Category Archives: Uncategorized

Imprivata delivers passwordless access to improve security, compliance, and productivity

Imprivata has introduced comprehensive new capabilities to enable the next generation of fast, frictionless, and passwordless access for frontline staff, knowledge workers, and all other enterprise users. Imprivata Enterprise Access Management (EAM) now offers context-aware passwordless authentication, identity verification, and AI-powered risk signaling and behavioral analytics, expanding the company’s solutions for seamless access to personal and shared-use devices and applications. Together, these capabilities provide a complete and integrated platform that enables faster, more secure access … More → The post Imprivata delivers passwordless access to improve security, compliance, and productivity appeared first on Help Net Security.
http://news.poseidon-us.com/TQt43F

Portnox expands ZTNA with passwordless access for RDP, SSH, and enterprise consoles

Portnox has unveiled a major expansion of its zero trust network access (ZTNA) solution, extending credential-free access beyond web and on-premises applications to include enterprise console-based applications. Organizations can eliminate passwords and credentials from administrative access via Remote Desktop Protocol (RDP), Secure Shell (SSH), Virtual Network Computing (VNC), and Teletype Network (Telnet). This removes the attack vector responsible for 80% of data breaches while maintaining the frictionless user experience that has defined Portnox ZTNA. As … More → The post Portnox expands ZTNA with passwordless access for RDP, SSH, and enterprise consoles appeared first on Help Net Security.
http://news.poseidon-us.com/TQt438

BloodHound Scentry helps organizations reduce identity risk and close attack paths

SpecterOps has announced BloodHound Scentry, a new service designed to help customers accelerate their APM practice and reduce identity risk. BloodHound Scentry combines the power of BloodHound Enterprise with SpecterOps tradecraft experts and practitioners to provide customers with tailored guidance for attack path remediation, advanced analysis for emerging threats, and privilege zone design to protect critical assets. The 2024 Verizon Data Breach Investigations Report found that around 80% of breaches involve compromised identity credentials, highlighting … More → The post BloodHound Scentry helps organizations reduce identity risk and close attack paths appeared first on Help Net Security.
http://news.poseidon-us.com/TQt430

Trojanized 7-Zip downloads turn home computers into proxy nodes

A trojanized version of the popular 7-Zip software is quietly turning home computers into residential proxy nodes, Malwarebytes warns. Spurred by a Reddit post in which a user complained about getting infected with malware after downloading 7-Zip from 7zip[.]com instead of the legitimate 7-zip.org, Malwarebytes researchers looked into the matter and found that the malicious installer functions as 7-zip, but also silently drops additional payloads onto the system. Further analysis showed the malware’s primary role … More → The post Trojanized 7-Zip downloads turn home computers into proxy nodes appeared first on Help Net Security.
http://news.poseidon-us.com/TQt42m

Armis Centrix brings unified, AI-driven application security to the SDLC

Armis has announced Armis Centrix for Application Security, which unifies application security across an organization’s software development lifecycle. The technology helps security teams secure code as a next-generation attack vector to fortify organizations’ defenses and protect against cyber threats. “To effectively manage risk, it’s essential to get to the root cause of the problem and weed it out,” said Nadir Izrael, CTO of Armis. “Code-based vulnerabilities are being embedded into organizational infrastructure, and AI-generated code … More → The post Armis Centrix brings unified, AI-driven application security to the SDLC appeared first on Help Net Security.
http://news.poseidon-us.com/TQt42c

Backslash Security raises $19 million to address AI coding security risks

Backslash Security announced a $19 million Series A funding round led by KOMPAS VC, with participation from Maniv, Artofin Venture Capital, and existing investors StageOne Ventures and First Rays Capital. The round, which follows Backslash’s $8 million seed funding, tracks the rapid grassroots shift from AI-assisted coding to autonomous AI agents that software development teams use to generate, modify, and deploy code, reshaping the entire software developer ecosystem and introducing a new attack surface that … More → The post Backslash Security raises $19 million to address AI coding security risks appeared first on Help Net Security.
http://news.poseidon-us.com/TQt3zt

Unpatched SolarWinds WHD instances under active attack

Internet‑exposed and vulnerable SolarWinds Web Help Desk (WHD) instances are under attack by threat actors looking to gain an initial foothold into target organizations’ networks, Microsoft and Huntress researchers have warned. Once inside, the attackers are deploying legitimate remote access and digital forensics and incident response tools, using living-off-the-land techniques, setting up a reverse SSH shell, and stealing sensitive data. Attack details The initial access vector is known: SolarWinds WHD vulnerabilities. What’s unknown is which … More → The post Unpatched SolarWinds WHD instances under active attack appeared first on Help Net Security.
http://news.poseidon-us.com/TQszYj