Category: HelpnetSecurity

10
Jan
2025

The SBI fake banking app shows that SMS authentication has had its day

As a company fortunate enough to have and maintain our own pentesting team, we often do outreach with other organizations…

10
Jan
2025

New infosec products of the week: January 10, 2025

Here’s a look at the most interesting products from the past week, featuring releases from BioConnect, BreachLock, McAfee, Netgear, and…

09
Jan
2025

Banshee Stealer variant targets Russian-speaking MacOS users

The Banshee Stealer is a stealthy threat to the rising number of macOS users around the world, including those in…

09
Jan
2025

Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282)

The zero-day attacks leveraging the Ivanti Connect Secure (ICS) vulnerability (CVE-2025-0282) made public on Wednesday were first spotted in mid-December…

09
Jan
2025

Synology ActiveProtect boosts enterprise data protection

Synology releases ActiveProtect, a new line of data protection appliances designed to provide enterprises a unified backup solution with simplicity,…

09
Jan
2025

Wireshark 4.4.3 released: Updated protocol support, bug fixes

Wireshark, the popular network protocol analyzer, has reached version 4.4.3. Wireshark offers deep inspection across hundreds of protocols, live and…

09
Jan
2025

BreachLock Unified Platform provides visibility into the organization’s attack surface

Eliminating the inefficiencies, silos, unnecessary complexity, and coverage gaps that security practitioners have faced with fragmented security tools, the newly…

09
Jan
2025

The ongoing evolution of the CIS Critical Security Controls

For decades, the CIS Critical Security Controls (CIS Controls) have simplified enterprises’ efforts to strengthen their cybersecurity posture by prescribing…

09
Jan
2025

Sara: Open-source RouterOS security inspector

Sara is an open-source tool designed to analyze RouterOS configurations and identify security vulnerabilities on MikroTik hardware. Sara’s main feature…

09
Jan
2025

GitLab CISO on proactive monitoring and metrics for DevSecOps success

In this Help Net Security interview, Josh Lemos, CISO at GitLab, talks about the shift from DevOps to DevSecOps, focusing…

09
Jan
2025

Cybersecurity in 2025: Global conflict, grown-up AI, and the wisdom of the crowd

As we look ahead to cybersecurity developments in 2025, there’s bad news and good—expect to see new challenging attacks and…

09
Jan
2025

Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282)

Ivanti has fixed two vulnerabilities affecting Ivanti Connect Secure, Policy Secure and ZTA gateways, one of which (CVE-2025-0282) has been…