Hoax Clearing Center

Patch Tuesday forecast -

December 13, 2024
View in your browser (https://mailchi.mp/helpnetsecurity.net/help-net-security-newsletter-2761472?e=b0f1ce63ac) .
Help Net Security weekly newsletter
Latest news:

• Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast (https://www.helpnetsecurity.com/2025/01/12/week-in-review-exploited-ivanti-connect-secure-zero-day-patch-tuesday-forecast/)

• Job-seeking devs targeted with fake CrowdStrike offer via email (https://www.helpnetsecurity.com/2025/01/10/fake-crowdstrike-job-offer-email-delivers-cryptominer/)

• January 2025 Patch Tuesday forecast: Changes coming in cybersecurity guidance (https://www.helpnetsecurity.com/2025/01/10/january-2025-patch-tuesday-forecast/)

• The SBI fake banking app shows that SMS authentication has had its day (https://www.helpnetsecurity.com/2025/01/10/sms-authentication-weakness/)

• Preventing the next ransomware attack with help from AI (https://www.helpnetsecurity.com/2025/01/10/darren-williams-blackfog-ransomware-awareness-training/)

• New infosec products of the week: January 10, 2025 (https://www.helpnetsecurity.com/2025/01/10/new-infosec-products-of-the-week-january-10-2025/)

• Banshee Stealer variant targets Russian-speaking macOS users (https://www.helpnetsecurity.com/2025/01/09/banshee-stealer-variant-targets-russian-speaking-macos-users/)

• Ivanti Connect Secure zero-day exploited since mid-December (CVE-2025-0282) (https://www.helpnetsecurity.com/2025/01/09/ivanti-cve-2025-0282-zero-day-attacks-indicators-of-compromise/)

• Wireshark 4.4.3 released: Updated protocol support, bug fixes (https://www.helpnetsecurity.com/2025/01/09/wireshark-4-4-3-released/)

• The ongoing evolution of the CIS Critical Security Controls (https://www.helpnetsecurity.com/2025/01/09/cis-security-controls-v8-1/)

• GitLab CISO on proactive monitoring and metrics for DevSecOps success (https://www.helpnetsecurity.com/2025/01/09/josh-lemos-gitlab-devsecops-success/)

• Sara: Open-source RouterOS security inspector (https://www.helpnetsecurity.com/2025/01/09/sara-open-source-routeros-security-inspector/)

• Cybersecurity in 2025: Global conflict, grown-up AI, and the wisdom of the crowd (https://www.helpnetsecurity.com/2025/01/09/2025-cybersecurity-community/)

• Ivanti Connect Secure zero-day exploited by attackers (CVE-2025-0282) (https://www.helpnetsecurity.com/2025/01/08/ivanti-exploited-connect-secure-zero-day-cve-2025-0282-cve-2025-0283/)

• The U.S. Cyber Trust Mark set to launch (https://www.helpnetsecurity.com/2025/01/08/the-u-s-cyber-trust-mark-label-launch/)

• Mitel MiCollab, Oracle WebLogic Server vulnerabilities exploited by attackers (https://www.helpnetsecurity.com/2025/01/08/mitel-micollab-oracle-weblogic-server-vulnerabilities-exploited-by-attackers/)

• Why an “all gas, no brakes” approach for AI use won’t work (https://www.helpnetsecurity.com/2025/01/08/ai-gas-brakes-mindsets/)

• Scaling penetration testing through smart automation (https://www.helpnetsecurity.com/2025/01/08/marko-simeonov-plainsea-penetration-testing-automation/)

• The top target for phishing campaigns (https://www.helpnetsecurity.com/2025/01/08/genai-apps-phishing/)

• Cybersecurity jobs available right now: January 8, 2025 (https://www.helpnetsecurity.com/2025/01/08/cybersecurity-jobs-available-right-now-january-8-2025/)

• UN aviation agency investigating possible data breach (https://www.helpnetsecurity.com/2025/01/07/icao-un-aviation-agency-data-breach-security-incident/)

