Help Net Security Newsletter - April 15, 2019

Help Net Security weekly newsletter

View in your browser.

Guard against third-party risk to the nth degree

For many, cost-effective scalability means outsourcing some or all of your business functions to a complex web of third-party vendors. Review the report on managing the cyber risk of third-party vendors and their nth-party ecosystems.

Download Report

Enterprise VPN apps store authentication and session cookies insecurely

A quarter of phishing emails bypass Office 365 security

77% of orgs lack a cybersecurity incident response plan

The surveillance economy has set its sights on smartphone sensors

How password-less security benefits helpdesks

Who are the biggest targets of credential stuffing attacks?

WPA3 design flaws affect security of new Wi-Fi standard

WikiLeaks’ Julian Assange arrested in London

TRITON attackers detected at another critical infrastructure facility

Vendor risk management programs are running harder just to stay in place

Regulating the IoT: Impact and new considerations for cybersecurity and new government regulations

Finance knocks business and professional services off top spot in four most attacked industries

Mainframe security is top priority for 85% of IT pros yet few are adequately protecting their systems

April 2019 Patch Tuesday: Microsoft fixes two actively exploited bugs

Hacking healthcare: A call for infosec researchers to probe biomedical devices

What hackers inside your company are after: Convenience

Closed loop automation combats IoT security threats in the 5G age

Windows 10: New update controls for end users, automatic removal of broken updates

Coinhive stops digging, but cryptomining still dominates

Gain immediate visibility into your actual cyber risk for free

PoC exploit for Carpe Diem Apache bug released

Is your organization getting physical security right?

Adhering to the mobility requirements of NIST 800-171 does not have to keep you awake at night

Framing supply chain attacks

90% of OT organizations are cyberattack victims, yet visibility into OT systems is still limited

FileTSAR: Free digital forensic investigations toolkit for law enforcement

Magento sites under attack through easily exploitable SQLi flaw

Perimeter solutions: Do layers of security make a difference?

CIOs and CISOs hold off on crucial updates due to potential impact on business operations

Securing your app and driving down call center fraud

Insights gained from working on more than 750 cybersecurity incidents

The unique business-critical threats facing converged IT-OT systems

Scaling innovation is critical for digital transformation success, but clearly presents a challenge

Industry news:

Elastic and Google Cloud expand managed Elasticsearch Service partnership

Google chooses DataStax as Google Cloud’s new DBaaS offering

Coalition crafts healthcare-specific insurance policy

CoreSite Interconnect Gateway accelerates enterprises’ digital integration

Bandura Cyber launches global channel partner program

High-Tech Bridge is now ImmuniWeb

Verint enhances its Situational Intelligence Platform

HPE partners with Google Cloud to deliver hybrid cloud solutions

i3 Ops AI platform identifies social media threats in real time

NCP Engineering launches virtual VPN appliance for enterprises and service providers

Intel and Google Cloud to simplify deployment across on-premise data centers and the cloud

MobileIron unveils mobile-centric, zero trust enterprise security platform

Syniverse and Affirmed Networks’ new solution enables enterprises to deploy new IoT services

SentryOne’s new automated framework helps companies test and validate business-critical data

Intezer unveils its Endpoint Analysis solution as an addition to Intezer Analyze platform

StackRox Kubernetes Security Platform ensures patient data protection and HIPAA compliance

Sysdig launches new version of its Cloud-Native Visibility and Security Platform

Bitdefender expands its services delivering data and expertise to businesses and SOC teams

Juniper Networks launches a cloud-delivered version of its SD-WAN solution

Syncsort releases Assure Security to help organizations with security and compliance challenges

PacketFabric expands its network to Switch providing flexible connection to the platform

Tripwire’s updated channel partner program fosters partnerships to drive customer growth

RSA Conference innovation program in the APJ region enables startup growth

Fidelis Cybersecurity appoints Craig Harber as CTO

Bitglass raises $70M in Series D funding to fuel continued innovation and global expansion

TeamDynamix provides a single platform for IT Service Management

Teradata now provides new offerings for its Teradata Vantage platform

Qumulo delivers 200% performance increase and new enterprise protocol capabilities

SaltStack launches new SecOps for continuous compliance and IT security at scale

CoreSite helps extend customers’ networks to Google Cloud Platform’s global network

Elastic Stack 6.7 now features cross-cluster replication

Alcide partners with Fortinet to provide hybrid cloud network security solution

Zingbox now part of the Microsoft Active Protections Program

Featured Information Security Event

HITBSecConf2019 - Amsterdam (Amsterdam, May 2019)

Copyright © 2019 Astus d.o.o. (Help Net Security), All rights reserved.

Want to change how you receive these emails?
You can update your preferences or unsubscribe from this list