A big promise with a big appeal. You hear that a lot in the world of cybersecurity, where you’re often promised a fast, simple fix that will take care of all your cybersecurity needs, solving your security challenges in one go.
It could be an AI-base…
Author: The Hacker News
North America
ProxyNotShell – the New Proxy Hell?
by The Hacker News •
Nicknamed ProxyNotShell, a new exploit used in the wild takes advantage of the recently published Microsoft Server-Side Request Forgery (SSRF) vulnerability CVE-2022-41040 and a second vulnerability, CVE-2022-41082 that allows Remote Code Execution (R…
North America
Pay What You Want for This Collection of White Hat Hacking Courses
by The Hacker News •
Whether you relish a mental challenge or fancy a six-figure paycheck, there are many good reasons to get into white hat hacking. That said, picking up the necessary knowledge to build a new career can seem like a daunting task. There is a lot to learn…
North America
Why Organisations Need Both EDR and NDR for Complete Network Protection
by The Hacker News •
Endpoint devices like desktops, laptops, and mobile phones enable users to connect to enterprise networks and use their resources for their day-to-day work. However, they also expand the attack surface and make the organisation vulnerable to malicious…
North America
Five Steps to Mitigate the Risk of Credential Exposure
by The Hacker News •
Every year, billions of credentials appear online, be it on the dark web, clear web, paste sites, or in data dumps shared by cybercriminals. These credentials are often used for account takeover attacks, exposing organizations to breaches, ransomware,…
North America
Improve your security posture with Wazuh, a free and open source XDR
by The Hacker News •
Organizations struggle to find ways to keep a good security posture. This is because it is difficult to create secure system policies and find the right tools that help achieve a good posture. In many cases, organizations work with tools that do not i…
North America
Why Continuous Security Testing is a Must for Organizations Today
by The Hacker News •
The global cybersecurity market is flourishing. Experts at Gartner predict that the end-user spending for the information security and risk management market will grow from $172.5 billion in 2022 to $267.3 billion in 2026.
One big area of spending in…
North America
5 Network Security Threats And How To Protect Yourself
by The Hacker News •
Cybersecurity today matters so much because of everyone’s dependence on technology, from collaboration, communication and collecting data to e-commerce and entertainment. Every organisation that needs to deliver services to their customers and employe…
North America
Firing Your Entire Cybersecurity Team? Are You Sure?
by The Hacker News •
What on earth were they thinking? That’s what we – and other security experts – were wondering when content giant Patreon recently dismissed its entire internal cybersecurity team in exchange for outsourced services.
Of course, we don’t know the true …
North America
IT Security Takeaways from the Wiseasy Hack
by The Hacker News •
Last month Tech Crunch reported that payment terminal manufacturer Wiseasy had been hacked. Although Wiseasy might not be well known in North America, their Android-based payment terminals are widely used in the Asia Pacific region and hackers managed…
North America
Why Zero Trust Should be the Foundation of Your Cybersecurity Ecosystem
by The Hacker News • • 0 Comments
For cybersecurity professionals, it is a huge challenge to separate the “good guys” from the “villains”. In the past, most cyberattacks could simply be traced to external cybercriminals, cyberterrorists, or rogue nation-states. But not anymore.
Threat…
North America
Product Review: Stellar Cyber Open XDR Platform
by The Hacker News •
Almost every vendor, from email gateway companies to developers of threat intelligence platforms, is positioning themselves as an XDR player. But unfortunately, the noise around XDR makes it harder for buyers to find solutions that might be right for …
North America
Microsoft Teams’ GIFShell Attack: What Is It and How You Can Protect Yourself from It
by The Hacker News •
Organizations and security teams work to protect themselves from any vulnerability, and often don’t realize that risk is also brought on by configurations in their SaaS apps that have not been hardened. The newly published GIFShell attack method, whic…
North America
How to Use a UTM Solution & Win Time, Money and Resources
by The Hacker News •
Unified threat management is thought to be a universal solution for many reasons. First of all, it is compatible with almost any hardware. As a business or an MSP, you don’t have to bother with leasing or subleasing expensive equipment. There is no ne…
North America
5 Ways to Mitigate Your New Insider Threats in the Great Resignation
by The Hacker News •
Companies are in the midst of an employee “turnover tsunami” with no signs of a slowdown. According to Fortune Magazine, 40% of the U.S. is considering quitting their jobs. This trend – coined the great resignation – creates instability in organizatio…
North America
How to Do Malware Analysis?
