Help Net Security Newsletter - March 4, 2019

Help Net Security weekly newsletter

View in your browser.

(ISC)² Secure Summit EMEA

Themed Enrich. Enable. Excel., the (ISC)² Secure Summit EMEA is on 15-16 April 2019 in The Hague, Netherlands. The event will welcome hundreds of the best minds in cybersecurity from across the region to share ideas, educate and network.

Register >

Bug in Cobalt Strike pentesting tool used to identify malicious servers

New infosec products of the week: March 1, 2019

Enterprises are blind to over half of malware sent to their employees

Businesses need to rethink security priorities due to shifting trends

Half of business leaders say a breach could end their business, others remain unaware

40% of malicious URLs were found on good domains

By 2025 workforce most likely to consist of humans and bots

ENISA provides recommendations to improve the cybersecurity of EU electoral processes

Phishing, software supply chain attacks greatest threats for businesses

Cisco SOHO wireless VPN firewalls and routers open to attack

Fighting credential stuffing attacks is an uphill battle

Cloud business initiatives accelerating faster than security teams’ ability to secure them

Attackers continue to enhance their performance, apply smart business techniques

Privileged credential abuse is involved in 74% of data breaches

Researchers and businesses need to work together to expose IoT vulnerabilities

Modern browser APIs can be abused for hijacking device resources

Sessions and events to check out at RSA Conference 2019

How WebAuthn aims to solve the password problem

Social media-enabled cybercrime is generating $3.25 billion a year

Increasing security measures are driving cybercriminals to alter their techniques

Researchers eavesdrop on DNA synthesizer to steal genetic blueprint

Consumer attitudes towards security breaches are changing significantly

PDF viewers, online validation services vulnerable to digital signature spoofing attacks

Latest WinRAR, Drupal flaws under active exploitation

OSSPatcher: Automated mobile application patching for bugs in open source libraries

Many computers are vulnerable to hacking through common plug-in devices

Most IoT devices are being compromised by exploiting rudimentary vulnerabilities

Healthcare industry: Key trends and cybersecurity challenges

New privacy-breaking attacks against phones on 4G and 5G cellular networks

ICANN calls for wholesale DNSSEC deployment

How to combat delivery ramifications after a data breach

Businesses believe they should be patching their Android devices more frequently

Blocking compromised passwords from the Collection leak

Accidental data breaches are often compounded by a failure to encrypt

Don’t miss these keynotes at RSAC 2019

Industry news:

IBM X-Force Red will use Onapsis ERP technology to help organizations uncover critical vulnerabilities

More than 120 partners commit to Symantec’s integrated cyber defense platform

SecBI launches new solution to help MSSPs maximize their productivity and scalability

Intel and partner ecosystem plan to accelerate the adoption of hardware-enabled security

Eclypsium and Intel offer new silicon-enabled security solutions

ZeroFOX releases new AI and computer vision tools enhancing risk detection

Synopsys launches new security options for ARC HS Processors

Zyxel launches a network security solution for SMBs

Capsule8’s protection platform achieves PCI DSS certification

Companies can save millions of dollars annually in preventable downtime and outages

Egress releases new software to enhance protection against email data breaches

Red Hat launches new certification program to support the future of cloud-native telco infrastructure

Stellar Cyber raises $13.2M, rebrands from Aella Data and expands board and executive team

API Fortress and Axway automate API testing across the agile product development lifecycle

Gurucul extends behavior based security analytics to entire IT stack

SecurityScorecard launches Atlas, a questionnaire and evidence exchange platform

Radiflow releases new version of its industrial threat detection solution

BitSight releases Peer Analytics, improving security performance management

GreatHorn protects users from the large variety of Microsoft and Google credential theft attacks

Sysdig’s data collection technology provides visibility inside containers

SonicWall enhances Wi-Fi, cloud apps and endpoints security for SMBs and distributed enterprises

ManageEngine adds Office 365 content search capability for exchange online mailboxes

Western Digital delivers two new data center-class NVMe SSDs for cloud and edge workloads

SyncDog and FullScope IT to provide secure partition to separate business data on personal devices

VeriFyle adds an additional layer of security with new digital signature capability

Veridium releases new software-only platform for mobile biometric authentication

GlobalSign joins Microsoft Intelligent Security Association providing safer mobile authentication

Bishop Fox raises $25 million to grow its research capabilities and security testing services

Riptide Software releases new penetration testing service

ThreadFix 3.0 provides an understanding of overall risk to business operations

StrongKey launches FIDO server, enabling rapid application development and integration

SentinelOne releases full remote shell capabilities for remote endpoint attack query and response

Cyberbit launches SCADAShield Mobile for passive monitoring of ICS network traffic

Sprint teams with AWS to enrich the capabilities of its Curiosity IoT platform

myDevices and Microsoft collaborate to connect LoRaWAN devices to Microsoft Azure

Inside Secure launches provisioning solutions to protect devices during manufacturing process

ShieldX updates platform to provide customers with contextual threat intelligence

Trend Micro launches new product for telecom companies to better protect their users

Hex Five and wolfSSL launch a secure IoT stack for RISC-V

DBM Cloud Systems enhances AIRE to automatically migrate functioning VMs in Oracle

LoadSys Solutions introduces AI powered voice interface for cloud based apps

A simple and secure biometric login for Android 7.0+

Synopsys’ new platform enables comprehensive application security from developer to deployment

Asavie IoT Connect service expedites enterprise IoT projects

Trustonic and Huawei introduce multi-TEE security platform for mobile app developers

NanoLock partners with Micron providing a flash-to-cloud management solution for security of IoT

Cisco partners with Google Station to provide sustainable public Wi-Fi

Intel releases new end-to-end solution for 5G

Cyber Deception platform 5.0 release from PacketViper includes enriched capabilities

Polyverse polymorphic versions of Linux available to customers of VMware Cloud on AWS

Entrust Datacard acquires nCipher, a GP HSM business from Thales

ISARA updates tools to protect sensitive data and systems from the quantum threat

Sectigo releases Zero-Touch deployment email encryption and digital signing solution

Ascom launches new platform to fully digitize healthcare

A10 Networks ships 100 Gbps NFV solution for 5G secure application services

Featured Information Security Events

RSA Conference 2019 (San Francisco, March 2019)
ISC² Secure Summit EMEA 2019 (The Hague, April 2019)

Copyright © 2019 Astus d.o.o. (Help Net Security), All rights reserved.

Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list