Monthly Archives: November 2024

Starbucks, grocery stores impacted by Blue Yonder ransomware attack

Supply chain management SaaS vendor Blue Yonder announced on November 21 that it experienced a ransomware attack that impacted its managed services hosted environment. “Since learning of the incident, the Blue Yonder team has been working diligently together with external cybersecurity firms to make progress in their recovery process. We have implemented several defensive and forensic protocols,” the company said. “With respect to the Blue Yonder Azure public cloud environment, we are actively monitoring and … More → The post Starbucks, grocery stores impacted by Blue Yonder ransomware attack appeared first on Help Net Security.
http://news.poseidon-us.com/TGPXnr

Commvault Clumio Backtrack helps recover data from errors, accidents, or cyberattacks

Commvault announced Clumio Backtrack, a new capability that will enable enterprises to use automation to rapidly revert objects – or pieces of data – stored in Amazon Simple Storage Service (Amazon S3) to a specific version at a specific point and time. This makes it quick and easy for cloud operations, IT, and security teams to recover data from errors, accidents, or cyberattacks, almost as if they were able to turn back the clock to … More → The post Commvault Clumio Backtrack helps recover data from errors, accidents, or cyberattacks appeared first on Help Net Security.
http://news.poseidon-us.com/TGPXkM

Black Friday shoppers targeted with thousands of fraudulent online stores

Building fake, fraudulent online stores has never been easier: fraudsters are registering domain names for a pittance, using the SHOPYY e-commerce platform to build the websites, and leveraging large language models (LLMs) to rewrite existing product listings to perfect their search engine performance. “We first observed LLM-generated retail product descriptions in July 2024, and similar behaviors continue into the holiday shopping season,” Netcraft Software Engineering Team Lead Will Barnes has shared. From August to October … More → The post Black Friday shoppers targeted with thousands of fraudulent online stores appeared first on Help Net Security.
http://news.poseidon-us.com/TGPPsN

How CIOs are honing generative AI strategies

Two years after ChatGPT’s public debut, executives are still grappling with delivering value in a noisy landscape with eager vendors and a risky new technology.
http://news.poseidon-us.com/TGPNwm

VMware’s first contentious year under Broadcom drives customers to weigh other options

The chipmaker consolidated the ubiquitous virtualization product suite into one big private cloud platform, leaving customers with a difficult business decision.
http://news.poseidon-us.com/TGPNqq

RomCom hackers chained Firefox and Windows zero-days to deliver backdoor

Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in Windows Task Scheduler, as zero-days earlier this year. “Chaining together two zero-day vulnerabilities armed RomCom with an exploit that requires no user interaction,” ESET researchers said. The campaign leveraging the zero-click exploit CVE-2024-9680 allowed the attackers to execute code in the restricted context of the browser and CVE-2024-49039 allowed it … More → The post RomCom hackers chained Firefox and Windows zero-days to deliver backdoor appeared first on Help Net Security.
http://news.poseidon-us.com/TGPJLp

Bitwarden enhances inline autofill features to simplify account creation

Bitwarden further strengthened inline autofill capabilities within its browser extension. Users can easily generate and autofill strong, unique passwords for new accounts directly from the inline autofill menu. This update eliminates the need for manual password creation, making account management more efficient and intuitive. Integrating secure account creation directly into the autofill menu enables users to complete the process with just one click, enhancing functionality and convenience. Streamlining account creation and security The latest update … More → The post Bitwarden enhances inline autofill features to simplify account creation appeared first on Help Net Security.
http://news.poseidon-us.com/TGP9v3

CampusGuard Central empowers organizations to manage PCI DSS compliance

CampusGuard announced CampusGuard Central, its dynamic customer compliance portal. CampusGuard Central empowers organizations to manage PCI DSS compliance across their enterprise with a single, user-friendly tool. Central’s latest release includes the following enhancements: Updated user interface: Hide or expand the left navigation bar Collapsible group headers on the dashboard Expand the view to full screen Resize and/or filter data tables Full support for PCI DSS v4.0 Customers can define an unlimited number of Custom Fields … More → The post CampusGuard Central empowers organizations to manage PCI DSS compliance appeared first on Help Net Security.
http://news.poseidon-us.com/TGP9sV

How to recognize employment fraud before it becomes a security issue

The combination of remote work, the latest technologies, and never physically meeting your employees has made it very easy for job applicants to mask their true identities from their employer and commit employment fraud. Motivations for this type of fraud vary, so it’s essential to start by quickly reviewing the key forms that employment fraud can take: Nation-state or criminal organization fraud, where employees infiltrate an organization to gain access to systems, data, or payroll … More → The post How to recognize employment fraud before it becomes a security issue appeared first on Help Net Security.
http://news.poseidon-us.com/TGP7QY

Practical strategies to build an inclusive culture in cybersecurity

In this Help Net Security interview, Alona Geckler, Chief of Staff, SVP of Business Operations at Acronis, shares her insights on the diversity environment in the cybersecurity and IT industries. She discusses the progress made over the past two decades, initiatives to foster inclusivity, and the remaining challenges. Geckler addresses unconscious bias and barriers to career advancement, offering practical strategies for organizations to foster more inclusive environments. How has the industry evolved in terms of … More → The post Practical strategies to build an inclusive culture in cybersecurity appeared first on Help Net Security.
http://news.poseidon-us.com/TGP3jS