Category: HelpnetSecurity

Cybercriminals hijack DNS to build stealth attack networks
15
Nov
2024

Cybercriminals hijack DNS to build stealth attack networks

Hijacking domains using a ‘Sitting Ducks attack’ remains an underrecognized topic in the cybersecurity community. Few threat researchers are familiar…

Cyber crooks push Android malware via letter
15
Nov
2024

Cyber crooks push Android malware via letter

Cyber crooks are trying out an interesting new approach for getting information-stealing malware installed on Android users’ smartphones: a physical…

Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)
15
Nov
2024

Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)

Attackers have been spotted exploiting two additional vulnerabilities (CVE-2024-9463, CVE-2024-9465) in Palo Alto Networks’ Expedition firewall configuration migration tool, CISA…

AI’s impact on the future of web application security
15
Nov
2024

AI’s impact on the future of web application security

In this Help Net Security interview, Tony Perez, CEO at NOC.org, discusses the role of continuous monitoring for real-time threat…

Critical vulnerabilities persist in high-risk sectors
15
Nov
2024

Critical vulnerabilities persist in high-risk sectors

Finance and insurance sectors found to have the highest number of critical vulnerabilities, according to Black Duck. Finance and insurance…

New infosec products of the week: November 15, 2024
15
Nov
2024

New infosec products of the week: November 15, 2024

Here’s a look at the most interesting products from the past week, featuring releases from Absolute Security, BlackFog, Eurotech, Nirmata,…

NIST report on hardware security risks reveals 98 failure scenarios
15
Nov
2024

NIST report on hardware security risks reveals 98 failure scenarios

NIST’s latest report, “Hardware Security Failure Scenarios: Potential Hardware Weaknesses” (NIST IR 8517), explores the hidden vulnerabilities in computer hardware,…

NIST is chipping away at NVD backlog
14
Nov
2024

NIST is chipping away at NVD backlog

The National Institute of Standards and Technology (NIST) is clearing the backlog of unprocessed CVE-numbered vulnerabilities in the National Vulnerability…

Google launches on-device AI to alert Android users of scam calls in real-time
14
Nov
2024

Google launches on-device AI to alert Android users of scam calls in real-time

Google has announced new security features for Android that provide real-time protection against scams and harmful apps. These features, powered…

FBI confirms China-linked cyber espionage involving breached telecom providers
14
Nov
2024

FBI confirms China-linked cyber espionage involving breached telecom providers

After months of news reports that Chinese threat actors have breached the networks of US telecommunications and internet service providers,…

How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)
14
Nov
2024

How a Windows zero-day was exploited in the wild for months (CVE-2024-43451)

CVE-2024-43451, a Windows zero-day vulnerability for which Microsoft released a fix on November 2024 Patch Tuesday, has been exploited since…

Zero-days dominate top frequently exploited vulnerabilities
14
Nov
2024

Zero-days dominate top frequently exploited vulnerabilities

A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most…