Category: HelpnetSecurity

Uncertainty is the most common driver of noncompliance
22
Apr
2024

Uncertainty is the most common driver of noncompliance

Most compliance leaders tend to focus on building an ethical culture in their organizations to improve employee behavior, but it…

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack
21
Apr
2024

Week in review: Palo Alto firewalls mitigation ineffective, PuTTY client vulnerable to key recovery attack

Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Palo Alto firewalls: Public exploits,…

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware!
19
Apr
2024

Ransomware in Q1 2024: Frequency, size of payments trending downwards, SMBs beware!

More organizations hit by ransomware gangs are starting to realize that it doesn’t pay to pay up: “In Q1 2024,…

LastPass users targeted by vishing attackers
19
Apr
2024

LastPass users targeted by vishing attackers

The CryptoChameleon phishing kit is being leveraged by vishing attackers looking to trick LastPass users into sharing their master password….

New infosec products of the week: April 19, 2024
19
Apr
2024

New infosec products of the week: April 19, 2024

Here’s a look at the most interesting products from the past week, featuring releases from IDnow, Immuta, Privacera, Redgate, ShadowDragon,…

Protobom: Open-source software supply chain tool
19
Apr
2024

Protobom: Open-source software supply chain tool

Protobom is an open-source software supply chain tool that enables all organizations, including system administrators and software development communities, to…

51% of enterprises experienced a breach despite large security stacks
19
Apr
2024

51% of enterprises experienced a breach despite large security stacks

Threat actors are continuing to successfully breach across the entire attack surface and the stakes are only getting higher: 93%…

Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)
18
Apr
2024

Ivanti patches critical Avalanche flaw exploitable via a simple message (CVE-2024-29204)

The newest version of Ivanti Avalanche – the company’s enterprise mobile device management (MDM) solution – carries fixes for 27…

Immuta launches Domains policy enforcement to improve security and governance for data owners
18
Apr
2024

Immuta launches Domains policy enforcement to improve security and governance for data owners

Immuta launched Domains policy enforcement, a new capability in the Immuta Data Security Platform that provides additional controls for data…

Redgate Monitor Enterprise prevents unauthorized access to sensitive information
18
Apr
2024

Redgate Monitor Enterprise prevents unauthorized access to sensitive information

Redgate has launched an enterprise version of its popular database monitoring tool, providing a range of new features to address…

Authorities take down LabHost, phishing-as-a-service platform
18
Apr
2024

Authorities take down LabHost, phishing-as-a-service platform

Law enforcement from 19 countries severely disrupted one of the world’s largest phishing-as-a-service platform, known as LabHost. This year-long operation,…

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate
18
Apr
2024

Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate

Since June 2023, Sophos X-Ops has discovered 19 junk gun ransomware variants — cheap, independently produced, and crudely constructed —…