Weekly Newsletter - Critical Zimbra RCE vulnerability exploited

October 2024 Patch Tuesday forecast: Recall can be recalled -

October 7, 2024 View in your browser. Help Net Security weekly newsletter Latest news: Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecast 100+ domains seized to stymie Russian Star Blizzard hackers October 2024 Patch Tuesday forecast: Recall can be recalled Best practices for implementing threat exposure management, reducing cyber risk exposure MaLDAPtive: Open-source framework for LDAP SearchFilter parsing, obfuscation, and more! Cybercriminals capitalize on poorly configured cloud environments New infosec products of the week: October 4, 2024 Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824) CUPS vulnerabilities could be abused for DDoS attacks Private US companies targeted by Stonefly APT Three hard truths hindering cloud-native detection and response Spotting AI-generated scams: Red flags to watch for How to use the Apple Passwords app 15% of office workers use unsanctioned GenAI tools Whitepaper: Reach higher in your career with cloud security Critical Zimbra RCE vulnerability under mass exploitation (CVE-2024-45519) 4 new LockBit-related arrests, identities of suspected Evil Corp members, affiliates revealed Enhancing firewall management with automation tools Suricata: Open-source network analysis and threat detection Cybersecurity jobs available right now: October 2, 2024 Cybersecurity hiring slows, pros' stress levels rise Use Windows event logs for ransomware investigations, JPCERT/CC advises 3 easy microsegmentation projects Reducing credential complexity with identity federation Password management habits you should unlearn Infosec products of the month: September 2024 Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accounts Microsoft revised the controversial Copilot+ Recall feature Could APIs be the undoing of AI? SCCMSecrets: Open-source SCCM policies exploitation tool Businesses turn to private AI for enhanced security and data management The most common authentication method is also the least secure Videos: Ransomware activity shows no signs of slowing down What bots mean for businesses and consumers Open source maintainers: Key to software health and security Industry news: Malwarebytes Browser Guard updates block unwanted and unsafe content Darktrace brings real-time cloud detection and response to Microsoft Azure customers Legit Posture Score empowers security teams to measure and manage their AppSec posture AuthenticID Velocity Checks detects fraudulent activities Venafi helps organizations solve more machine identity security problems Metomic Data Classification automates complex data management workflows PlexTrac unveils new capabilities to prioritize proactive security remediation Concentric AI helps monitor and remediate risky Copilot activity Harmonic Security raises $17.5 million to improve data security for organizations Catalogic DPX 4.11 strengthens data security Balbix D3 accelerates vulnerability mitigation SAFE X equips CISOs with integrated data from all their existing cybersecurity products Enveil enables organizations to securely train machine learning models Halcyon offers ransomware protection for Linux environments Exabeam introduces AI-driven LogRhythm Intelligence Red Sift Radar diagnoses issues through AI-powered insights Veeam Recon Scanner identifies adversary tactics, techniques, and procedures RSA and Swissbit join forces to secure government agencies Dragos acquires Network Perception to boost security in OT environments ConnectSecure unveils M365 Assessment Module to help MSPs identify security weaknesses OWG Parallax Private Cloud Desktop simplifies business operations Apono raises $15.5 million to accelerate product development Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list