Help Net Security Newsletter - March 6, 2023

Latest information security news and research from Help Net Security

Help Net Security weekly newsletter View in your browser. Latest news: Week in review: LastPass breach, GCP data exfiltration, UEFI bootkit New infosec products of the week: March 3, 2023 The role of human insight in AI-based cybersecurity Vulnerabilities of years past haunt organizations, aid attackers Attackers are developing and deploying exploits faster than ever ML practitioners push for mandatory AI Bill of Rights Attackers increasingly using transfer.sh to host malicious code US government puts cybersecurity at forefront with newly announced National Strategy BlackLotus UEFI bootkit disables Windows security mechanisms Moving target defense must keep cyber attackers guessing Don't be fooled by a pretty icon, malicious apps hide in plain sight Cyber resilience in focus: EU act to set strict standards Google Cloud Platform allows data exfiltration without a (forensic) trace DNS abuse: Advice for incident responders Developers can make a great extension of your security team 5 open source Burp Suite penetration testing extensions you should check out Covert cyberattacks on the rise as attackers shift tactics for maximum impact Dormant accounts are a low-hanging fruit for attackers Infosec products of the month: February 2023 Visualize change with an out-of-the-box configuration report The power of community participation with Faye Francy, Executive Director, Auto-ISAC LastPass breach: Hacker accessed corporate vault by compromising senior developer's home PC It only takes one over-privileged identity to do major damage to a cloud Security teams have no control over risky SaaS-to-SaaS connections 10 US states that suffered the most devastating data breaches in 2022 QNAP starts bug bounty program with rewards up to $20,000 Microsoft Exchange admins advised to expand antivirus scanning Resecurity identified the investment scam network Digital Smoke FTC reveals alarming increase in scam activity, costing consumers billions Foiling intellectual property theft in a digital-first world Wiper malware goes global, destructive attacks surge Third-party risks overwhelm traditional ERM setups Videos: Uncovering the most pressing cybersecurity concerns for SMBs A modern-day look at AppSec testing tools Expert strategies for defending against multilingual email-based attacks Stay one step ahead: Cybersecurity best practices to prevent breaches Industry news: Viasat strengthens network security posture for enterprises with Trusted Cybersecurity Services Forescout XDR enables SOC teams to reduce the attack surface Fastly Managed Security Service protects enterprises from web application attacks WatchGuard ThreatSync equips organizations with XDR capabilities ManageEngine adds security and risk posture management dashboard to Log360 Ermetic's new capabilities empower users to detect misconfigurations in Kubernetes CISA launches Decider to make MITRE ATT&CK more accessible for network defenders Rezonate expands coverage to all major identity providers to prevent identity threats ThreatHunter.ai FIRST EYES allows organizations to manage cyber threats MSPAlliance Cyber Verify helps MSPs achieve compliance Wipro releases 5G Def-i to accelerate connectivity integrations Appdome ThreatScope Mobile XDR provides threat intelligence for mobile apps Pliant Observability Solution accelerates device and data onboarding Radiant Logic's redesigned platform helps organizations improve their overall security posture ReasonLabs FamilyKeeper enables parents to monitor social media conversations ThreatNG Cloud and SaaS Exposure Module empowers users with a proactive outside-in perspective AlertEnterprise reveals Guardian AI Chatbot powered by OpenAI ChatGPT Veeam Backup for Microsoft 365 v7 strengthens data protection VMware extends SD-WAN to OT with new software client offering Cyolo unveils partner program to accelerate adoption of zero-trust access LiveRamp enhances identity resolution services on Snowflake Contrast Security adds Microsoft Azure Functions support to evaluate serverless risks Copyright © 2023 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list