Security News

Scammers are buying up cheap domain names to host sites that sell dodgy health products using fake articles, according to cybercrime disruption outfit Netcraft. Some of the stories suggest that judges on entrepreneurial reality shows Shark Tank and Dragons' Den have backed the products.

Not only do human resources and direct managers bear the onus of responsibility when conducting exit conversations, but security teams should also make the necessary preparations for monitoring anomalies in employee behavior and organizational risk - before, during, and after layoffs. As a managed security services provider and incident response professional, I've witnessed first-hand how a well-prepared organization handles layoffs versus an unprepared one, and the repercussions of these events on the latter's cybersecurity posture.

Even though employees go through cybersecurity awareness training, half of organizationd' leaders believe their employees still lack cybersecurity knowledge. Effective cybersecurity awareness training can help employees recognize phishing attacks and social engineering schemes, apply username and password best practices, report security incidents and, ultimately, protect sensitive data and systems and prevent their organization from falling victim to a ransomware attack.

He outlines the critical skills for CISOs in 2024, addresses the challenges they face, and underscores the importance of aligning enterprise expectations with information protection demands. ' One of the most painful realities for CISOs today is a continuing disconnect between enterprise/agency expectations for their CISO, and, what the CISO is actually tasked and funded to deliver.

In this Help Net Security video, Peter Manev, Chief Strategy Officer at Stamus Networks, discusses a pervasive problem plaguing security analysts called "Alert fatigue," - which occurs when security teams become desensitized to an overwhelming volume of alerts, causing them to miss or overlook critical events and have slower response times. The most talked about contributor to this problem is the number of alerts generated by threat detection systems.

Citrix is warning of two zero-day security vulnerabilities in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that are being actively exploited in the wild. The...

The majority of Ops professionals feel that they are prohibited from accessing the data they need to make quick business decisions, which can lead to bad practices and impact the organization's overall data-driven decision-making capabilities. "IT is challenged to keep up with increasing demand for timely data access, while also ensuring the security and governance of that data," said Amit Sharma, CData CEO. "Flexible, secure data connectivity solutions ease the burden on IT and provide employees with the data they need to make impactful decisions for their business."

Over the past few administrations, the US government has worked tirelessly to rid its national networks of Chinese-made equipment from the likes of Huawei and ZTE over fears its presence could give Beijing insights into, or access to, networks relied on by the United States and its allies. RAN deployments by US carriers most feature kit from Samsung, Nokia, and Ericsson.

Google on Tuesday released updates to fix four security issues in its Chrome browser, including an actively exploited zero-day flaw. The issue, tracked as CVE-2024-0519, concerns an out-of-bounds...

Crooks are exploiting years-old vulnerabilities to deploy Androxgh0st malware and build a cloud-credential stealing botnet, according to the FBI and the Cybersecurity and Infrastructure Security Agency. Miscreants deploying Androxgh0st like to use three old CVEs in these credential-stealing attacks: CVE-2017-9841, a command injection vulnerability in PHPUnit; CVE-2018-15133, an insecure deserialization bug in the Laravel web application framework that leads to remote code execution; and CVE-2021-41773, a path traversal vulnerability in Apache HTTP Server that also leads to remote code execution.