Weekly Newsletter - Critical bugs in VMware vCenter Server fixed

Apple iOS 18 is out, with improved security and privacy -

September 23, 2024 View in your browser. Help Net Security weekly newsletter Latest news: Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18 How to detect and stop bot activity Striking the balance between cybersecurity and operational efficiency Rising identity security risks: Why organizations must act now New infosec products of the week: September 20, 2024 Nextcloud Hub 9 released: New features, more security, updated performance Windows users targeted with fake human verification pages delivering malware Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488) FBI forced Flax Typhoon to abandon its botnet Differential privacy in AI: A solution creating more problems for developers? Essential metrics for effective security program assessment Data disposal and cyber hygiene: Building a culture of security within your organization Security leaders consider banning AI coding due to security risks Hackers breaching construction firms via specialized accounting software Ghost: Criminal communication platform compromised, dismantled by international law enforcement Critical VMware vCenter Server bugs fixed (CVE-2024-38812) CrowdSec: Open-source security solution offering crowdsourced protection Detecting vulnerable code in software dependencies is more complex than it seems The proliferation of non-human identities Cybersecurity jobs available right now: September 18, 2024 Organizations overwhelmed by numerous and insecure remote access tools Apple releases iOS 18, with security and privacy improvements PoC exploit for exploited Ivanti Cloud Services Appliance flaw released (CVE-2024-8190) Gateways to havoc: Overprivileged dormant service accounts The growing danger of visual hacking and how to protect against it Beyond human IAM: The rising tide of machine identities The cybersecurity workforce of the future requires diverse hiring practices Microsoft confirms second 0-day exploited by Void Banshee APT (CVE-2024-43461) EchoStrike: Generate undetectable reverse shells, perform process injection Compliance frameworks and GenAI: The Wild West of security standards Trends and dangers in open-source software dependencies eBook: Navigating compliance with a security-first approach Videos: How digital wallets work, and best practices to use them safely The ripple effects of regulatory actions on CISO reporting Industry news: Resecurity joins Cloud Security Alliance to help organizations secure cloud technologies Opnova emerges from stealth with $3.75 million in funding Zenity unveils agent-less security solution for Microsoft 365 Copilot Juniper extends AI-Native Networking Platform to maximize the full potential of Wi-Fi 7 Picus Security raises $45 million to help organizations reduce cyber risk Forescout for OT Security secures OT, IoT, and IT hybrid environments Strivacity AI Assist optimizes digital identity management Tenable Enclave Security enables discovery, assessment and analysis of IT assets Edera raises $5 million to improve Kubernetes security Komodor Klaudia identifies root cause of issues in Kubernetes Fivetran Hybrid Deployment keeps sensitive data within the customer's environment Anecdotes Trust Center simplifies compliance and security documentation sharing Rapid7 launches Vector Command for continuous red teaming and security gap identification PlainID introduces identity security for Zscaler Verimatrix XTD Network Monitoring provides real-time detection of malicious activities Intezer raises $33 million to further develop its AI-based security operations solution Hydden raises $4.4 million to improve identity security WTW Indigo Vault secures business sensitive files Veritas unveils AI-driven features to simplify cyber recovery F5 NGINX One improves app delivery and security functions RunSafe Security raises $12 million to reduce attack surface in critical infrastructure Gcore WAAP protects websites, web applications, and APIs Sourcepoint helps companies mitigate vulnerabilities across various privacy regulations Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list