Category: HelpnetSecurity

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)
27
Nov
2023

PoC for Splunk Enterprise RCE flaw released (CVE-2023-46214)

A proof-of-concept (PoC) exploit for a high-severity flaw in Splunk Enterprise (CVE-2023-46214) that can lead to remote code execution has…

OpenSSL 3.2.0 released: New cryptographic algorithms, support for TCP fast open, and more!
27
Nov
2023

OpenSSL 3.2.0 released: New cryptographic algorithms, support for TCP fast open, and more!

OpenSSL is a full-featured toolkit for general-purpose cryptography and secure communication. The final version of OpenSSL 3.2.0 is now available….

AWS Kill Switch: Open-source incident response tool
27
Nov
2023

AWS Kill Switch: Open-source incident response tool

AWS Kill Switch is an open-source incident response tool for quickly locking down AWS accounts and IAM roles during a…

Why it’s the perfect time to reflect on your software update policy
27
Nov
2023

Why it’s the perfect time to reflect on your software update policy

The threat landscape is evolving by the minute, with both malicious actors and well-intentioned researchers constantly on the hunt for…

Vulnerability disclosure: Legal risks and ethical considerations for researchers
27
Nov
2023

Vulnerability disclosure: Legal risks and ethical considerations for researchers

In this Help Net Security interview, Eddie Zhang, Principal Consultant at Project Black, explores the complex and often controversial world…

Week in review: LockBit exploits Citrix Bleed, Apache ActiveMQ bug exploited for cryptojacking
26
Nov
2023

Week in review: LockBit exploits Citrix Bleed, Apache ActiveMQ bug exploited for cryptojacking

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: PolarDNS: Open-source DNS server tailored…

NIS2 and its global ramifications
24
Nov
2023

NIS2 and its global ramifications

The Network and Information Systems Directive (NIS2), due to come into effect in October 2024, seeks to improve cyber resilience…

Network security tops infrastructure investments
24
Nov
2023

Network security tops infrastructure investments

Network security is both the top challenge and the top investment priority for enterprise IT leaders, according to ISG. Network…

AI and contextual threat intelligence reshape defense strategies
24
Nov
2023

AI and contextual threat intelligence reshape defense strategies

AI continues to evolve to improve both cyber defense and cyber criminal activities, while regulatory pressures, continued consolidation, and geopolitical…

Cybercriminals turn to ready-made bots for quick attacks
23
Nov
2023

Cybercriminals turn to ready-made bots for quick attacks

Bots and human fraud farms were responsible for billions of attacks in the H1 of 2023 and into Q3, according…

Consumers plan to be more consistent with their security in 2024
23
Nov
2023

Consumers plan to be more consistent with their security in 2024

The vast majority of consumers are concerned that cyberattacks will increase or remain consistent over the coming year (97%) and…

Online stores may not be as secure as you think
23
Nov
2023

Online stores may not be as secure as you think

Credit card skimming is on the rise for the holiday shopping season, according to Malwarebytes. Online stores are not always…