With the rapidly evolving threat landscape and complexity of interconnected applications, identifying real, business-critical application risks is more challenging than ever. Application security teams need a better solution than their current siloed tools and ad hoc processes can provide. Application…
Tag: Help Net Security
Searchlight Cyber launches Exposure Data view in DarkIQ
Searchlight Cyber has launched a new Exposure Data view in DarkIQ, collating 450+ billion dark web data points from data breaches and malware infection to help organizations spot threats related to their business long before they trigger detection systems or…
Microsoft will offer extended security updates for Windows 10
Microsoft will not abandon Windows 10 users to an insecure fate once it reaches end of support (EOS) on October 14, 2025: both enterprises and individual consumers will be able receive Extended Security Updates (ESU), but will have to pay…
Lenovo and Microsoft join forces to simplify security deployments
Lenovo and Microsoft are working together to help organizations operate more securely across their devices, users, apps, data, networks, and cloud services through a subscription-based Cyber Resiliency as a Service (CRaaS) offering. The offering enables Lenovo to build next generation…
Cisco AI Assistant for Security helps customers automate complex tasks
Cisco unveiled the Cisco AI Assistant for Security. This marks a major step in making AI pervasive in the Security Cloud, Cisco’s unified, AI-driven, cross-domain security platform. The AI Assistant will help customers make informed decisions, augment their tool capabilities…
21 high-risk vulnerabilities in OT/IoT routers found
Forescout detailed the discovery of 21 new vulnerabilities in OT/IoT routers and open-source software elements. The “SIERRA:21 – Living on the Edge” report features research into Sierra Wireless AirLink cellular routers and some open-source components, such as TinyXML and OpenNDS.…
Three security data predictions for 2024
How do companies protect their digital environments in a world where everything is growing more complex, quickly – data, customer expectations, cyber threats and more? It’s difficult: Adversaries are adopting and using AI and even generative AI-based technologies against enterprises.…
5 open-source tools for pentesting Kubernetes you should check out
Kubernetes, often called K8s, is an open-source platform designed to automate the deployment, scaling, and operations of containerized applications. Kubernetes has become a critical part of the infrastructure for many organizations. However, with its widespread adoption, Kubernetes environments have also…
Why zero-trust segmentation is critical for cloud resilience
Nearly all organizations rely on the cloud to store sensitive data and run critical systems. But for many, cloud security hasn’t kept up. 93% agree that zero-trust segmentation is essential to their cloud security strategy. In this Help Net Security…
Businesses gain upper hand with GenAI integration
Firms that actively harness generative AI to enhance experiences, offerings, and productivity will realize outsized growth and will outpace their competition, according to Forrester. Between July and September 2023, the number of enterprises that are in the experimentation and expansion…
Kali Linux 2023.4 released: New tools, Kali for Raspberry Pi 5, and more!
OffSec (previously Offensive Security) has released Kali Linux 2023.4, the latest version of its penetration testing and digital forensics platform. New tools in Kali Linux 2023.4 The list of tools freshly added to Kali Linux includes: cabby – a TAXII…
Varonis enhances DSPM capabilities with Azure and AWS support
Varonis Systems has expanded capabilities for cloud databases and object storage in AWS and Azure. This release accelerates customers’ data security posture management (DSPM) initiatives with deeper risk visibility, advanced threat detection, and automated remediation for multi-cloud environments. Varonis’ cloud-native…
Vanta announces new offerings to meet the needs of modern GRC and security leaders
Vanta announced a number of new and upcoming product launches enabling customers to accelerate innovation and strengthen security. The new offerings include advanced Reporting to help security professionals measure the success of their security program and report the impact to…
Securiti collaborates with Databricks to enable the safe use of data and generative AI
Securiti announced its strategic partnership with Databricks. This new partnership will enhance the way enterprises manage their data and AI across all data systems, addressing the growing need for contextual data intelligence and a data command center that consolidates governance,…
CellTrust SL2 Moderator AI prevents data leakage and blocks risky mobile messages
CellTrust introduces SL2 Moderator AI for financial advisors and compliance officers to stop data leakage and block risky mobile messages before they are sent to clients. “It is no longer enough to just capture and provide data to compliance departments…
Russian hackers use old Outlook vulnerability to target Polish orgs (CVE-2023-23397)
Russian state-backed hacking group Forest Blizzard (aka Fancy Bear, aka APT28) has been using a known Microsoft Outlook vulnerability (CVE-2023-23397) to target public and private entities in Poland, Polish Cyber Command has warned. Compromising email accounts and maintaining access to…
Stytch offers toolkit for developers to build, implement, and customize passkey-based authentication
Stytch announced its Passkeys offering, giving developers the easiest way to build, customize and maintain passkey-based authentication in their applications. Stytch’s new solution offers a flexible, API-first approach to passkeys that abstracts the complexity of cross-platform implementation while maintaining guardrails…
MixMode platform enhancements boost threat detection and response
MixMode announced its quarterly product release. This release gives customers greater visibility into their digital attack surface, improved investigation capabilities, and increased customization options. Key features and enhancements include: Alert enrichment enhancements: MixMode’s alert enrichments have been significantly enhanced to…
Veeam Data Platform 23H2 update enhances resilience against ransomware
Veeam Software released new Veeam Data Platform 23H2 update, including Veeam Backup & Replicationv12.1 release as well as Veeam ONE v12.1 and Veeam Recovery Orchestrator v7. This latest release from Veeam, with a focus on radical resilience, includes hundreds of…
Global Integrity QTel protects voice, messaging, and video conversations
Global Integrity announced the newest version of the company’s secure communications solution, QTel, which offers advanced features and stronger encryption. Formerly Qphone, the new QTel provides a unique approach that ensures security and privacy of all voice, messaging, and video…