Monthly Archives: July 2022

New infosec products of the week: July 8, 2022

Here’s a look at the most interesting products from the past week, featuring releases from Action1, Kingston Digital, LogRhythm, and Socura. Kingston IronKey Locker+ 50 protects sensitive personal or business data Kingston Digital released IronKey Locker+ 50 (LP50) USB Flash drive that provides consumer-grade security with AES hardware-encryption in XTS mode to safeguard against BadUSB with digitally-signed firmware and Brute Force password attacks. Socura launches Managed Vulnerability Scanning service to help users identify potential vulnerabilities … More → The post New infosec products of the week: July 8, 2022 appeared first on Help Net Security.
http://news.poseidon-us.com/STXfBb

Why 80% of companies are looking to switch their managed service provider

As companies’ valuations tumble, so is their wrangling of the cloud. Even the experts are having a tough time with it – so much so that an overwhelming majority of companies – 80% to be exact, are looking to switch their managed service provider – be that a top MSP or managed services offered by the big cloud providers. In this Help Net Security video, William Norton, Director, Channel & Alliances, MSP/CSP, CloudBolt, discusses how … More → The post Why 80% of companies are looking to switch their managed service provider appeared first on Help Net Security.
http://news.poseidon-us.com/STXcfP

54% of SMBs do not implement MFA

SMB owners across the globe are still relying only on usernames and passwords to secure critical employee, customer, and partner data, according to the Global Small Business Multi-Factor Authentication (MFA) Study released by the Cyber Readiness Institute (CRI). MFA remains widely recommended Services that enforce MFA require users to present more than one piece of evidence whenever they log in to a business account (e.g., company email, payroll, human resources, etc.). MFA has been in … More → The post 54% of SMBs do not implement MFA appeared first on Help Net Security.
http://news.poseidon-us.com/STXWGN

Threat actors exchange beacons for badgers to evade endpoint security

Unidentified cyber threat actors have started using Brute Ratel C4 (BRc4), an adversary simulation tool similar to Cobalt Strike, to try to avoid detection by endpoint security solutions and gain a foothold on target networks, Palo Alto Networks researchers have found. Their line of attack is apparently successful, as one of the files delivering the Brute Ratel C4 “badger” – a payload for remote access similar to Cobalt Strike’s Beacon – has initially not been … More → The post Threat actors exchange beacons for badgers to evade endpoint security appeared first on Help Net Security.
http://news.poseidon-us.com/STW21j

Apple previews Lockdown Mode to protect users from targeted spyware

In this Help Net Security video, you’ll learn more about Lockdown Mode, a security capability from Apple that offers specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware. The post Apple previews Lockdown Mode to protect users from targeted spyware appeared first on Help Net Security.
http://news.poseidon-us.com/STV8Vy

The threat of quantum computing to sensitive data

According to the US National Counterintelligence and Security Center, the U.S. is in a global quantum computing race, and China is winning. One emerging technology that could help combat the malicious use of quantum computing is confidential computing. In this Help Net Security video, Carmi Bogot, VP Business Development at HUB Security, talks about the threat of quantum computing to sensitive data, and how confidential computing could be, at least, part of the answer. The post The threat of quantum computing to sensitive data appeared first on Help Net Security.
http://news.poseidon-us.com/STTQSp

Cyberattacks against law enforcement are on the rise

Resecurity, a Los Angeles-based cybersecurity company protecting Fortune 500 companies worldwide, has registered an increase in malicious activity targeting law enforcement agencies at the beginning of Q2 2022. Threat actors are hacking email and other accounts which belong to law enforcement officers and their internal systems. The emerging trend consists of threat actors sending fake subpoenas and EDR’s (Emergency Data Requests) to their victims from the hacked law enforcement email accounts. Using such capabilities, the … More → The post Cyberattacks against law enforcement are on the rise appeared first on Help Net Security.
http://news.poseidon-us.com/STTN5c

LogRhythm platform enhancements accelerate threat response for security teams

LogRhythm launched version 7.9 of the LogRhythm SIEM Platform and updates to LogRhythm NDR and LogRhythm UEBA. “LogRhythm arms security teams with intelligent analytics and automated responses to reduce cybersecurity exposure, eliminate blind spots and quickly shut down attacks,” said Kish Dill, chief product and customer officer at LogRhythm. “The company is changing the way we work by becoming customer-centric throughout our whole organization. We are listening to our customers and promise to deliver quarterly … More → The post LogRhythm platform enhancements accelerate threat response for security teams appeared first on Help Net Security.
http://news.poseidon-us.com/STTDcm

How Many SANs are Insane?, (Wed, Jul 6th)

x509 certificates, as they are used for TLS, can include multiple “Subject Alternative Names” (SANs) to be used with various websites. Experimenting with numerous ways to detect TLS anomalies, I looked at my Zeek x509 logs to summarize how many names are present in certificates.
http://news.poseidon-us.com/STRmdb

CISA and NPower offer free entry-level cybersecurity training

NPower, a US-based non-profit participating in a cybersecurity workforce development program started by the Cybersecurity and Infrastructure Agency (CISA), is looking for recruits for a free cybersecurity training program aimed at underserved populations in the US, including women, people of color, young adults, and military veterans and their spouses. The program is part of CISA’s wider effort to address the cyber workforce shortage in the short and long term. We’ve asked Nelson Abbott, Senior Director … More → The post CISA and NPower offer free entry-level cybersecurity training appeared first on Help Net Security.
http://news.poseidon-us.com/STQr6S