Advanced Radar Screening Key to Safer Public Spaces
The unfortunate reality is that – for the safety of the people attending – security measures are now an absolute requirement in large public spaces,…
Month: November 2024
SailPoint Revolutionizes Identity Security with Unified Data and AI-Powered Identity Graph
SailPoint Technologies, Inc., a recognized leader in enterprise identity security, has unveiled an ambitious new vision for the future of identity security. Speaking at Navigate…
CWE top 25 most dangerous software weaknesses
The CWE list of the 25 most dangerous software weaknesses demonstrates the currently most common and impactful software flaws. Identifying the root causes of these…
5 Charged In Running Phishing Scheme Stealing Cryptocurrency
The U.S. law enforcement has unsealed criminal charges against five individuals involved in a large-scale phishing scheme targeting employees at companies across the United States.…
macOS WorkflowKit Race Vulnerability Let Malicious Apps Intercept Shortcuts
A critical vulnerability in macOS WorkflowKit, the framework underpinning Apple’s Shortcuts app, has been disclosed. This vulnerability allows malicious applications to intercept and modify user-imported…
Helldown Ransomware Attacking VMware ESX And Linux Servers
Helldown, a new ransomware group, actively exploits vulnerabilities to breach networks, as since August 2024, they have compromised 28 victims, leaking their data on a…
AxoSyslog: Open-source scalable security data processor
AxoSyslog is a syslog-ng fork, created and maintained by the original creator of syslog-ng, Balazs Scheidler, and his team. “We first started by making syslog-ng…
NodeStealer Malware Targets Facebook Ad Accounts, Harvesting Credit Card Data
Threat hunters are warning about an updated version of the Python-based NodeStealer that’s now equipped to extract more information from victims’ Facebook Ads Manager accounts…
USDA Adopts Phishing-Resistant MFA To Boost Cybersecurity
Credential phishing remains a formidable threat to organizations worldwide, with malicious actors often relying on tricking individuals into voluntarily revealing sensitive login information. Recent years…
Professionalization seen in Russian Cyber Crime groups linked to Ransomware
In recent years, job postings in the software and IT sectors have become commonplace, with companies constantly searching for skilled professionals to fill various technical…
Product showcase: Augmenting penetration testing with Plainsea
Human-led penetration testing is an essential practice for any organization seeking to proactively address potential attack vectors. However, this indispensable pentesting method is often limited…
Enhancing visibility for better security in multi-cloud and hybrid environments
In this Help Net Security interview, Brooke Motta, CEO of RAD Security, talks about how cloud-specific threats have evolved and what companies should be watching…