Help Net Security

Microsoft is continuing to build on their AI cybersecurity strategy and this month announced the introduction of new agents in Microsoft Security Copilot. They are introducing agents for phishing triage, alert triage for data loss prevention and insider risk management, conditional access optimization, vulnerability remediation, and threat intelligence briefing. The goal of these agents is to continuously pull in information from these different disciplines and provide both manual and automated recommendations for action in Microsoft … More →

The post April 2025 Patch Tuesday forecast: More AI security introduced by Microsoft appeared first on Help Net Security.

In this Help Net Security interview, Curtis Simpson, CISO and Chief Advocacy Officer at Armis, discusses how CISOs can balance security and innovation while managing the risks of shadow IT. Rather than focusing on restrictive policies, fostering proactive partnerships with business leaders to identify secure alternatives for unsanctioned tools is essential. Simpson also discusses common misconceptions, security practices, and the role of AI and automation in ensuring asset visibility. How should CISOs balance security and … More →

The post Forward-thinking CISOs are shining a light on shadow IT appeared first on Help Net Security.

Technology has entered all areas of life, and our cars are no exception. They have become computers on wheels, equipped with sensors, software, and connectivity that provide safety and comfort. However, like all technological innovations, this one also brings risks, making cars vulnerable to cyberattacks. The very fact that someone can hack a vehicle and take control of it is terrifying, turning scenarios from movies into reality. Add to this the fact that software in … More →

The post Connected cars drive into a cybersecurity crisis appeared first on Help Net Security.

Cisco released its 2025 Data Privacy Benchmark Study. The report looks at global trends in data privacy and how they affect businesses. The study gathered responses from 2,600 privacy and security experts in 12 countries. It highlights the need for strong data privacy practices to fully benefit from AI. Privacy remains core to customer trust (Source: Cisco) “Privacy and proper data governance are foundational to Responsible AI,” said Dev Stahlkopf, Cisco Chief Legal Officer. “For … More →

The post Benefits from privacy investment are greater than the cost appeared first on Help Net Security.

In this Help Net Security video, Nick Barter, Chief Strategy Officer at Nothreat, discusses how AI is no longer just a tool for defenders, it’s now a powerful weapon in the hands of attackers. With the adoption of generative AI, cyber threats are becoming more scalable, evasive, and automated than ever before. This shift is challenging traditional security models, which were never built to withstand this new level of sophistication. Barter dives into how AI … More →

The post Inside the AI-driven threat landscape appeared first on Help Net Security.

Here’s a look at the most interesting products from the past week, featuring releases from 1touch.io, Bitsight, Bluefin, CyberQP, and Exabeam. Exabeam Nova accelerates threat detection and response By correlating multiple detections within a case and using a proprietary threat classification framework, Exabeam Nova distinguishes between compromised insiders, malicious insiders, and undetermined threats with precision, enabling security teams to quickly identify, investigate and respond to threats with greater efficiency and accuracy. CyberQP launches Zero Trust … More →

The post New infosec products of the week: April 4, 2025 appeared first on Help Net Security.

A suspected Chinese APT group has exploited CVE-2025-22457 – a buffer overflow bug that was previously thought not to be exploitable – to compromise appliances running Ivanti Connect Secure (ICS) 22.7R2.5 or earlier or Pulse Connect Secure 9.1x. The vulnerability was patched by Ivanti in ICS 22.7R2.6, released on February 11, 2025. But, apparently, the threat actor studied the patch and “uncovered through a complicated process, [that] it was possible to exploit 22.7R2.5 and earlier … More →

The post Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457) appeared first on Help Net Security.

Bitsight launched Bitsight Identity Intelligence, a new, standalone threat intelligence module designed to help security teams detect compromised credentials, prevent unauthorized access, and proactively mitigate risk across their extended attack surface. Approximately 77% of web application breaches involved stolen credentials1, making compromised credentials a top attack vector for cybercriminals. Compromised credentials can also enable account takeovers, ransomware deployment, and data theft. Yet, organizations struggle to prioritize and act on critical threats due to overwhelming, disconnected data … More →

The post Bitsight Identity Intelligence provides visibility into compromised accounts appeared first on Help Net Security.

CVE-2024-20439, a static credential vulnerability in the Cisco Smart Licensing Utility, is being exploited by attackers in the wild, CISA has confirmed on Monday by adding the flaw to its Known Exploited Vulnerabilities catalog. Cisco has followed up with a confirmation by updating the security advisory covering CVE-2024-20439 and CVE-2024-20440, an information disclosure flaw in the same software. “In March 2025, the Cisco Product Security Incident Response Team (PSIRT) became aware of attempted exploitation of … More →

The post Attackers are leveraging Cisco Smart Licensing Utility static admin credentials (CVE-2024-20439) appeared first on Help Net Security.

Steam was the most imitated brands by phishers in the first quarter of 2025, followed by Microsoft and Facebook/Meta, Guardio researchers have revealed. “Historically, the #1 spot has been dominated by the usual suspects – big tech companies like Meta, Microsoft, or even USPS. But this quarter, it’s Steam, and by a significant margin. Scammers have been targeting the massive gaming community by impersonating Steam to warn users about supposed account issues, like payment failures … More →

The post Phishers are increasingly impersonating electronic toll collection companies appeared first on Help Net Security.

