Search: “ProSAFE Plus”

11 Best Device Control & USB Security Tools Compared (2026): Features & Pricing

2026 comparison of 11 device control and USB security tools ranks CoSoSys Endpoint Protector first for cross-platform control and DLP.

An editorial scorecard evaluates eleven device control and removable-media security tools across granularity, content-aware DLP, cross-platform parity, encryption/shadowing, and value. CoSoSys Endpoint Protector (now part of Netwrix) leads at 4.60 for genuine Windows, macOS, and Linux parity, with Ivanti DeviceLock at 4.25 for the deepest Windows peripheral control and Safetica positioned for SMB and mid-market value. Enterprise content-aware DLP anchors include Symantec (Broadcom), Forcepoint, Digital Guardian (Fortra), and Trellix, with pricing almost always per endpoint.

GBHackers·updated 09:52 UTC · 2h ago·first Sep 11, 07:08 UTC · 5d agoIndustry 13 sources

New Mirai Variant Targeting Network Security Devices

New Mirai botnet variant exploits nine vulnerabilities in SonicWall, D-Link, Netgear, and other devices, with attacks ongoing at publication.

Unit 42 observed attacks exploiting VisualDoor (SonicWall SSL-VPN), CVE-2020-25506 (D-Link DNS-320), CVE-2020-26919 (Netgear ProSAFE Plus), and other flaws, with infrastructure rotating across at least three IP addresses between February 16 and March 13, 2021. Payloads were updated hours after CVE-2021-27561 and CVE-2021-27562 (Yealink Device Management, unauthenticated root RCE) and later added CVE-2021-22502 (Micro Focus Operation Bridge Reporter) and CVE-2019-19356 (Netis WF2419). Successful exploitation invokes wget to fetch shell scripts that download Mirai binaries compiled for multiple architectures and brute-forcers, and attacks were still ongoing when reported.

Palo Alto Unit 42·Aug 19, 12:04 UTC · 28d agoExploit / PoC in the wildCVE-2020-25506CVE-2020-26919CVE-2019-19356+3 CVEs

LastPass enhancements improve visibility, governance, and control

LastPass releases SaaS monitoring enhancements, Mobile Smart Scanner, and auto-enrolled dark web monitoring across its password management products.

LastPass announced enhancements to SaaS Monitoring and SaaS Protect in its Business Max offering, including Persistent Monitoring that keeps visibility active through the browser extension even when users are signed out, fully released as of July. It launched Mobile Smart Scanner to convert printed, handwritten, or screenshot passwords into vault credentials, and began phasing in automatic enrollment of all consumer accounts in dark web monitoring. The company also completed its transition to a Unified Admin Console, added company-wide onboarding links, and passed SOC 2 and ISO 27001/27701 audits with zero findings for the second consecutive year.

Help Net Security·Sep 1, 00:00 UTC · 15d agoTools

FlyWP Adds Proactive Vulnerability Protection with Patchstack

FlyWP integrated Patchstack into its managed WordPress hosting platform via a new FlySecurity Pro add-on for proactive vulnerability protection.

FlyWP, a managed WordPress cloud hosting and server management provider, has integrated Patchstack vulnerability intelligence into its platform. The new FlySecurity Pro add-on gives customers proactive protection against WordPress vulnerabilities from a single dashboard. The announcement is a vendor partnership rather than a new flaw or incident.

Patchstack·Aug 17, 15:16 UTC · 29d agoTools1

visionOS 27.0 (24M362)

Apple ships visionOS 27.0 (build 24M362) for Vision Pro; release notice contains no security or CVE details.

Apple announced the general availability of visionOS 27.0, build 24M362, via its developer release feed. The notice contains only download and release-notes links with no vulnerability or CVE information. Defenders should consult the security release notes to determine if patches affect Apple Vision Pro devices.

Apple software releases·Sep 14, 17:00 UTC · 1d agoAdvisory 2 sources

Synology ActiveProtect Manager 2.0 improves AI-driven security

Synology released ActiveProtect Manager 2.0, expanding backup coverage to EC2, Azure, Proxmox and Google Workspace, with AI anomaly detection and malware scanning coming in 2.1.

