Category: HelpnetSecurity

Proactive cybersecurity: A strategic approach to cost efficiency and crisis management
31
Jan
2024

Proactive cybersecurity: A strategic approach to cost efficiency and crisis management

In this Help Net Security interview, Stephanie Hagopian, VP of Security at CDW, discusses offensive strategies in the face of…

Does CVSS 4.0 solve the exploitability problem?
31
Jan
2024

Does CVSS 4.0 solve the exploitability problem?

The newest version of the vulnerability scoring system CVSS 4.0 is here! After a lengthy gap between version 3 (released…

Cybercriminals replace familiar tactics to exfiltrate sensitive data
31
Jan
2024

Cybercriminals replace familiar tactics to exfiltrate sensitive data

Ransomware attacks are increasing again as cybercriminals’ motivation shifts to data exfiltration, according to Delinea. The familiar tactics of crippling…

Database management enters a new era of complexity
31
Jan
2024

Database management enters a new era of complexity

Increasing complexity, the rapid adoption of emerging technologies and a growing skills gap are the biggest concerns facing IT leaders…

Self-managed GitLab installations should be patched again (CVE-2024-0402)
30
Jan
2024

Self-managed GitLab installations should be patched again (CVE-2024-0402)

Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has…

Balancing AI benefits with security and privacy risks in healthcare
30
Jan
2024

Balancing AI benefits with security and privacy risks in healthcare

To manage an environment of increasing risks and limited resources, healthcare internal audit and compliance departments must align their risk…

Faction: Open-source pentesting report generation and collaboration framework
30
Jan
2024

Faction: Open-source pentesting report generation and collaboration framework

Faction is an open-source solution that enables pentesting report generation and assessment collaboration. Josh Summitt, the creator of Faction, has…

Great security or great UX? Both, please
30
Jan
2024

Great security or great UX? Both, please

A new user is signing up for a SaaS application. On the one hand, UX teams want that user to…

Unlocking sustainable security practices with secure coding education
30
Jan
2024

Unlocking sustainable security practices with secure coding education

Despite stringent regulations and calls for ‘security by design’, organizations are still failing to equip teams with the knowledge to…

Critical Jenkins RCE flaw exploited in the wild. Patch now! (CVE-2024-23897)
29
Jan
2024

Critical Jenkins RCE flaw exploited in the wild. Patch now! (CVE-2024-23897)

Several proof-of-concept (PoC) exploits for a recently patched critical vulnerability (CVE-2024-23897) in Jenkins has been made public and there’s evidence…

Cybercriminals embrace smarter strategies, less effort
29
Jan
2024

Cybercriminals embrace smarter strategies, less effort

2024 is shaping up to be a record-breaking year for data breaches, according to Experian. Despite 2023 being labeled as…

Prioritizing cybercrime intelligence for effective decision-making in cybersecurity
29
Jan
2024

Prioritizing cybercrime intelligence for effective decision-making in cybersecurity

In this Help Net Security interview, Alon Gal, CTO at Hudson Rock, discusses integrating cybercrime intelligence into existing security infrastructures….