GuidePoint Security announced its IoT Security Assessment, a new cybersecurity service. GuidePoint Security’s team of IoT security and embedded systems experts have extensive experience identifying potential weaknesses in IoT devices and applications across a wide range of industries. Organizations that leverage GuidePoint’s targeted IoT Security Assessment can ultimately identify and fix vulnerabilities, fortify their defenses, inspire confidence in their customers, and prevent unwanted access to their IoT ecosystem. “IoT devices are prevalent in many industries, … More → The post GuidePoint ..read more

Sectigo launched SCM Pro, a solution to bring the robustness of enterprise CLM to Small and midsize enterprises (SMEs), effectively leveling the playing field between large enterprises and the mid-market. Online identity proliferation, hybrid work, and device sprawl increase the number of certificates organizations need to manage; meanwhile, the lifespan of each certificate grows shorter. In other words, more certificates are expiring more often, making it impossible for IT and security teams to keep up … More → The post Sectigo SCM Pro automates certificate management appeared first on Help N ..read more

IDnow has unveiled VideoIdent Flex, a new version of its expert-led video verification service that blends advanced AI technology with human interaction. The human-based video call solution, supported by AI, has been designed and built to boost customer conversion rates, reduce rising fraud attempts, increase inclusivity, and tackle an array of complex online verification scenarios, while offering a high-end service experience to end customers. The company’s original expert-led product, VideoIdent, has been a cornerstone in … More → The post IDnow VideoIdent Flex blends AI technology with huma ..read more

Red teaming is evaluating the effectiveness of your cybersecurity by eliminating defender bias and adopting an adversarial perspective within your organization. Tactics may include anything from social engineering to physical security breaches to simulate a real-world advanced persistent threat. Here are some free red teaming resources to get you started. Atomic Red Team Atomic Red Team is a collection of tests mapped to the MITRE ATT&CK framework. It allows security teams to efficiently, portably, and … More → The post 5 free red teaming resources to get you started appeared first on Help ..read more

In this Help Net Security interview, Caleb Sima, Chair of CSA AI Security Alliance, discusses how AI empowers security pros, emphasizing its role in enhancing skills and productivity rather than replacing staff. AI is seen as empowering rather than replacing security pros. How do you foresee AI changing their roles in the future? While the future of AI replacing jobs remains uncertain, I am confident it’s not imminent. AI is a tool that can be … More → The post AI set to enhance cybersecurity roles, not replace them appeared first on Help Net Security ..read more

Audio deepfakes are becoming a big problem. Recent cybercriminal campaigns use voice cloning technology to replicate the speech tone and patterns of celebrities such as Elon Musk, Mr. Beast Tiger Woods, and others and use them for endorsing fake contests, gambling, and investment opportunities. In this Help Net Security video, Bogdan Botezatu, Director of Threat Research and Reporting at Bitdefender, discusses the growing trend of celebrity audio deepfakes. The post Audio deepfakes: What they are, and the risks they present appeared first on Help Net Security ..read more

31% of women in tech are considering leaving their organization over the next 12 months due foremost to poor management, followed by a lack of training and a desire for better compensation, according to Skillsoft. The survey yielded more than 500 complete responses from women who work in the tech industry, at tech organizations or companies, and in tech roles. “85% of our survey respondents say there’s a gender disparity within their team and 38% … More → The post 31% of women in tech consider switching roles over the next year appeared first on Help Net Security ..read more

Privacera announced the addition of new access control and fine-grained data filtering functionality for Vector DB/RAG to Privacera AI Governance (PAIG). “In generative AI, Retrieval-Augmented Generation (RAG) systems operate by sourcing contextual information from a VectorDB, aggregating data from diverse origins such as Confluence Wiki pages, SharePoint, Databases, and support tickets, and other operational systems. These sources inherently possess their own access controls, so it’s crucial that the VectorDB inherits those and then maintains and … More → The post Privacera adds access contro ..read more

Organizations with on-prem installations of Delinea Secret Server are urged to update them immediately, to plug a critical vulnerability that may allow attackers to bypass authentication, gain admin access and extract secrets. Fixing the Delinea Secret Server SOAP API vulnerability Delinea Secret Server (formerly Thycotic Secret Server) is a privileged access management (PAM) solution “for the modern, hybrid enterprise”. Among other things, PAM solutions can automate the provisioning and deprovisioning of privileged accounts, as well … More → The post A critical vulnerability in Delinea Secret ..read more

ShadowDragon announced significant enhancements to its Open-Source Intelligence Investigative platform Horizon. These updates represent a milestone in the evolution of investigative technology, offering capabilities to streamline investigative processes and uncover valuable insights. The OSINT Platform encompasses an all-in-one solution for investigations with unparalleled access to publicly available information, including geolocation data, platform monitoring, breach data and the ability to integrate external data streams. This allows for a modern approach to link analysis in one comprehensi ..read more