Synology launched ActiveProtect Manager 2.0 for its DP Series data protection appliances, adding platform coverage for Amazon EC2, Azure VM, Proxmox VE, Nutanix AHV and Google Workspace. The release introduces cross-platform recovery, expanded backup destinations including Azure Blob Storage, and volume-level software storage encryption. The upcoming 2.1 update will add AI/ML anomaly detection tracking change rates, mass deletions and entropy, plus pre-restore malware scanning using Microsoft Defender, Bitdefender and ESET with Auto Fallback to the last clean version.

Help Net Security·Sep 4, 00:00 UTC · 12d agoTools

15 Minutes Saved Per Alert: How a Lean German Manufacturer Protects 10,000 Endpoints with ANY.RUN

A five-person security team at a German manufacturer protecting 10,000 endpoints cut triage time by 15 minutes per alert after adopting ANY.RUN's cloud sandbox.

Philipp Z., Security Lead at a leading German manufacturer, described how a five-person team protects 10,000 endpoints and users using ANY.RUN's Interactive Sandbox in a private cloud. The firm previously relied on a single air-gapped forensic laptop running Flare VM, which caused 5-10 minute setup delays, single-user bottlenecks, and selective triage. The switch reportedly saved roughly 15 minutes per alert and reduced forced wiping and reimaging of user machines. ANY.RUN data cited in the piece puts manufacturing security workloads 22% above other major industries.

ANY.RUN·Sep 9, 07:47 UTC · 7d agoIndustry

Visa enhances A2A Protect to stop fraud before money leaves the account

Visa enhanced A2A Protect with a Featurespace-powered unified fraud score to help banks stop account-to-account fraud before funds leave accounts.

Visa announced an updated A2A Protect that integrates Featurespace technology into a unified fraud score, giving banks real-time risk insights on account-to-account payments without waiting for in-house model training or consortium participation. Visa claims a 75% increase in fraud detection within the first six months of deployment and a single API for integration. A2A transaction volume is projected to exceed 5.8 trillion by 2028, up 160% from 2024.

Help Net Security·Sep 2, 00:00 UTC · 14d agoTools

Scans for Proxmox Servers, (Wed, Sep 9th)

SANS observed increased scanning and brute-force attacks on port 8006 targeting unsupported Proxmox VE 7 servers after a recent vulnerability advisory.

SANS Internet Storm Center reported a bump in scans for port 8006 and additional brute-force traffic against Proxmox VE servers following a Proxmox advisory about a vulnerability in older releases. The flaw only affects Proxmox VE version 7, which has been unsupported for a couple of years. Observed activity includes POST requests to /api2/json/access/ticket with root@pam usernames and weak passwords, fingerprinting requests, and POSTs to /api2/extjs/access/ticket; failed logins return 401 status codes and non-TLS POSTs return 308 redirects.

SANS Internet Storm Center·updated Sep 10, 12:58 UTC · 5d ago·first Sep 9, 17:46 UTC · 6d agoExploit / PoC 2 sources

What is Proactive Threat Intelligence? | Recorded Future

Recorded Future publishes a vendor explainer on proactive threat intelligence, arguing external adversary context helps teams act before alerts fire.

Recorded Future published a conceptual blog on proactive threat intelligence, describing how external context on adversaries, infrastructure, stolen credentials, and vulnerability exploitation helps security teams act before intrusions surface internally. The piece outlines a four-step program: defining intelligence requirements, collecting external sources including OSINT and dark web, analyzing relevance to the organization, and driving security actions. Use cases include prioritizing CVEs by real-world exploitation activity and identifying external exposure before it becomes an internal incident.

Recorded Future·Sep 14, 00:00 UTC · 2d agoIndustry

visionOS 26.6.1 (23O780)

Apple shipped visionOS 26.6.1 (build 23O780), a security and maintenance update for Vision Pro headsets.

Apple listed the visionOS 26.6.1 release (build 23O780) on August 17, 2026. The announcement contains only download and release note links, with no CVE identifiers or exploitation details disclosed in the feed text. Updates to visionOS generally bundle security patches alongside functional improvements for Apple Vision Pro.