by The Hacker News •
According to the 2022 Malwarebytes Threat review, 40M Windows business computers’ threats were detected in 2021. And malware analysis is necessary to combat and avoid this kind of attack. In this article, we will break down the goal of malicious progr…
North America
How GRC protects the value of organizations — A simple guide to data quality and integrity
by The Hacker News •
Contemporary organizations understand the importance of data and its impact on improving interactions with customers, offering quality products or services, and building loyalty.
Data is fundamental to business success. It allows companies to make the…
North America
Why Vulnerability Scanning is Critical for SOC 2
by The Hacker News •
SOC 2 may be a voluntary standard, but for today’s security-conscious business, it’s a minimal requirement when considering a SaaS provider. Compliance can be a long and complicated process, but a scanner like Intruder makes it easy to tick the vulner…
North America
6 Top API Security Risks! Favored Targets for Attackers If Left Unmanaged
by The Hacker News •
Security threats are always a concern when it comes to APIs. API security can be compared to driving a car. You must be cautious and review everything closely before releasing it into the world. By failing to do so, you’re putting yourself and others …
North America
Shopify Fails to Prevent Known Breached Passwords
by The Hacker News •
A recent report revealed that ecommerce provider, Shopify uses particularly weak password policies on the customer-facing portion of its Website. According to the report, Shopify’s requires its customers to use a password that is at least five charact…
North America
4 Key Takeaways from “XDR is the Perfect Solution for SMEs” webinar
by The Hacker News •
Cyberattacks on large organizations dominate news headlines. So, you may be surprised to learn that small and medium enterprises (SMEs) are actually more frequent targets of cyberattacks. Many SMEs understand this risk firsthand.
In a recent survey, …
North America
Integrating Live Patching in SecDevOps Workflows
by The Hacker News •
SecDevOps is, just like DevOps, a transformational change that organizations undergo at some point during their lifetime. Just like many other big changes, SecDevOps is commonly adopted after a reality check of some kind: a big damaging cybersecurity …
North America
What Is Your Security Team Profile? Prevention, Detection, or Risk Management
by The Hacker News •
Not all security teams are born equal. Each organization has a different objective.
In cybersecurity, adopting a proactive approach is not just a buzzword. It actually is what makes the difference between staying behind attackers and getting ahead of …
North America
The Ultimate Security Blind Spot You Don’t Know You Have
by The Hacker News •
How much time do developers spend actually writing code?
According to recent studies, developers spend more time maintaining, testing and securing existing code than they do writing or improving code. Security vulnerabilities have a bad habit of poppi…
North America
Stop Worrying About Passwords Forever
by The Hacker News •
So far 2022 confirms that passwords are not dead yet. Neither will they be anytime soon. Even though Microsoft and Apple are championing passwordless authentication methods, most applications and websites will not remove this option for a very long ti…
North America
Interested in Reducing Your Risk Profile? Jamf Has a Solution for That
by The Hacker News •
The threat landscape has changed dramatically over the past decade. While cybercriminals continue to look for new ways to gain access to networks and steal sensitive information, the mobile attack surface is also expanding.
