Collaborate Disseminate
There was a barrage of updates released the week of June 2025 Patch Tuesday. This included security updates from Adobe, Google, Microsoft, Mozilla, and others. But it has been ‘calm’ the past couple of weeks. The news and message boards were covering t… Continue reading July 2025 Patch Tuesday forecast: Take a break from the grind
Aegis Authenticator is an open-source 2FA app for Android that helps you manage login codes for your online accounts. The app features strong encryption and the ability to back up your data. It supports both HOTP and TOTP, so it works with thousands of… Continue reading Aegis Authenticator: Free, open-source 2FA app for Android
While most enterprises have integrated cloud resources into their operations, many need to improve their ability to secure these environments and the data they contain, according to Thales. Cloud security challenges go beyond technology The variability… Continue reading Cloud security maintains its position as top spending priority
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463) If you haven’t recently updated the Sudo utility on your Linux box(… Continue reading Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome
NTLM relay attacks are the easiest way for an attacker to compromise domain-joined hosts. While many security practitioners think NTLM relay is a solved problem, it is not – and, in fact, it may be getting worse. Anecdotally, they are used in most atta… Continue reading NTLM relay attacks are back from the dead
In this Help Net Security video, Ozan Ucar, CEO of Keepnet Labs, highlights a critical cybersecurity blind spot: the vulnerability of new hires during onboarding. He explains how attackers now use AI-powered, multi-channel phishing tactics to target fr… Continue reading New hires, new targets: Why attackers love your onboarding process
While Africa hosts some of the fastest-growing digital economies globally, it also faces persistent challenges in cybersecurity preparedness. Many organizations and individuals remain unaware of the risks they face online. Phishing schemes and social e… Continue reading Africa’s cybersecurity crisis and the push to mobilizing communities to safeguard a digital future
75% of organizations have building management systems (BMS) affected by known exploited vulnerabilities (KEVs), according to Claroty.
The post Exposed and unaware? Smart buildings need smarter risk controls appeared first on Help Net Security.
Continue reading Exposed and unaware? Smart buildings need smarter risk controls
To ensure resilience across the internet stack, organizations need to protect and manage four key areas: reachability, availability, reliability, and performance, according to Catchpoint. The negative economic impact of incidents 51% report monthly los… Continue reading Internet outages are costing companies millions every month
GitPhish is an open-source security research tool built to replicate GitHub’s device code authentication flow. It features three core operating modes: an authentication server, automated landing page deployment, and an administrative management interfa… Continue reading GitPhish: Open-source GitHub device code flow security assessment tool