Weekly Newsletter - Zero-click flaw in Synology NAS devices

Google fixes exploited Android vulnerability -

November 12, 2024 View in your browser. Help Net Security weekly newsletter Don't let password security be your weakest link. Secure passwords in Active Directory, enforce compliance, and pass the pen test. Easily manage password security, create custom dictionary & passphrase settings, block 4 billion+ breached passwords, & help users create stronger passwords. Try it free. Latest news: Week in review: Zero-click flaw in Synology NAS devices, Google fixes exploited Android vulnerability Critical Palo Alto Networks Expedition bug exploited (CVE-2024-5910) Apple's 45-day certificate proposal: A call to action Am I Isolated: Open-source container security benchmark Why AI-enhanced threats and legal uncertainty are top of mind for risk executives New infosec products of the week: November 8, 2024 Industrial companies in Europe targeted with GuLoader North Korean hackers employ new tactics to compromise crypto-related businesses Critical vulnerability in Cisco industrial wireless access points fixed (CVE-2024-20418) How AI will shape the next generation of cyber threats AWS security essentials for managing compliance, data protection, and threat detection Consumer privacy risks of data aggregation: What should organizations do? All Google Cloud users will have to enable MFA by 2025 GoZone ransomware accuses and threatens victims The cybersecurity gender gap: How diverse teams improve threat response Osmedeus: Open-source workflow engine for offensive security Identity-related data breaches cost more than average incidents Beware of phishing emails delivering backdoored Linux VMs! Google patches actively exploited Android vulnerability (CVE-2024-43093) Report: Voice of Practitioners 2024 – The True State of Secrets Security Open-source software: A first attempt at organization after CRA Maximizing security visibility on a budget Cybersecurity jobs available right now: November 5, 2024 AI learning mechanisms may lead to increase in codebase leaks Millions of Synology NAS devices vulnerable to zero-click attacks (CVE-2024-10443) Hiring guide: Key skills for cybersecurity researchers Whispr: Open-source multi-vault secret injection tool Strong privacy laws boost confidence in sharing information with AI Videos: A closer look at the 2023-2030 Australian Cyber Security Strategy Key cybersecurity predictions for 2025 Cybersecurity in crisis: Are we ready for what's coming? Industry news: Mirantis provides support offerings for Harbor Registry and KubeVirt AppOmni partners with Cisco to extend zero trust to SaaS Fortinet expands GenAI capabilities across its portfolio with two new additions Malwarebytes acquires AzireVPN to boost security for customers Drawbridge simplifies cyber governance for alternative investment firms AudioEye Accessibility Protection Status identifies high-impact areas for improvement Zywave enhances Cyber Quoting to provide insight into coverage limit adequacy and potential loss gaps Atakama introduces DNS filtering designed for MSPs Authlete 3.0 empowers organizations to improve how they issue and manage user credentials Symbiotic provides developers with real-time feedback on potential security vulnerabilities Lumifi acquires Critical Insight to boost incident response capabilities BigID DSPM Starter App enhances data security posture for Snowflake customers IRISSCON 2024 to address AI's dual impact on cybersecurity Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can update your preferences or unsubscribe from this list