Weekly Newsletter - Exploited VMware ESXi auth bypass zero-day

August 5, 2024 . Help Net Security weekly newsletter Latest news: * Why a strong patch management strategy is essential for reducing business risk * Organizations fail to log 44% of cyber attacks, major exposure gaps remain * Record-breaking $75 million ransom paid to cybercrime group * Open-source project enables Raspberry Pi Bluetooth Wi-Fi network configuration * New infosec products of the week: August 2, 2024 * Threat intelligence: A blessing and a curse? * Why CISOs face greater personal liability * Airlines are flying blind on third-party risks * Infosec products of the month: July 2024 * SMS Stealer malware targeting Android users: Over 105,000 samples identified * Microsoft: DDoS defense error amplified attack on Azure, leading to outage * Innovative approach promises faster bug fixes * What CISOs need to keep CEOs (and themselves) out of jail * Secretive: Open-source app for storing and managing SSH keys in the Secure Enclave * Cybersecurity jobs available right now: July 31, 2024 * Leveraging dynamic configuration for seamless and compliant software changes * Average data breach cost jumps to $4.88 million, collateral damage increased * VMware ESXi auth bypass zero-day exploited by ransomware operators (CVE-2024-37085) * Review: Action1 – Simple and powerful patch management * Securing remote access to mission-critical OT assets * Coding practices: The role of secure programming languages * Insecure file-sharing practices in healthcare put patient privacy at risk * Some good may come out of the CrowdStrike outage * Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249) * eBook: 20 tips for secure cloud migration * Microsoft 365 users targeted by phishers abusing Microsoft Forms * Enhancing threat detection for GenAI workloads with cloud attack emulation * Cirrus: Open-source Google Cloud forensic collection * The cost of cybersecurity burnout: Impact on performance and well-being * Whitepaper: DevSecOps Blueprint Videos: * Practical strategies to mitigate risk and secure SAP environments * The gap between business confidence and cyber resiliency Industry news: * Securonix unveils Cyber Data Fabric and Noise Canceling SIEM in EON suite * Cado platform enhances SOC efficiency with AI-driven workflow automation * Synack PTaaS platform offers complete security testing suite * Wing Security unveils custom SaaS Threat Intelligence for direct dashboard integration * Nucleus Vulnerability Intelligence Platform enhances threat assessment and remediation speed * Clutch Security launches to transform management of NHIs * Fortanix expands Key Insight to enhance cryptographic security across hybrid environments * Cycode unveils Cycode AI to enhance ASPM platform with advanced security features * Lineaje secures $20 million in funding to address software supply chain issues * Devo Technology launches data orchestration and SOC enhancements * Cohesity unveils enhanced GenAI capabilities for faster threat detection and recovery * Proficio launches ProBAS service to help organizations better prepare and respond to cyber attacks * Adaptive Shield unveils ITDR platform for SaaS Twitter LinkedIn Website Copyright © 2024 Astus d.o.o. (Help Net Security), All rights reserved. You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news. Our mailing address is: Astus d.o.o. (Help Net Security) Kastav Kastav 51215 Croatia Add us to your address book Want to change how you receive these emails? You can or