Mobile devices are not only…
North America
Hands-on Review: Stellar Cyber Security Operations Platform for MSSPs
by The Hacker News •
As threat complexity increases and the boundaries of an organization have all but disappeared, security teams are more challenged than ever to deliver consistent security outcomes. One company aiming to help security teams meet this challenge is Stell…
North America
A CISO’s Ultimate Security Validation Checklist
by The Hacker News •
If you’re heading out of the office on a well-deserved vacation, are you certain the security controls you have in place will let you rest easy while you’re away? More importantly – do you have the right action plan in place for a seamless return?
Whe…
North America
U.S. Government Spending Billions on Cybersecurity
by The Hacker News •
In recent months, the House of Representatives has been hard at work drafting various spending bills for the 2023 fiscal year. While these bills provide funding for a vast array of government programs and agencies, there was one thing that really stan…
North America
Guide: How Service Providers can Deliver vCISO Services at Scale
by The Hacker News •
From ransomware to breaches, from noncompliance penalties to reputational damage – cyberthreats pose an existential risk to any business. But for SMEs and SMBs, the danger is compounded. These companies realize they need an in-house Chief Information …
North America
The Rise of Data Exfiltration and Why It Is a Greater Risk Than Ransomware
by The Hacker News •
Ransomware is the de facto threat organizations have faced over the past few years. Threat actors were making easy money by exploiting the high valuation of cryptocurrencies and their victims’ lack of adequate preparation.
Think about bad security po…
North America
Meet Borat RAT, a New Unique Triple Threat
by The Hacker News •
Atlanta-based cyber risk intelligence company, Cyble discovered a new Remote Access Trojan (RAT) malware. What makes this particular RAT malware distinct enough to be named after the comic creation of Sacha Baron Cohen?
RAT malware typically helps cyb…
North America
Become a Cybersecurity Expert with 18 New Online Courses @ 98% OFF
by The Hacker News •
With more data stored in the cloud than ever before, now is a good time to get into cybersecurity. Many top corporations are looking for new talent, and even junior professionals can earn $80,000 or more. The only barrier to entry is education. How do…
North America
Penetration Testing or Vulnerability Scanning? What’s the Difference?
by The Hacker News •
Pentesting and vulnerability scanning are often confused for the same service. The problem is, business owners often use one when they really need the other. Let’s dive in and explain the differences.
People frequently confuse penetration testing and …
North America
Lean Security 101: 3 Tips for Building Your Framework
by The Hacker News •
Cobalt, Lazarus, MageCart, Evil, Revil — cybercrime syndicates spring up so fast it’s hard to keep track. Until…they infiltrate your system. But you know what’s even more overwhelming than rampant cybercrime?
Building your organization’s security fram…
North America
Unified Threat Management: The All-in-One Cybersecurity Solution
by The Hacker News •
UTM (Unified threat management) is thought to be an all-in-one solution for cybersecurity. In general, it is a versatile software or hardware firewall solution integrated with IPS (Intrusion Prevention System) and other security services. A universal …
North America
Unified Threat Management: The All-in-One Cybersecurity Solution
by The Hacker News •
UTM (Unified threat management) is thought to be an all-in-one solution for cybersecurity. In general, it is a versatile software or hardware firewall solution integrated with IPS (Intrusion Prevention System) and other security services. A universal …
North America
Credential Theft Is (Still) A Top Attack Method
by The Hacker News •
Credential theft is clearly still a problem. Even after years of warnings, changing password requirements, and multiple forms of authentication, password stealing remains a top attack method used by cyber criminals.
The latest report from the Ponemon …
North America
Fast and Secure VPN on a Budget? Private Internet Access VPN Has You Covered
by The Hacker News •
Back when the internet consisted of a handful of computers networked together across a few research institutions, nobody could have imagined that it would one day form the backbone of a new digital way of life. And that probably explains why none of t…
North America
What the Zola Hack Can Teach Us About Password Security
by The Hacker News •
Password security is only as strong as the password itself. Unfortunately, we are often reminded of the danger of weak, reused, and compromised passwords with major cybersecurity breaches that start with stolen credentials. For example, in May 2022, t…