![Isaac Evans](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/17115957/isaac_evans-2-semgrep-400x200.jpg)
Custom rules in security tools can be a game changer for vulnerability detection
In this Help Net interview, Isaac Evans, CEO at Semgrep, discusses the balance between speed and thoroughness in CI/CD pipeline security scanning. Stressing the need to avoid …
![CVEMap](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/24090507/cvemap-400x200.jpg)
CVEMap: Open-source tool to query, browse and search CVEs
CVEMap is an open-source command-line interface (CLI) tool that allows you to explore Common Vulnerabilities and Exposures (CVEs). It’s designed to offer a streamlined …
![online fraud](https://img.helpnetsecurity.com/wp-content/uploads/2023/09/25200942/online-fraud-400x200.jpg)
Payment fraud is hitting organizations harder than ever before
96% of US companies were targeted with at least one fraud attempt in the past year, according to Trustpair. 83% of US companies saw an increase in cyber fraud attempts on …
![Infosec products of the month](https://img.helpnetsecurity.com/wp-content/uploads/2023/04/13115319/infosec-month-1200-400x200.jpg)
Infosec products of the month: January 2024
Here’s a look at the most interesting products from the past month, featuring releases from: 1Kosmos, Atakama, Critical Start, Dasera, ID R&D, Living Security, Onfido, …
![Windows](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/30142838/windows-storm-400x200.jpg)
A zero-day vulnerability (and PoC) to blind defenses relying on Windows event logs
A zero-day vulnerability that, when triggered, could crash the Windows Event Log service on all supported (and some legacy) versions of Windows could spell trouble for …
![White Phoenix](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/31083626/white_phoenix-free-ransomware-recovery-tool-400x200.jpg)
Free ransomware recovery tool White Phoenix now has a web version
White Phoenix is a free ransomware recovery tool for situations where files are encrypted with intermittent encryption. It was tested on BlackCat/ALPHV Ransomware, Play …
![CVSS](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/29135643/cvss-1400-400x200.jpg)
Does CVSS 4.0 solve the exploitability problem?
The newest version of the vulnerability scoring system CVSS 4.0 is here! After a lengthy gap between version 3 (released in 2015), as of November 2023 version 4.0 is …
![Stephanie Hagopian](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/22122101/stephanie_hagopian-2-cdw-400x200.jpg)
Proactive cybersecurity: A strategic approach to cost efficiency and crisis management
In this Help Net Security interview, Stephanie Hagopian, VP of Security at CDW, discusses offensive strategies in the face of complex cyberattacks and the role of the …
![DevSecOps](https://img.helpnetsecurity.com/wp-content/uploads/2024/01/19155548/devsecops-1400-400x200.jpg)
How to make developers accept DevSecOps
According to a recent Dynatrace report, only 50% of CISOs believe that development teams have thoroughly tested the software for vulnerabilities before deploying it into the …
![target](https://img.helpnetsecurity.com/wp-content/uploads/2023/07/25133918/target2-400x200.jpg)
Cybercriminals replace familiar tactics to exfiltrate sensitive data
Ransomware attacks are increasing again as cybercriminals’ motivation shifts to data exfiltration, according to Delinea. The familiar tactics of crippling a company and …
![work](https://img.helpnetsecurity.com/wp-content/uploads/2023/11/20081204/computer_skills-400x200.jpg)
Database management enters a new era of complexity
Increasing complexity, the rapid adoption of emerging technologies and a growing skills gap are the biggest concerns facing IT leaders in 2024, according to Redgate. 30% of …
![GitLab](https://img.helpnetsecurity.com/wp-content/uploads/2022/08/24123913/gitlab-24082022-01-400x200.jpg)
Self-managed GitLab installations should be patched again (CVE-2024-0402)
Less than two weeks after having plugged a security hole that allows account takeover without user interaction, GitLab Inc. has patched a critical vulnerability …
Featured news
Sponsored
Don't miss
- Overlooked essentials: API security best practices
- SubSnipe: Open-source tool for finding subdomains vulnerable to takeover
- Void Banshee APT exploited “lingering Windows relic” in zero-day attacks
- SYS01 info-stealer pushed via Facebook ads, LinkedIn and YouTube posts
- ChatGPTriage: How can CISOs see and control employees’ AI use?