Category: HelpnetSecurity

CSA updates its vendor-neutral cloud security training with CCSK v5 release
16
Jul
2024

CSA updates its vendor-neutral cloud security training with CCSK v5 release

The Cloud Security Alliance (CSA) demonstrated its commitment to improving its vendor-neutral cloud security training with the release of the…

Void Banshee APT exploited "lingering Windows relic" in zero-day attacks
16
Jul
2024

Void Banshee APT exploited “lingering Windows relic” in zero-day attacks

The zero-day exploit used to leverage CVE-2024-38112, a recently patched Windows MSHTML vulnerability, was wielded by an APT group dubbed…

SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts
16
Jul
2024

SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts

Malicious Google ads are a well known threat, but malvertising can also be found on other popular online destinations such…

Firmware update hides Bluetooth fingerprints
16
Jul
2024

Firmware update hides Bluetooth fingerprints

A smartphone’s unique Bluetooth fingerprint could be used to track the device’s user–until now. A team of researchers has developed…

ChatGPTriage: How can CISOs see and control employees’ AI use?
16
Jul
2024

ChatGPTriage: How can CISOs see and control employees’ AI use?

It’s been less than 18 months since the public introduction of ChatGPT, which gained 100 million users in less than…

Managing exam pressure: Tips for certification preparation
16
Jul
2024

Managing exam pressure: Tips for certification preparation

In this Help Net Security interview, Seth Hodgson, SVP of Engineering at Udemy, discusses effective study techniques for cybersecurity certification…

Major data breaches that have rocked organizations in 2024
16
Jul
2024

Major data breaches that have rocked organizations in 2024

This article provides an overview of the major data breaches we covered in 2024 so far, highlighting incidents involving Trello,…

Paris 2024 Olympics to face complex cyber threats
16
Jul
2024

Paris 2024 Olympics to face complex cyber threats

While previous Olympic games have faced cybersecurity threats, the Games of the XXXIII Olympiad, also known as Paris 2024, will…

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)
15
Jul
2024

Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)

The maintainers of the Exim mail transfer agent (MTA) have fixed a critical vulnerability (CVE-2024-39929) that currently affects around 1.5…

Risk related to non-human identities: Believe the hype, reject the FUD
15
Jul
2024

Risk related to non-human identities: Believe the hype, reject the FUD

The hype surrounding unmanaged and exposed non-human identities (NHIs), or machine-to-machine credentials – such as service accounts, system accounts, certificates…

Realm: Open-source adversary emulation framework
15
Jul
2024

Realm: Open-source adversary emulation framework

Realm is an open-source adversary emulation framework emphasizing scalability, reliability, and automation. It’s designed to handle engagements of any size….

Discover the growing threats to data security
15
Jul
2024

Discover the growing threats to data security

In this Help Net Security interview, Pranava Adduri, CEO at Bedrock Security, discusses how businesses can identify and prioritize their…