Security News
![The effect of omission bias on vulnerability management](/static/build/img/news/the-effect-of-omission-bias-on-vulnerability-management-small.jpg)
One of these is the omission bias, which has interesting ramifications in the world of cyber security, specifically vulnerability management. In this article, we discuss omission bias in vulnerability management, particularly vulnerability remediation, and how IT operators can overcome it with today's new management platforms.
![GCHQ's NCSC warns of 'realistic possibility' AI will help state-backed malware evade detection](/static/build/img/news/gchq-s-ncsc-warns-of-realistic-possibility-ai-will-help-state-backed-malware-evade-detection-small.jpg)
An article published today by the UK National Cyber Security Centre suggests there is a "Realistic possibility" that by 2025, the most sophisticated attackers' tools will improve markedly thanks to AI models informed by data describing successful cyber-hits. At the lower end, cyber criminals who employ social engineering are expected to enjoy a significant boost thanks to the wide-scale uptake of consumer-grade generative AI tools such as ChatGPT, Google Bard, and Microsoft Copilot.
![10 USA cybersecurity conferences you should visit in 2024](/static/build/img/news/10-usa-cybersecurity-conferences-you-should-visit-in-2024-small.jpg)
BSides are happening all over the USA. To find an event near you, visit their website. This event features industry professionals from automotive cybersecurity, artificial intelligence, machine learning, quantum computing, R&D, LLM, and innovation, allowing them to understand the impact of AI in cybersecurity and prepare for it.
![Patch Your GoAnywhere MFT Immediately - Critical Flaw Lets Anyone Be Admin](/static/build/img/news/patch-your-goanywhere-mft-immediately-critical-flaw-lets-anyone-be-admin-small.jpg)
A critical security flaw has been disclosed in Fortra's GoAnywhere Managed File Transfer (MFT) software that could be abused to create a new administrator user. Tracked as CVE-2024-0204, the issue...
![Prioritizing CIS Controls for effective cybersecurity across organizations](/static/build/img/news/prioritizing-cis-controls-for-effective-cybersecurity-across-organizations-small.jpg)
In this Help Net Security interview, Randy Marchany, CISO at Virginia Tech, discusses the challenges and strategies associated with implementing CIS Controls in organizations of varying sizes. The discussion also highlights the prioritization of key controls for inventory management, the use of metrics to measure implementation effectiveness and the adaptation of CIS Controls for different organizational scales.
![Why resilience leaders must prepare for polycrises](/static/build/img/news/why-resilience-leaders-must-prepare-for-polycrises-small.jpg)
In this Help Net Security video, Frank Shultz, CEO of Infinite Blue, discusses how more frequent and severe disruptions and our increasingly interconnected world collide to create a new threat for resilience leaders to manage: polycrises. These multiple concurrent or cascading incidents bring a ripple effect that could impact every industry, organization, and individual.
![Organizations invest more in data protection but recover less](/static/build/img/news/organizations-invest-more-in-data-protection-but-recover-less-small.jpg)
92% of organizations will increase 2024 data protection spend, to achieve cyber resilience amidst continued threats of ransomware and cyberattacks, according to Veeam Software. "It's the number one cause of outages today, and protecting against it is hampering digital transformation efforts. Furthermore, although companies are increasing their spend on protection, less than a third of companies believe they can recover quickly from a small attack. The findings in this year's report highlight the need for continued cyber vigilance, and the importance of every organization to ensure they have the right protection and recovery capabilities."
![Software supply chain attacks are getting easier](/static/build/img/news/software-supply-chain-attacks-are-getting-easier-small.jpg)
The last 12 months have also seen software supply chain attacks shed complexity and boost accessibility. No longer just the domain of nation-state actors, software supply chain attacks are increasingly being perpetrated by low-skill cybercriminals, evidenced by the use of open source packages to support commodity phishing campaigns that deliver turnkey, automated attacks used to facilitate the theft of victim data.
![Whitepaper: MFA misconceptions](/static/build/img/news/whitepaper-mfa-misconceptions-small.jpg)
Please turn on your JavaScript for this page to function normally. While a valuable tool in the cybersecurity toolkit, MFA is not immune to weaknesses.
![Exploit released for Fortra GoAnywhere MFT auth bypass bug](/static/build/img/news/exploit-released-for-fortra-goanywhere-mft-auth-bypass-bug-small.jpg)
Exploit code is now available for a critical authentication bypass vulnerability in Fortra's GoAnywhere MFT software that allows attackers to create new admin users on unpatched instances via the administration portal. GoAnywhere MFT is a web-based managed file transfer tool that helps organizations transfer files securely with partners and keep audit logs of who accessed all shared files.