Apple software releases·Aug 17, 17:00 UTC · 29d agoAdvisory

New Huntress Managed ITDR Dashboard: Faster Identity Investigations

Huntress redesigned its Managed ITDR dashboard, adding Rapid Identity Triage, Failed Login Characterization, and Quick SIEM search to speed identity investigations.

Huntress announced a redesigned Managed ITDR dashboard aimed at accelerating identity threat investigations. New capabilities include Rapid Identity Triage, Failed Login Characterization, and Quick SIEM search. The update is a vendor product change with no incident or vulnerability details attached.

Huntress·Aug 27, 14:00 UTC · 19d agoTools

The 12 Best Antivirus (Endpoint Protection) Software for Business, Compared and Priced

GBHackers compares 12 business antivirus products on detection, EDR depth, pricing, and platform coverage, ranking CrowdStrike and Bitdefender joint top at 8.8.

The roundup scores 12 enterprise endpoint protection vendors across detection, EDR depth, management, pricing transparency, and platform coverage. CrowdStrike and Bitdefender tie at 8.8, with Microsoft Defender for Endpoint scoring 8.5 and noted as effectively free for Microsoft 365 E5 licensees. The piece also flags that Kaspersky cannot legally be sold in the US and that Panda and Webroot now sit under WatchGuard and OpenText respectively.

GBHackers·Sep 8, 10:24 UTC · 8d agoIndustry 2 sources1

Microsoft says Copilot buttons still missing in classic Outlooknew

Microsoft is still investigating a bug that makes Copilot buttons disappear in classic Outlook for affected M365 Copilot users.

Microsoft confirmed the missing Copilot and Copilot Chat buttons occur after upgrading classic Outlook for Windows to build 20026.20182 and higher, because Outlook cannot locate the MAPI property PR_PROFILE_USER_SMTP_EMAIL_ADDRESS_W. The issue affects Copilot Chat (Basic) and paid M365 Copilot (Premium) customers, and Copilot remains reachable via OWA, new Outlook, and the standalone app. A temporary workaround enables 'Show Apps in Outlook' under Advanced settings, and Microsoft also acknowledged Outlook crashes tied to Kaspersky's Mail Checker (mcou.dll).

BleepingComputer·12:16 UTC · 33m agoAI industry 2 sources

AVP-Inspect: Coordinated Cyber-Physical Testing for Privacy Analysis of COTS Apple Vision Pro Applications

AVP-Inspect automated testing finds 58% of 324 Apple Vision Pro apps show privacy violations, with over 60% of network traffic flows undisclosed.

Researchers built AVP-Inspect, a dynamic analysis framework combining custom hardware device control, 3D UI exploration, and a unified privacy taxonomy for Apple Vision Pro. Testing 324 App Store apps for 20 minutes each found 188 (58.0%) with at least one privacy violation. More than 60% of observed network traffic flows were not properly disclosed, extending prior XR privacy work beyond Android-based devices such as Meta Quest.

arXiv cs.CR·Sep 8, 01:24 UTC · 8d agoResearch1

Cyble Introduces Major Upgrade to its Executive Monitoring Module

Cyble upgraded Executive Monitoring in Cyble Vision, unifying impersonation, exposure, and mention findings with AI scoring and multi-channel alerting.

Cyble released a major upgrade to Executive Monitoring within its Cyble Vision platform, consolidating Mentions, Impersonations, Exposures, and a new Surface Mentions source (blog and news coverage) into a single findings stream. The release adds AI-generated verdicts and recommendations, per-executive Risk and Reputation scoring for board reporting, and richer onboarding with aliases, reference images, and addresses to cut same-name false positives. Alerting now supports data residency, bulk import, delivery via email, WhatsApp, and SMS, an Access API, and branded executive PDF reports; the upgrade is live with no customer action required.

Cyble·Sep 10, 12:26 UTC · 6d agoTools

NIS2 compliance: Fixing IAM and access control before the 2026 audit

EU NIS2 enforcement deadlines approach; organizations are urged to prioritize service account inventory, lifecycle offboarding, and phishing-resistant MFA before audits.

