Weekly News - Microsoft patches actively exploited zero-days

Amazon and HSBC employee data leaked -

November 18, 2024 View in your browser. Help Net Security weekly newsletter Set Goals, Win Gold Finish the year strong and commit to achieving your certification goals! Pledge to sit for your ISC2 exam by December 31, 2024, and you could win a cash prize! Enter to Win $$$ Latest news: Week in review: Microsoft patches actively exploited 0-days, Amazon and HSBC employee data leaked Cybercriminals hijack DNS to build stealth attack networks Cyber crooks push Android malware via letter Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465) AI's impact on the future of web application security Critical vulnerabilities persist in high-risk sectors New infosec products of the week: November 15, 2024 NIST report on hardware security risks reveals 98 failure scenarios NIST is chipping away at NVD backlog Google launches on-device AI to alert Android users of scam calls in real-time FBI confirms China-linked cyber espionage involving breached telecom providers How a Windows zero-day was exploited in the wild for months (CVE-2024-43451) Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage How Intel is making open source accessible to all developers Zero-days dominate top frequently exploited vulnerabilities How cybersecurity failures are draining business budgets GoIssue phishing tool targets GitHub developer credentials Infostealers increasingly impact global security Aerospace employees targeted with malicious "dream job" offers CISOs in 2025: Balancing security, compliance, and accountability Tips for a successful cybersecurity job interview Social engineering scams sweep through financial institutions Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039) Hot Topic breach: Has your credit card info been compromised? Massive troves of Amazon, HSBC employee data leaked The changing face of identity security Evaluating your organization's application risk management journey Powerpipe: Open-source dashboards for DevOps Cybersecurity jobs available right now: November 12, 2024 The Ultimate Guide to the CGRC November 2024 Patch Tuesday forecast: New servers arrive early 4 reasons why veterans thrive as cybersecurity professionals Strategies for CISOs navigating hybrid and multi-cloud security How human ingenuity continues to outpace automated security tools Videos: Using AI to drive cybersecurity risk scoring systems What 2025 holds for user identity protection Cyber professionals face an IP loss reckoning in 2025 Ambitious cybersecurity regulations leave companies in compliance chaos Setting a security standard: From vulnerability to exposure management Industry news: Oscilar Cognitive Identity Intelligence Platform combats AI-powered fraud IBM announces Autonomous Security for Cloud Bitsight acquires Cybersixgill to help organizations manage cyber exposure USX Cyber strengthens phishing defense in GUARDIENT XDR VersaONE unifies security and networking into a single, centrally managed platform Red Hat Enterprise Linux 9.5 helps organizations simplify operations Vectra AI adds AI-powered detections to help secure Microsoft customers Cequence Security enables organizations to elevate their API defenses Absolute Security releases Enterprise Edition Rakuten Viber unveils new security solutions for businesses Nirmata Control Hub automates security with policy-as-code Cisco introduces Wi-Fi 7 access points to enhance employee and customer experiences Syteca Account Discovery strengthens privileged access management Bectran adds RSA encryption to protect the transmission of sensitive data Splunk expands observability portfolio to provide organizations with deeper business context BlackFog platform enhancements boost data loss prevention Akamai App Platform reduces the complexity associated with managing Kubernetes clusters Druva empowers businesses to secure data throughout Microsoft environments F5 AI Gateway secures and optimizes access to AI applications Zscaler Zero Trust Segmentation prevents lateral movement from ransomware attacks Immersive Labs AI Scenario Generator improves cyber skills against various attack types Eurotech ReliaGATE 15A-14 enables organizations to meet regulatory standards Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list