Security News

Price Drop: Learn Cybersecurity Skills From Scratch for Just $35
2024-06-03 10:10

So if you'd like to cut your business expenses, or if you're hoping to switch to a lucrative new tech career in the near future, you can now develop cybersecurity skills for just $39.99 with The Complete Cyber Security Ethical Hacking Certification Bundle. Total novices could start with the Learn Ethical Hacking: Beginner to Advanced course.

High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683)
2024-06-03 09:02

If you're self-hosting an Atlassian Confluence Server or Data Center installation, you should upgrade to the latest available version to fix a high-severity RCE flaw for which a PoC and technical details are already public. Confluence Server and Data Center are software solutions that are widely used in enterprise settings to manage knowledge bases, documentation, and standardize collaboration.

Derisking your CNI
2024-06-03 09:00

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Andariel Hackers Target South Korean Institutes with New Dora RAT Malware
2024-06-03 07:34

The North Korea-linked threat actor known as Andariel has been observed using a new Golang-based backdoor called Dora RAT in its attacks targeting educational institutes, manufacturing firms, and...

Researchers warn robot cars can be crashed with tinfoil and paint daubed on cardboard
2024-06-03 05:48

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

NethSecurity: Open-source Linux firewall
2024-06-03 04:30

NethSecurity is a free, open-source Linux firewall that simplifies network security deployment. It integrates various security features into one platform, including firewalling, intrusion detection and prevention, antivirus, multi-WAN, DNS, and content filtering.

Businesses must prioritize digital trust to avoid major problems
2024-06-03 04:00

As organizations pursue digital transformation, they urgently need to prioritize digital trust to achieve their goals and prepare for future market opportunities, legislation, and regulatory compliance, according to ISACA. The ISACA State of Digital Trust 2024 report finds that 77% of respondents agree that digital trust is crucial to digital transformation and 82% say digital trust will grow in importance over the next five years. Despite this recognition, almost 71% report that their organization provides no staff training on digital trust and only 21% of organizations plan to increase their budget for digital trust.

Beware: Fake Browser Updates Deliver BitRAT and Lumma Stealer Malware
2024-06-03 03:51

Fake web browser updates are being used to deliver remote access trojans (RATs) and information stealer malware such as BitRAT and Lumma Stealer (aka LummaC2). "Fake browser updates have been...

Organizations are moving from experimenting with AI to adopting it
2024-06-03 03:00

Despite AI's potential, only 14% of organizations are ready to implement and utilize these technologies. While AI offers significant advantages, the focus must shift to essential, foundational actions to realize its full potential, emphasizing both technical and soft skills development across all organizational levels.

#AI
Infosec products of the month: May 2024
2024-06-03 02:45

Polaris Assist combines Large Language Model technology with Synopsys' application security knowledge and intelligence - including coding patterns, vulnerability detection rules, and Black Duck's vast open source knowledge base - to provide security and development teams with easy-to-understand summaries of detected vulnerabilities, AI-generated code fix recommendations, and other insights to help them build more secure software faster. Splunk announced Splunk Asset and Risk Intelligence, a solution designed to power the SOC of the future by helping businesses streamline compliance, reduce cyber risk and eliminate the sources of shadow IT. It allows security operations teams to map relationships between assets and identities to expedite investigations, enabling rich asset and identity context for faster security incident response.