Help Net Security

Cybersecurity Analyst Messer | On-site – View job details As a Cybersecurity Analyst, you will utilize existing technology platforms to monitor security threats and incidents. Investigate on suspicious activities, gather evidence and document for traceability. Identify vulnerable assets (workstation, network device, IOT) and propose remediation actions or apply fix. Perform security assessment (penetration and vulnerability testing) and ensure all deficiencies are mitigated. Cybersecurity Engineer Modern Technology Solutions | On-site – View job details As a … More →

The post Cybersecurity jobs available right now in the USA: February 20, 2025 appeared first on Help Net Security.

Runa launched Runa Assure, a security suite specifically built to fortify payout processes against threats of fraud, cyberattacks, and compliance risks. Runa Assure was purpose-built for instant payout methods, including gift cards, prepaid, and push-to-card, and now protects over two million unique recipients every month. Runa Assure’s compliance, fraud, and security defenses are integrated throughout the entire payout transaction lifecycle, with no extra cost or action required for clients or recipients. “As pay-ins and payouts … More →

The post Runa Assure provides end-to-end fraud protection appeared first on Help Net Security.

Apiiro security researchers have released open source tools that can help organizations detect malicious code as part of their software development lifecycle: PRevent (a scanner for pull requests), and a malicious code detection ruleset for Semgrep and Opengrep static code analysis tools. PRevent in action (Source: Apiiro) The tools work by detecting two anti-patterns the researchers pinpointed after analyzing thousands of malicious code instances in repositories and packages: obfuscated / unreadable source code, and dynamic … More →

The post PRevent: Open-source tool to detect malicious code in pull requests appeared first on Help Net Security.

A new, improved version of Darcula, a cat-themed phishing-as-a-service (PhaaS) platform aimed at serving Chinese-speaking criminals, will be released this month and will allow malicious users to create customized phishing kits to target a wider variety of brands than ever before, Netcraft researchers are warning. Even users who have gotten wise to the fake “missed package” or “package confirmation” notices from their national post or delivery services may not be ready the variety of phishing … More →

The post Darcula allows tech-illiterate crooks to create, deploy DIY phishing kits targeting any brand appeared first on Help Net Security.

Since early 2024, ESET researchers have been tracking DeceptiveDevelopment, a series of malicious campaigns linked to North Korea-aligned operators. Disguising themselves as software development recruiters, these threat actors lure victims with fake job offers and deliver software projects embedded with infostealing malware. “As part of a fake job interview process, the DeceptiveDevelopment operators ask their targets to take a coding test, such as adding a feature to an existing project, with the files necessary for … More →

The post Hackers pose as employers to steal crypto, login credentials appeared first on Help Net Security.

Privacera announced significant updates to its AI Governance (PAIG) platform, reinforcing its commitment to AI risk management and compliance. These additions align PAIG to the existing National Institute of Standards and Technology’s (NIST) AI Risk Management Framework, offering a comprehensive, structured approach designed to improve trustworthiness in AI technologies while promoting innovation and mitigating risks. “As enterprises increasingly integrate generative AI into their workflows and deploy more AI Agents, ensuring security and compliance is critical,” … More →

The post Privacera enables enterprises to identify, assess, and remediate AI-related risks appeared first on Help Net Security.

Norton is setting the standard for scam protection with a new range of AI-powered features fully integrated in Norton Cyber Safety products to help protect people from the most widespread cyberthreat of our time. Like the first domino tipping over and setting off a chain reaction, scams are the initial event that can trigger a series of serious attacks, including identity theft and financial fraud. The Company reports that 90% of all cyberthreats now originate … More →

The post Norton’s AI-powered features defend against scams and social engineering threats appeared first on Help Net Security.

1Password introduced 1Password Enterprise Password Manager – MSP Edition, a dedicated solution that transforms how MSPs safeguard client data and helps them confront complex threat environments. With features tailored to MSPs’ unique needs, this comprehensive solution strengthens client security posture and boosts productivity, all while enabling MSPs to scale their operations efficiently and maximize profitability. “The demand we’ve seen from MSPs since the beta program has been extraordinary,” said Jason Eberhardt, VP of Global MSP … More →

The post 1Password helps MSPs boost security and streamline their operations appeared first on Help Net Security.

Lumu announced Playback feature for Managed Service Providers (MSPs). Playback collects, analyzes and stores network metadata including network logs, and turns them into actionable threat intelligence. This enterprise-grade technology is widely adopted by the financial sector, healthcare, government, and education, and is now being made available to the MSP market and its SMB clients. Playback enables MSPs to efficiently meet compliance requirements, and strengthen threat detection while significantly reducing operational costs. Via a self-service experience, … More →

The post Lumu Playback strengthens threat detection appeared first on Help Net Security.

Menlo Security announced the acquisition of Votiro, a data and file security platform that specializes in Content Disarm & Reconstruction (CDR) and data loss prevention. Together, Menlo Security and Votiro will enable enterprises to implement data security best practices without slowing employee and business productivity. In modern enterprise, data resides in numerous locations including software as a service (SaaS) applications and multiple cloud storage solutions, while being spread across multiple Cloud Service Providers (CSPs) and … More →

The post Menlo Security acquires Votiro to boost data security for enterprises appeared first on Help Net Security.

