This highlights the need for browser security solutions that are able to detect and automatically block malicious and unwanted extensions, like the Advanced Browser Security solution by @PerceptionPo1nt.
Full paper here: arxiv.org/pdf/2406.12710
Nice writeup by @schneierblog on the implications of GenAI on phishing. At @PerceptionPo1nt we deployed such models for countering social engineering, including LLM-based detection of malicious intent, visual detection of phishing pages & an autonomous incident response agent
Excited to share that we just launched Hysolate Free - the best way to isolate risky apps/websites/documents, taking the technology behind Windows Sandbox to the next level.
Check it out, it's free forever!
hysolate.com/blog/introducin…
Tal Zamir retweeted
But is this enough to allow their employees to be effective? Unsurprisingly, the answer is no. At the end of the day, Google was forced to allow its workforce to install various apps on their endpoints - such as Zoom and others, exposing their endpoints to potential threats
Another year, another critical remote code execution vulnerability in Chrome/Edge (kudos @XuanwuLab). One visit to the wrong website is all it takes. Time to update your browser (again) and if you're a business - consider isolation. @HysolateNow itnews.com.au/news/update-ch…
Tal Zamir retweeted
We are excited to announce a new #technical #integration with @CyberArk! This integration will enable Hysolate customers to manage access to the Hysolate Management Server through the CyberArk solution!hysolate.com/blog/announcing…
A great talk by @dwizzzleMSFT at #bluehatil . I salute Microsoft for taking on the Herculean task of securing the 5.7 million (!!!) source code *files* of Windows. The only way to win this game is by adopting a security-by-design isolation paradigm.
VDI and DaaS (desktop-as-a-service) are back with Microsoft trying to push Windows Virtual Desktop and with Citrix servers hacked. It's a good time to look at these technologies from the security perspective. More details in our latest post: shorturl.at/wDHI5
Ouch. CVE-2020-0601 means attackers (not just nation state actors) can run any executable on your machine, bypassing code signing. They can also launch man-in-the-middle attacks, reading/modifying your "encrypted" traffic. Hysolate machines are unaffected. @HysolateNow !
This #PatchTuesday you are strongly encouraged to implement the recently released CVE-2020-0601 patch immediately.
media.defense.gov/2020/Jan/1…
Ouch. Anyone on the internet can gain access to critical enterprise systems via Citrix servers. No authentication required. Yet another risk of putting critical Windows apps and desktop on VDI. @HysolateNow
threatpost.com/critical-citr…
App sandboxing isn't enough to stop persistent adversaries: a 0-day in the Chrome sandbox means that a single visit to the wrong website is enough to breach your laptop, data and identity. It's time to switch to VM-based isolation with @HysolateNow.
securelist.com/windows-0-day…
Leveraging Windows "safe mode" is a great way for malware to disable the latest Windows security features... It's impossible to protect an OS like Windows from within Windows. @HysolateNow provides security by design, below the OS.
cbronline.com/news/snatch-ra…
The Windows 7 end of life date is quickly approaching, but can Windows 10 really significantly improve security for enterprise workers? hysolate.com/blog/win10-3-pe…
Kudos @eclypsium for showing how an innocent user-mode app leverages drivers to own your device. Hysolate devices are protected by design against these threats as everything happens in one of a few VMs. @HysolateNow !
eclypsium.com/2019/08/10/scr…
Have you recently played a video via VLC on your laptop? Your machine might be compromised too. We've built Hysolate so that you wouldn't have to worry about any app vulnerability. @HysolateNow
neowin.net/news/german-cyber…
![German cybersecurity agency identifies critical flaw in VLC Media Player [Update]](https://pbs.twimg.com/card_img/2117036727227269120/UvYu-7W4?format=jpg&name=800x419)
Here's another great reason enterprises need comprehensive security on endpoints, security that covers everything that happens on the device, not just sandboxing a few selected apps or detecting known malware. @HysolateNow
medium.com/@jonathan.leitsch…
Where security matters, the US is reverting to the good old "air gap" approach:
forbes.com/sites/kateoflaher…