1touch.io launched the next-generation Enterprise Data Security Posture Management (DSPM) platform, a solution designed specifically for hybrid, multi-cloud, on-premises, and mainframe environments. By integrating continuous data discovery, real-time access intelligence, AI-powered risk prioritization, and policy-driven orchestration into a unified platform, 1touch.io delivers business value to organizations by reducing security risks, optimizing compliance operations, and enabling digital transformation at scale. Traditional DSPM tools rely on periodic snapshots and limited datasets, leaving security teams overwhelmed and organizations … More →

The post 1touch.io helps organizations safeguard sensitive data appeared first on Help Net Security.

Corgea launches BLAST (Business Logic Application Testing), its AI-driven cybersecurity platform designed to address the risks associated with hidden code vulnerabilities, human error, and security flaws introduced by AI-assisted coding tools. Traditional Static Application Security Testing (SAST) scanners and manual code review often fail to detect critical vulnerabilities in code, leaving enterprises exposed to costly breaches, fraud, and compliance violations. With cybercrime costs expected to reach $10.5 trillion annually by 2025, marking a 15% year-over-year … More →

The post Corgea BLAST uncovers hidden vulnerabilities in code appeared first on Help Net Security.

Bluefin announced the addition of network tokenization capabilities to its ShieldConex Tokenization as a Service and Orchestration platforms, enabling merchants to directly provision network-issued payment tokens from card brands such as Visa, Mastercard, American Express, and Discover. Network tokenization replaces sensitive payment credentials like the Primary Account Number (PAN) with a secure, non-sensitive token issued by the card networks. Tokens are interoperable across processors, acquirers, and gateways, providing a more secure and flexible foundation for … More →

The post Bluefin simplifies network tokenization access and management for merchants appeared first on Help Net Security.

CyberQP has launched its Zero Trust Helpdesk Security Platform—combining QGuard for Privileged Access Management (PAM) and QDesk for End-User Access Management (EUAM). This unified solution helps IT teams reduce risk, improve efficiency, and eliminate standing privileges across the organization. A key innovation of the platform is End-User Elevation, which allows users to gain temporary admin access without persistent privileges. By automating approval processes and monitoring activity in real-time, CyberQP dramatically reduces attack surfaces while maintaining … More →

The post CyberQP launches Zero Trust Helpdesk Security Platform appeared first on Help Net Security.

Malware peddlers are saddling users with the TookPS downloader and the Lapmon and TeviRat backdoors via malicious sites that mimic official ones and ostensibly offer legitimate software for download, Kaspersky researchers have warned. Malicious websites (Source: Kaspersky) The list of impersonated software includes: UltraViewer (remote desktop software) AutoCAD (2D and 3D computer-aided design software app) SketchUp (3D modeling software) Ableton (music production software) Quicken (personal finance app) “To protect against these attacks, users are advised … More →

The post Beware fake AutoCAD, SketchUp sites dropping malware appeared first on Help Net Security.

You’re in the middle of a sprint, juggling deadlines, debugging code, fine-tuning pipelines, and then it happens—you stumble across the perfect cybersecurity tool. It promises to eliminate secrets in logs, reduce risks in CI/CD pipelines, and save countless hours chasing security anomalies. But there’s one final boss to clear: the C-suite. Convincing leadership, especially those more attuned to balance sheets than breach reports, can feel like selling a Wi-Fi router to someone without any internet … More →

The post 7 ways to get C-suite buy-in on that new cybersecurity tool appeared first on Help Net Security.

Cybersecurity isn’t what it used to be. Attackers are moving quicker, disruptions happen all the time, and many security plans built for more predictable times just can’t keep up. With everything from ransomware to geopolitical threats to cloud slip-ups hitting companies, there’s a shift happening: security needs to be ready for chaos, not just focused on keeping things safe. That shift changes everything: how companies plan, how they invest, and how they recover. From protection … More →

The post Building a cybersecurity strategy that survives disruption appeared first on Help Net Security.

In 56% of Sophos managed detection and response (MDR) and incident response (IR) cases, attackers gained initial access to networks by exploiting external remote services, including edge devices such as firewalls and VPNs, and by leveraging valid accounts. Compromised credentials remain the top cause of attacks The combination of external remote services and valid accounts aligns with the top root causes of attacks. For the second year in row, compromised credentials were the number one … More →

The post Cybercriminals exfiltrate data in just three days appeared first on Help Net Security.

There’s been a notable shift in the types of threats targeting software developers, with a total of 17,954 open source malware packages identified in Q1 2025, according to Sonatype. Quarterly breakdown (Source: Sonatype) The Q1 figure represents a significant decrease from the more than 34,000 malicious packages discovered last quarter, largely due to a sharp drop in security holdings packages. However, compared to the same period last year, the overall malware count more than doubled. … More →

The post Open-source malware doubles, data exfiltration attacks dominate appeared first on Help Net Security.

Zero to Engineer is a practical guide for anyone looking to launch a career in information technology without a traditional college degree. The book draws from the author’s unlikely journey – from being expelled from high school to earning six figures in the tech industry. About the author Terry Kim brings more than two decades of experience in the IT industry, with a career that includes roles at major technology companies such as Cisco Systems … More →

The post Review: Zero to Engineer appeared first on Help Net Security.