Darktrace and HackerOne join forces to help organizations close their security gap

At Black Hat USA 2022, Darktrace and HackerOne announced a partnership combining Darktrace PREVENT/Attack Surface Management technology with the continuous security assessment capabilities of the HackerOne platform. The partnership expands HackerOne&#8… Continue reading Darktrace and HackerOne join forces to help organizations close their security gap

Sophos announces eight presentations at Black Hat USA 2022, BSides Las Vegas and DEF CON 30

Sophos announced that SophosAI and Sophos Managed Detection and Response (MDR) will lead eight presentations at Black Hat USA 2022, BSides Las Vegas and DEF CON 30, taking place this week in Las Vegas. Sophos data scientists and threat hunters will be … Continue reading Sophos announces eight presentations at Black Hat USA 2022, BSides Las Vegas and DEF CON 30

Three ransomware gangs consecutively attacked the same network

Hive, LockBit and BlackCat, three prominent ransomware gangs, consecutively attacked the same network, according to Sophos. The first two attacks took place within two hours, and the third attack took place two weeks later. Each ransomware gang left it… Continue reading Three ransomware gangs consecutively attacked the same network

Dissecting Google’s Titan M chip: Vulnerability research challenges

The enterprise-grade Titan M security chip was custom built to help protect data. Derived from the same chip Google uses to protect its cloud data centers, it handles processes and information, such as passcode protection, encryption, and secure transa… Continue reading Dissecting Google’s Titan M chip: Vulnerability research challenges

HYAS Confront gives DevSecOps teams complete visibility into their production environment

At Black Hat USA 2022, HYAS Infosec released HYAS Confront, a cybersecurity solution offering complete visibility into every corner of a production environment. Production environments are increasingly becoming a target for bad actors, as they want the… Continue reading HYAS Confront gives DevSecOps teams complete visibility into their production environment

Stratus Red Team: Open-source tool for adversary emulation in the cloud

In this Help Net Security video, Christophe Tafani-Dereeper, Cloud Security Researcher and Advocate at DataDog, talks about Stratus Red Team, an open-source project for adversary emulation and validation of threat detection in the cloud. The tool suppo… Continue reading Stratus Red Team: Open-source tool for adversary emulation in the cloud

What Black Hat USA 2022 attendees are concerned about

Black Hat released its Supply Chain and Cloud Security Risks Are Top of Mind survey. The report highlights important findings from more than 180 of experienced cybersecurity professionals who reported concerns over attacks against cloud services, ranso… Continue reading What Black Hat USA 2022 attendees are concerned about

MI-X: Open source project helps you understand whether you are exploitable

In this Help Net Security video, Ofri Ouzan, Security Researcher at Rezilion, talks about MI-X (Am I Exploitable?), an open source tool aimed at effectively determining whether a local host or a running container image is truly vulnerable to a specific… Continue reading MI-X: Open source project helps you understand whether you are exploitable

Sparrow’s new solutions and features help users identify vulnerabilities in source code and web applications

At Black Hat USA 2022, Sparrow is announcing its newly upgraded Sparrow Cloud and open-source management solution, Sparrow SCA. Sparrow Cloud is a single platform for managing security and quality issues of both source code and web applications: runnin… Continue reading Sparrow’s new solutions and features help users identify vulnerabilities in source code and web applications