In this Help Net Security interview, Juliette Hudson, CTO of CybaVerse, discusses why asset visibility remains a critical cybersecurity challenge. She explains how to maintain security without slowing down operations, shares ways to improve visibility in OT environments, and explains how AI can be both a solution and a challenge. Hudson also provides actionable advice for security leaders seeking to enhance their organization’s security posture. Why is asset visibility still such a critical issue? You … More →

The post Unknown and unsecured: The risks of poor asset visibility appeared first on Help Net Security.

The third quarter of 2024 saw a dramatic shift in the types of malware detected at network perimeters, according to a new WatchGuard report. The report’s key findings include a 300% increase quarter over quarter of endpoint malware detections, highlighted by growing threats that exploit legitimate websites or documents for malicious purposes as threat actors turn to more social engineering tactics to execute their attacks. While Microsoft documents like Word and Excel have long been … More →

The post 300% increase in endpoint malware detections appeared first on Help Net Security.

Enhancing your security and privacy on iOS 18 involves configuring various settings to control access to your personal data and device features. Here are 12 essential settings to consider. Enable two-factor authentication (2FA) Using 2FA authentication adds an extra layer of security to your Apple ID. When it’s on, the account password and the six-digit verification code are required to access the account. The verification code is sent to the phone number associated with the … More →

The post iOS 18 settings to lock down your privacy and security appeared first on Help Net Security.

Fortinet announced significant enhancements to FortiAnalyzer, reinforcing its role in driving faster, smarter security operations (SecOps)—all from a single, turnkey hybrid platform tailored for mid-sized enterprises and teams impacted by the cyber skills shortage. FortiAnalyzer offers a powerful, streamlined entry point to scale an organization’s security operations center (SOC), providing broad coverage for both on-premises and cloud environments from a single platform. With ready-to-deploy capabilities that deliver complete control with centralized visibility, advanced threat detection, … More →

The post Fortinet enhances FortiAnalyzer to deliver accelerated threat hunting and incident response appeared first on Help Net Security.

CardinalOps announced new enhancements to its Threat Exposure Management platform. The newly launched platform provides security teams with better visibility, smarter prioritization, and consistent workflows to address exposures and proactively reduce the risk of a breach. With this expansion, CardinalOps is building on their success with optimizing detection rules and controls for SIEM and SOC tools, and is now able to provide unified visibility across the security stack to uncover hidden exposures and gaps and automatically … More →

The post CardinalOps expands Threat Exposure Management platform appeared first on Help Net Security.

Echoworx has unveiled its “Manage Your Own Keys” (MYOK) feature, powered by AWS Key Management Service (AWS KMS), an Amazon Web Services (AWS) service. This solution gives businesses greater control over sensitive data by allowing them to generate, manage, and secure their own encryption keys. The launch addresses growing concerns over data sovereignty and unauthorized access, empowering organizations to protect their information from cyber threats, unauthorized parties, and even service providers. Built on AWS KMS, … More →

The post Echoworx launches Manage Your Own Keys feature powered by AWS appeared first on Help Net Security.

Edge Delta announced its Security Data Pipelines. This solution empowers security teams to process, analyze, and act on security data faster and more efficiently than ever before. By enabling real-time data processing and enrichment, Edge Delta’s Security Data Pipelines transform how organizations detect, respond to, and mitigate security threats across complex environments. The Security Data Pipelines provide a foundational, scalable framework for standardizing, enriching, and streaming security data from a wide array of data sources … More →

The post Edge Delta Security Data Pipelines mitigates security threats appeared first on Help Net Security.

Pangea announced AI Guard and Prompt Guard to secure AI, defending against threats like prompt injection and sensitive information disclosure. Alongside the company’s existing AI Access Control and AI Visibility products, Pangea now offers comprehensive suite of guardrails to secure AI applications. “As companies race to build and deploy AI apps via RAG and agentic frameworks, integrating LLMs with users and sensitive data introduces substantial security risks,” said Oliver Friedrichs, CEO of Pangea. “New attacks … More →

The post Pangea introduces AI guardrails to secure AI applications appeared first on Help Net Security.

Exploitation attempts targeting CVE-2025-0108, a recently disclosed authentication bypass vulnerability affecting the management web interface of Palo Alto Networks’ firewalls, are ramping up. “GreyNoise now sees 25 malicious IPs actively exploiting CVE-2025-0108, up from 2 on February 13,” the threat intelligence company shared on Tuesday. “This high-severity flaw allows unauthenticated attackers to execute specific PHP scripts, potentially leading to unauthorized access to vulnerable systems.” CVE-2025-0108 + CVE-2024-9474 and/or CVE-2025-0111 Palo Alto Networks has updated the … More →

The post Attackers are chaining flaws to breach Palo Alto Networks firewalls appeared first on Help Net Security.

Veeam Software announced it’s bringing recovery orchestrator to Microsoft Hyper-V customers as part of the Veeam Data Platform. Veeam Recovery Orchestrator simplifies and automates the disaster recovery planning, testing, and execution process. It allows organizations to create, manage, and test disaster recovery plans in a streamlined manner, ensuring quick and effective recovery of their data when an outage or disaster strikes. Building on Veeam Data Platform’s cyber resilience—malware scanning, IoC detection, and proactive threat scanning—enhanced … More →

The post Veeam brings recovery orchestrator to Microsoft Hyper-V customers appeared first on Help Net Security.