EU member states are moving from NIS2 transposition into enforcement, with fines up to 10 million euros or 2% of global turnover for essential entities and personal liability for management bodies. The article argues access management is the fastest high-ROI starting point, estimating 2-4 weeks to enforce fine-grained password policy, vault shared credentials, and deploy phishing-resistant MFA versus 6-12 months for supply chain risk management. It flags three common pre-audit failures: unmanaged service accounts and API keys, dormant accounts from broken offboarding, and SMS OTP instead of phishing-resistant MFA under NIST SP 800-63B. The piece promotes Passwork as a single control plane for credential storage, RBAC, and WebAuthn.

Help Net Security·Sep 1, 00:00 UTC · 15d agoIndustry

New infosec products of the week: September 4, 2026

Weekly roundup covers F5's AI-powered WAF enhancements, Ping Identity's personal AI agent access, Superna 2.15 cyberstorage, and BugBase Pentest Copilot Enterprise.

This week's product roundup features releases from BugBase, F5 Networks, Ping Identity, and Superna. F5's WAF for Distributed Cloud adds anomaly detection and agentic threat intelligence for real-time virtual patching, Ping Identity launched Enterprise Personal Agent Access for securing personal AI agents, Superna 2.15 adds guided event-closing workflows for cyberstorage operations, and BugBase's Pentest Copilot Enterprise automates black-box pentesting across 100 vulnerability types using real Chromium browsers.

Help Net Security·Sep 4, 00:00 UTC · 12d agoTools

Product showcase: Guardio Mobile Security turns breach alerts into a recovery plan

Help Net Security·Aug 3, 00:00 UTC · Aug 3, 2026Data breach

Three smart ways SMBs can improve cybersecurity

Opinion piece urges small and midsize businesses to adopt proactive prevention, threat detection, and 24/7 MDR or XDR services.

This opinion article argues SMBs face outsized cyber risk due to limited budgets, small IT teams, and reactive security postures. It recommends proactive prevention, a defined threat detection and response strategy, and managed detection and response (MDR) or extended detection and response (XDR) services. It cites ransomware costs up to $10,000 per device and an attack every 39 seconds as motivation for adopting vendor-operated 24/7 monitoring.

Help Net Security·Aug 27, 06:50 UTC · 20d agoIndustry

Hunt Malware & Phishing Threats with ANY.RUN for Proactive Enterprise Security

ANY.RUN promotes its Threat Intelligence platform for turning scattered malware and phishing indicators into proactive enterprise threat hunting workflows.

ANY.RUN published a vendor blog post describing how its Threat Intelligence product helps analysts consolidate endless alerts, indicators, behavioral evidence and infrastructure context. The post frames threat intelligence as a way to move from raw data collection to proactive protection against malware and phishing. No new threat activity, malware family or vulnerability is disclosed.

ANY.RUN·Aug 19, 10:27 UTC · 28d agoTools

The EU CRA's Real Question: What Shipped, and When Did You Know?

ActiveState argues the EU CRA's 24-hour ENISA exploit-notification duty, effective September 11, 2026, makes current SBOMs and provenance visibility a legal necessity.

An ActiveState essay warns that the EU Cyber Resilience Act's reporting obligations take effect on September 11, 2026, requiring manufacturers of products with digital elements sold into the EU to notify ENISA within 24 hours of learning a vulnerability is actively exploited, with a fuller report within 72 hours. The law's engineering requirements only apply from December 11, 2027, leaving a visibility-first runway, and Article 13 requires the SBOM to stay current unlike one-time artifacts generated under US Executive Order 14028. The author contrasts the 24-hour notification clock with an industry-average 55 days to remediate high or critical vulnerabilities and recommends automated SBOM regeneration or consuming pre-vetted, attested open source components.

BleepingComputer·Sep 8, 20:24 UTC · 7d agoPolicy & legal

New infosec products of the month: August 2026

August 2026 roundup of security product releases from ServiceNow, Tanium, Snyk, F5, A10, Searchlight Cyber, Intezer, NETSCOUT, Tufin, and Abnormal AI.

