precryption technology reveals concealed threat activity in the cloud
Gigamon announced a series of cybersecurity innovations to the Gigamon Deep Observability Pipeline in its latest GigaVUE 6.4 software release. Leading the way, Gigamon Precryption technology enables IT and security organizations, for the first time with an automated solution, to…
HPE Aruba Networking enhancements improve network security for SMBs
HPE announced new product innovations to enable small and medium-sized businesses (SMBs) improve customer networks with faster speeds, increased capacity, and strengthened security. HPE Aruba Networking is introducing the Aruba Instant On AP22D, a Wi-Fi 6 access point, and the…
Endace collaborates with Elastic to accelerate cyber threat response
Endace announced a technical partnership with SIEM and observability platform provider Elastic. The partnership brings together the EndaceProbe Scalable Hybrid Cloud Packet Capture, Elastic Stack and Elastic Security, and provides the packet-level network visibility and detailed network metadata that Security…
Requests via Facebook Messenger lead to hijacked business accounts
Hijackers of Facebook business accounts are relying on fake business inquiries and threats of page/account suspension to trick targets into downloading password-stealing malware. Examples of phishing messages. (Source: Guardio Labs) The campaign Hijacked Facebook business accounts a great way to…
Entrust names Jordan Avnaim as CISO
Entrust named Jordan Avnaim as its Chief Information Security Officer (CISO). With more than 20 years of experience leading information security functions and influencing change and enterprise digital transformation, Jordan will help scale and mature Entrust’s information security program for…