• CISA says Treasury was the only US agency breached via BeyondTrust (https://www.helpnetsecurity.com/2025/01/07/cisa-says-treasury-was-the-only-us-agency-breached-via-compromised-beyondtrust-instances/)

• Making the most of cryptography, now and in the future (https://www.helpnetsecurity.com/2025/01/07/cryptography-risks/)

• eBay CISO on managing long-term cybersecurity planning and ROI (https://www.helpnetsecurity.com/2025/01/07/sean-embry-ebay-enterprise-cybersecurity-planning/)

• Cyberbro: Open-source tool extracts IoCs and checks their reputation (https://www.helpnetsecurity.com/2025/01/07/cyberbro-open-source-extract-iocs-check-reputation/)

• How AI and deepfakes are redefining social engineering threats (https://www.helpnetsecurity.com/2025/01/07/phishing-trends-2024/)

• Balancing proprietary and open-source tools in cyber threat research (https://www.helpnetsecurity.com/2025/01/06/thomas-roccia-microsoft-threat-research/)

• Only 26% of Europe’s top companies earn a high rating for cybersecurity (https://www.helpnetsecurity.com/2025/01/06/european-companies-cybersecurity-rating/)

• Users receive at least one advanced phishing link every week (https://www.helpnetsecurity.com/2025/01/06/phishing-cyber-threats/)

• Is healthcare cybersecurity in critical condition? (https://www.helpnetsecurity.com/2025/01/06/healthcare-cybersecurity-2024-trends/)

Videos:

• Open source worldwide: Critical maintenance gaps exposed (https://www.helpnetsecurity.com/2025/01/07/open-source-security-weaknesses-video/)

Industry news:

• Code Intelligence Spark automates software testing (https://www.helpnetsecurity.com/2025/01/09/code-intelligence-spark/)

• BreachLock Unified Platform provides visibility into the organization’s attack surface (https://www.helpnetsecurity.com/2025/01/09/breachlock-unified-platform/)

• Synology ActiveProtect boosts enterprise data protection (https://www.helpnetsecurity.com/2025/01/09/synology-activeprotect/)

• Swimlane Hero helps solve complex security operations problems (https://www.helpnetsecurity.com/2025/01/08/swimlane-hero/)

• BioConnect unveils biometric devices for secure access control (https://www.helpnetsecurity.com/2025/01/08/bioconnect-arc-series/)

• Transcend Migration Accelerator improves privacy strategies for organizations (https://www.helpnetsecurity.com/2025/01/08/transcend-migration-accelerator/)

• NETGEAR Armor, powered by Bitdefender, protects home networks against cyber threats (https://www.helpnetsecurity.com/2025/01/07/netgear-armor-bitdefender/)

• McAfee Scam Detector spots scams across text, email, and video (https://www.helpnetsecurity.com/2025/01/07/mcafee-scam-detector/)

============================================================

• Website (https://www.helpnetsecurity.com/)
• Twitter (https://x.com/helpnetsecurity)
• LinkedIn (https://www.linkedin.com/company/helpnetsecurity/)
  Copyright © 2025 Astus d.o.o. (Help Net Security), All rights reserved.
  You are receiving Help Net Security newsletter because you opted in at our web site located on www.helpnetsecurity.com. Help Net Security newsletter contains weekly overview of all the latest information security news.

Our mailing address is:
Astus d.o.o. (Help Net Security)
Kastav
Kastav 51215
Croatia
Want to change how you receive these emails?
You can * update your preferences (https://helpnetsecurity.us2.list-manage.com/profile?u=f76e9593a7d90f4024574218d&id=d2d471aafa&e=b0f1ce63ac&c=e97536c00b)
or * unsubscribe from this list (https://helpnetsecurity.us2.list-manage.com/unsubscribe?u=f76e9593a7d90f4024574218d&id=d2d471aafa&t=b&e=b0f1ce63ac&c=e97536c00b)