Security News

The 5 Best Encryption Key Management Software for 2024
2024-05-20 12:00

Best encryption key management software compared Software Highlight security features Deployment experience Free plan or free trial Starting price Microsoft Azure Key Vault: Best overall FIPS 140-2 Level 2 hardware security module encryption Initial setup can be tricky Free trial Flat rate of $0.03 per 10,000 operations. GnuPG: Best for PGP encryption PGP encryption, auditing and compliance capabilities Easy to use, especially for command line users Free Free Seahorse: Best for a user-friendly interface Auto-saving passwords to a keyring Lacks documentation for casual users Free Free Google Cloud Key Management: Best for a cloud-based option Provides an external key manager that allows granular control over data Easy to use None $0.06 per month HashiCorp Vault: Best for secret keys Open-source and self-hosted; dynamic secrets/just-in-time secrets Can be complex; takes time to learn Free with limited features.

SHQ Response Platform and Risk Centre to Enable Management and Analysts Alike
2024-05-13 10:19

In the last decade, there has been a growing disconnect between front-line analysts and senior management in IT and Cybersecurity. Well-documented challenges facing modern analysts revolve around...

How AI affects vulnerability management in open-source software
2024-05-13 04:00

In this Help Net Security video, Itamar Sher, CEO of Seal Security, discusses how AI affects the risk and operational aspects of managing vulnerabilities in open-source software. One of the core issues around open-source vulnerability patch management has been the coupling between security patches and other code changes.

Week in review: Veeam fixes RCE flaw in backup management platform, Patch Tuesday forecast
2024-05-12 08:00

Veeam fixes RCE flaw in backup management platformVeeam has patched a high-severity vulnerability in Veeam Service Provider Console and is urging customers to implement the patch. May 2024 Patch Tuesday forecast: A reminder of recent threats and impactThe thunderstorms of April patches have passed, and it has been pretty calm leading up to May 2024 Patch Tuesday.

Veeam fixes RCE flaw in backup management platform (CVE-2024-29212)
2024-05-08 09:06

Veeam has patched a high-severity vulnerability in Veeam Service Provider Console and is urging customers to implement the patch. Veeam Service Provider Console is a cloud platform used by managed services providers and enterprises to manage and monitor data backup operations.

The complexities of third-party risk management
2024-05-08 03:30

In this Help Net Security video, Brad Hibbert, Chief Strategy Officer and Chief Operating Officer for Prevalent, discusses five interesting findings from a recent industry study on third-party risk management and what he thinks they mean for cybersecurity professionals and their companies' TPRM programs. Prevalent's 2024 Third-Party Risk Management Study found that 61% of companies experienced a third-party data breach or cybersecurity incident last year.

Navigating the Threat Landscape: Understanding Exposure Management, Pentesting, Red Teaming and RBVM
2024-04-29 10:54

It comes as no surprise that today's cyber threats are orders of magnitude more complex than those of the past. And the ever-evolving tactics that attackers use demand the adoption of better, more...

Severe Flaws Disclosed in Brocade SANnav SAN Management Software
2024-04-26 14:03

Several security vulnerabilities disclosed in Brocade SANnav storage area network (SAN) management application could be exploited to compromise susceptible appliances. The 18 flaws impact all...

Most people still rely on memory or pen and paper for password management
2024-04-26 05:00

These practices reveal a significant gap between recommended security practices and actual user behavior, highlighting how weak password habits and password reuse significantly heighten cybersecurity risks and identity theft. Despite 60% of users claiming they feel confident in identifying a phishing attack and 68% feeling prepared to identify and mitigate AI-enhanced cyberattacks, many respondents still resort to risky password management methods.

Management company settles for $18.4M after nuclear weapons plant staff fudged their timesheets
2024-04-24 15:00

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.