Security News

Celoxis: Project Management Software Is Changing Due to Complexity and New Ways of Working
2024-05-28 11:00

More remote work and a focus on resource planning are two trends driving changes in project management software in APAC and around the globe. Celoxis’ Ratnakar Gore explains how PM vendors are...

5 Patch Management Best Practices for Success in 2024
2024-05-24 10:53

What are some patch management best practices and techniques? Following patch management "Golden rules" such as patching on test machines and organizing rollout beforehand.

HHS pledges $50M for autonomous vulnerability management solution for hospitals
2024-05-23 07:14

As organizations in the healthcare sector continue to be a prime target for ransomware gangs and CISA warns about a vulnerability in a healthcare-specific platform being leveraged by attackers, the Advanced Research Projects Agency for Health has announced the Universal PatchinG and Remediation for Autonomous DEfense program aimed at developing a vulnerability management platform for healthcare IT teams. CVE-2023-43208, an easily exploitable unauthenticated remote code execution vulnerability affecting NextGen HealthCare's Mirth Connect data integration platform, has been patched by the company and publicly disclosed by Horizon3.

The Ultimate SaaS Security Posture Management Checklist, 2025 Edition
2024-05-22 10:01

Since the first edition of The Ultimate SaaS Security Posture Management (SSPM) Checklist was released three years ago, the corporate SaaS sprawl has been growing at a double-digit pace. In large...

The 5 Best Encryption Key Management Software for 2024
2024-05-20 12:00

Best encryption key management software compared Software Highlight security features Deployment experience Free plan or free trial Starting price Microsoft Azure Key Vault: Best overall FIPS 140-2 Level 2 hardware security module encryption Initial setup can be tricky Free trial Flat rate of $0.03 per 10,000 operations. GnuPG: Best for PGP encryption PGP encryption, auditing and compliance capabilities Easy to use, especially for command line users Free Free Seahorse: Best for a user-friendly interface Auto-saving passwords to a keyring Lacks documentation for casual users Free Free Google Cloud Key Management: Best for a cloud-based option Provides an external key manager that allows granular control over data Easy to use None $0.06 per month HashiCorp Vault: Best for secret keys Open-source and self-hosted; dynamic secrets/just-in-time secrets Can be complex; takes time to learn Free with limited features.

7 Best Cloud Security Posture Management (CSPM) Tools for 2024
2024-05-14 15:00

What is the best CSPM tool for your business? Use our guide to review our picks for the best cloud security posture management (CSPM) tools.

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike
2024-05-13 10:19

In the last decade, there has been a growing disconnect between front-line analysts and senior management in IT and Cybersecurity. Well-documented challenges facing modern analysts revolve around...

How AI affects vulnerability management in open-source software
2024-05-13 04:00

In this Help Net Security video, Itamar Sher, CEO of Seal Security, discusses how AI affects the risk and operational aspects of managing vulnerabilities in open-source software. One of the core issues around open-source vulnerability patch management has been the coupling between security patches and other code changes.

Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecast
2024-05-12 08:00

Veeam fixes RCE flaw in backup management platformVeeam has patched a high-severity vulnerability in Veeam Service Provider Console and is urging customers to implement the patch. May 2024 Patch Tuesday forecast: A reminder of recent threats and impactThe thunderstorms of April patches have passed, and it has been pretty calm leading up to May 2024 Patch Tuesday.

Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)
2024-05-08 09:06

Veeam has patched a high-severity vulnerability in Veeam Service Provider Console and is urging customers to implement the patch. Veeam Service Provider Console is a cloud platform used by managed services providers and enterprises to manage and monitor data backup operations.