Security News
![Preventing insider access from leaking to malicious actors](/static/build/img/news/preventing-insider-access-from-leaking-to-malicious-actors-small.jpg)
In this Help Net Security video, John Morello, CTO of Gutsy, discusses the often-overlooked aspect of cybersecurity - the offboarding process. He outlines the real-world implications and potential impact on an organization's security posture if off-boarding isn't handled thoroughly.
![Adalanche: Open-source Active Directory ACL visualizer, explorer](/static/build/img/news/adalanche-open-source-active-directory-acl-visualizer-explorer-small.jpg)
Adalanche provides immediate insights into the permissions of users and groups within an Active Directory. "The visual attack graph representation of your Active Directory pops up in your browser, and you can explore things from there. The more data you add, the more insights you get: if you run the open-source Windows collector, you get local accounts, groups, services, file/registry permissions, etc., from both workstations and servers in the graph."
![Key elements for a successful cyber risk management strategy](/static/build/img/news/key-elements-for-a-successful-cyber-risk-management-strategy-small.jpg)
In this Help Net Security interview, Yoav Nathaniel, CEO at Silk Security, discusses the evolution of cyber risk management strategies and practices, uncovering common mistakes and highlighting key components for successful risk resolution. We hope to find the 'golden' indicator for which risk will eventually lead to a breach, but until that day, security teams need to holistically incorporate several layers of risk factors to determine business risk and drive justifiable communications.
![Government organizations’ readiness in the face of cyber threats](/static/build/img/news/government-organizations-readiness-in-the-face-of-cyber-threats-small.jpg)
Cyber threats targeting government organizations have become increasingly sophisticated, posing significant risks to national security, public infrastructure, and sensitive data. These threats are diverse in nature, originating from various actors such as nation-states, hacktivist groups, and organized cybercrime entities.
![China loathes AirDrop so much it's publicized an old flaw in Apple's P2P protocol](/static/build/img/news/china-loathes-airdrop-so-much-it-s-publicized-an-old-flaw-in-apple-s-p2p-protocol-small.jpg)
Protestors reportedly used AirDrop to share anti-government material during China's long and strict COVID-19 lockdowns. Which is why Chinese authorities last week admitted that the use of AirDrop is considered problematic after police previously found inappropriate material being shared on the Beijing subway using the protocol.
![The new Windows 11 features coming in 2024](/static/build/img/news/the-new-windows-11-features-coming-in-2024-small.jpg)
Windows 11 is gearing up to introduce an array of exciting new features in 2024 aimed at enhancing user experience across various aspects of the operating system. Notepad with AI. Microsoft is set to transform the traditional Notepad experience on Windows 11 with its innovative AI feature, aptly named "CoWriter."
![Upcoming Speaking Engagements](/static/build/img/news/alt/cyberattack-statistics-1-small.jpg)
About Bruce Schneier I am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about security issues on my blog since 2004, and in my monthly newsletter since 1998.
![GrapheneOS: Frequent Android auto-reboots block firmware exploits](/static/build/img/news/grapheneos-frequent-android-auto-reboots-block-firmware-exploits-small.jpg)
The GrapheneOS team behind the privacy and security-focused Android-based operating system with the same name is suggesting that Android should introduce an auto-reboot feature to make exploitation of firmware flaws more difficult. The project revealed that it recently reported firmware vulnerabilities in the Android operating system that impact Google Pixel and Samsung Galaxy phones, which could be exploited to steal data and spy on users when the device is not at rest.
![Save up to $315 on data privacy tools with AdGuard VPN](/static/build/img/news/save-up-to-315-on-data-privacy-tools-with-adguard-vpn-small.jpg)
AdGuard VPN offers one-year, three-year, and five-year subscriptions to cover all of your devices, anywhere in the world. AdGuard VPN is built on a custom-designed protocol, drawing from the team's experience designing ad blockers and built from the ground up to provide faster connections while maintaining safety, even on unsecured public Wi-Fi networks.
![New Findings Challenge Attribution in Denmark's Energy Sector Cyberattacks](/static/build/img/news/new-findings-challenge-attribution-in-denmark-s-energy-sector-cyberattacks-small.jpg)
The cyber attacks targeting the energy sector in Denmark last year may not have had the involvement of the Russia-linked Sandworm hacking group, new findings from Forescout show. The intrusions,...