Category: HelpnetSecurity

Cross-IdP impersonation bypasses SSO protections
19
Nov
2024

Cross-IdP impersonation bypasses SSO protections

Cross-IdP impersonation – a technique that enables attackers to hijack the single sign-on (SSO) process to gain unauthorized access to…

Hornetsecurity DMARC Manager protects against fraud and phishing attacks
19
Nov
2024

Hornetsecurity DMARC Manager protects against fraud and phishing attacks

Hornetsecurity launched DMARC Manager, an advanced tool addresses the complex challenges organisations face in managing DMARC, DKIM, and SPF configurations,…

Phobos ransomware administrator faces US cybercrime charges
19
Nov
2024

Phobos ransomware administrator faces US cybercrime charges

The Justice Department unsealed criminal charges against Evgenii Ptitsyn, 42, a Russian national, for allegedly administering the sale, distribution, and…

Space tech giant Maxar confirms attackers accessed employee data
19
Nov
2024

Space tech giant Maxar confirms attackers accessed employee data

Satellite and space technology leader Maxar Space Systems has suffered a data breach. “Our information security team discovered that a…

Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287)
19
Nov
2024

Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287)

Oracle has released a security patch for CVE-2024-21287, a remotely exploitable vulnerability in the Oracle Agile PLM Framework that is,…

AlmaLinux 9.5 released: Security updates, new packages, and more!
19
Nov
2024

AlmaLinux 9.5 released: Security updates, new packages, and more!

AlmaLinux is a free, open-source, enterprise-grade Linux distribution. Governed and owned by the community, it offers a production-ready platform with…

Aon Cyber Risk Analyzer helps organizations evaluate cyber risk
19
Nov
2024

Aon Cyber Risk Analyzer helps organizations evaluate cyber risk

Aon launched its Cyber Risk Analyzer, a digital application that allows risk managers to make data-driven, technology-enabled decisions to mitigate…

Google report shows CISOs must embrace change to stay secure
19
Nov
2024

Google report shows CISOs must embrace change to stay secure

Google’s latest report, conducted in partnership with Hypothesis Group, reveals a stark reality for organizations: incremental security measures are no…

Dev + Sec: A collaborative approach to cybersecurity
19
Nov
2024

Dev + Sec: A collaborative approach to cybersecurity

The age-old tension between development and security teams has long been a source of friction in organizations. Developers prioritize speed…

Why AI alone can't protect you from sophisticated email threats
19
Nov
2024

Why AI alone can’t protect you from sophisticated email threats

In this Help Net Security interview, Riaz Lakhani, CISO at Barracuda Networks, discusses the effectiveness of AI-based behavioural analysis in…

Open-source and free Android password managers that prioritize your privacy
19
Nov
2024

Open-source and free Android password managers that prioritize your privacy

We’re often told to use strong, unique passwords, especially for important accounts like email, banking, and social media. However, managing…

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)
18
Nov
2024

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

Palo Alto Networks has released fixes for two vulnerabilities (CVE-2024-0012 and CVE-2024-9474) in its next-generation firewalls that have been exploited…