Security News

How to create your cybersecurity “Google Maps”: A step-by-step guide for security teams
2024-06-18 05:00

Just like Google Maps revolutionized navigation, process mapping can revolutionize how you understand and manage your security landscape. Today most teams are navigating the streets of cybersecurity with the equivalent of paper maps.

Enhancing security through collaboration with the open-source community
2024-06-18 04:30

In this Help Net Security interview, Alan DeKok, CEO at NetworkRADIUS, discusses the need for due diligence in selecting and maintaining open-source tools, and brings out the potential risks and benefits of collaborating with the open-source community to enhance software security. Un-vetted open-source tools can certainly reduce system security.

Edge services are extremely attractive targets to attackers
2024-06-18 04:00

Several recent reports indicate that mass exploitation may have overtaken botnets as the primary vector for ransomware incidents. There has been a rapid tempo of security incidents caused by the mass exploitation of vulnerable software such as MOVEit, CitrixBleed, Cisco XE, Fortiguard's FortiOS, Ivanti ConnectSecure, Palo Alto's PAN-OS, Juniper's Junos, and ConnectWise ScreenConnect.

Preparing for a post-quantum future
2024-06-18 03:30

A recent paper from Tsinghua University raised doubts about lattice-based cryptography for PQC, though an error was found. This has sparked questions about the strength of soon-to-be-standardized PQC algorithms.

42% plan to use API security for AI data protection
2024-06-18 03:00

Data maturity poses a bigger AI implementation challenge. At the data layer, data maturity is a more immediate and potentially bigger challenge impacting the widespread implementation of AI. 72% of study respondents cite data quality and an inability to scale data practices as the top hurdles to scaling AI, and 53% cite the lack of AI and data skillsets as a major impediment.

Arm security defense shattered by speculative execution 95% of the time
2024-06-18 01:11

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Shoddy infosec costs PwC spinoff and NMA $11.3M in settlement with Uncle Sam
2024-06-17 23:47

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Fake Google Chrome errors trick you into running malicious PowerShell scripts
2024-06-17 22:31

A new malware distribution campaign uses fake Google Chrome, Word, and OneDrive errors to trick users into running malicious PowerShell "Fixes" that install malware. Now the overlays display fake Google Chrome, Microsoft Word, and OneDrive errors.

Suspected bosses of $430M dark-web Empire Market charged in US
2024-06-17 20:13

Your profile can be used to present content that appears more relevant based on your possible interests, such as by adapting the order in which content is shown to you, so that it is even easier for you to find content that matches your interests. Content presented to you on this service can be based on your content personalisation profiles, which can reflect your activity on this or other services, possible interests and personal aspects.

Panera Bread likely paid a ransom in March ransomware attack
2024-06-17 19:55

No ransomware gang ever claimed the attack or leaked stolen data, indicating that a ransom was paid. Just as the data breach notifications were being emailed on Thursday, an alleged employee claimed on Reddit that Panera paid paid a ransom to have the hackers delete the stolen data and avoid a public leak.