Help Net Security's monthly product roundup covers roughly a dozen vendors. Highlights include Snyk's general availability of Evo Continuous Offensive Security with AI-powered pentesting and AI agent red teaming, Searchlight Cyber's PTEM platform combining exposure visibility with attacker intelligence, and A10 and F5 AI gateways to govern enterprise LLM and agent usage. Other updates include Abnormal AI email DLP and phishing training, NETSCOUT outbound DDoS mitigation for service providers, Intezer's native Workflows automation, and Tufin's AI-powered Segmentation Intelligence.

Help Net Security·Aug 28, 00:00 UTC · 19d agoTools

Five Eyes Guidance Improve Edge

Five Eyes intelligence agencies issued joint guidance aimed at improving security of edge network devices.

Based on the headline, Five Eyes cyber agencies released guidance recommending organizations improve the security posture of edge devices such as routers and remote-access appliances. No article text is available, so specific recommendations are unavailable.

Infosecurity Magazine·Aug 19, 00:00 UTC · 28d agoAdvisory

Sevii APS Module preempts attacks with autonomous cyber defens

Help Net Security·Aug 4, 00:00 UTC · Aug 4, 2026Exploit / PoC

[webapps] Probo 0.222.2 - IDOR

A public proof-of-concept exploit was released for an IDOR vulnerability in web application Probo 0.222.2.

Exploit-DB published exploit #52650 targeting Probo version 0.222.2. The flaw is an Insecure Direct Object Reference (IDOR) in this web application. No exploitation in the wild is reported in the disclosure text.

Exploit-DB·Aug 17, 00:00 UTC · Aug 17, 2026Exploit / PoC

StopAndProtect Turns 2,000 Hacked WordPress Sites Into a Criminal Network

Check Point uncovered StopAndProtect, a cybercrime operation using ~2,000 hacked WordPress sites for ClickFix-driven malware delivery, data theft, surveillance, and ransomware.

Check Point Research identified the StopAndProtect operation in May 2026; it abuses close to 2,000 compromised WordPress sites, many running outdated software, to host malware stages, act as C2, and store stolen data. Infection starts with fake CAPTCHA ClickFix prompts that trick visitors into running a PowerShell command, followed by .NET downloaders deploying ransomware, SMB/USB worm, lockscreen, chat, and credential-stealing components. Rather than always encrypting, operators selectively exfiltrate file lists and specific files; researchers found 700+ stolen-data archives, roughly 31,000 screenshots, and 6,000+ unique victim IP addresses, including WhatsApp activity monitoring.

Security Affairs·Aug 20, 07:20 UTC · 27d agoThreat actor in the wild

ChatGPT advanced account security adds passkeys and hardware keys

OpenAI launches Advanced Account Security for ChatGPT and Codex, replacing passwords with passkeys or hardware keys and disabling email/SMS recovery.

The opt-in setting disables password sign-in plus email and SMS account recovery for ChatGPT and Codex accounts, allowing only passkeys, hardware security keys, and user-held recovery keys, with shortened sessions and automatic exclusion of enrolled accounts' conversations from model training. OpenAI partnered with Yubico to offer discounted bundles of the YubiKey C Nano and C NFC, while any FIDO2/WebAuthn-compliant key or software passkey is supported, mirroring standards adopted by Google, Microsoft, and GitHub. Individual members of Trusted Access for Cyber using the most permissive models must enable the setting from June 1, 2026, or their organizations can attest to phishing-resistant authentication in their single sign-on.

Help Net Security·Aug 24, 04:21 UTC · 23d agoAI industry

Quantifying the Engagement Trap: Impact of Short-form Video Recommender Systems on Users with ADHD

A 302-participant study finds engagement-optimized short-form video recommenders cause disproportionate time blindness and distress for users with ADHD.

Researchers ran a stratified Prolific study with 302 participants comparing short-form video recommendation experiences with and without ADHD. Participants with ADHD reported significantly higher time blindness, post-usage regret, and emotional distress despite perceiving recommendations as similarly relevant. The paper proposes neurodiversity-aware, human-centered design interventions to mitigate these algorithmic harms.

arXiv cs.AI / cs.LG / cs.CL·Sep 7, 17:38 UTC · 8d agoAI research