May, 2023 - Security Ticks

New Buhti ransomware uses leaked payloads and public exploits

cybercrime, Don't miss, Hot stuff, Linux, Malware, News, Ransomware, Symantec, Windows / SecurityTicks

New Buhti ransomware uses leaked payloads and public exploits 26/05/2023 at 08:09 By Helga Labus A newly identified ransomware operation has refashioned leaked LockBit and Babuk payloads into Buhti ransomware, to launch attacks on both Windows and Linux systems. Use of public exploits One notable aspect of the attackers leveraging the Buhti ransomware is their […]

React to this headline:

New Buhti ransomware uses leaked payloads and public exploits Read More »

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances

Uncategorized / SecurityTicks

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances 26/05/2023 at 08:09 By Email protection and network security services provider Barracuda is warning users about a zero-day flaw that it said has been exploited to breach the company’s Email Security Gateway (ESG) appliances. The zero-day is being tracked as CVE-2023-2868 and has been described as

React to this headline:

Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway Appliances Read More »

New infosec products of the week: May 26, 2023

Axiado, Delinea, Netscout, News, Radware, Veriff / SecurityTicks

New infosec products of the week: May 26, 2023 26/05/2023 at 07:36 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Axiado, Delinea, Netscout, Radware, and Veriff. Delinea Cloud Suite updates reduce the risk of lateral movement in cybersecurity breaches Delinea Cloud Suite updates include

React to this headline:

New infosec products of the week: May 26, 2023 Read More »

Threat actors exploit new channels for advanced phishing attacks

Artificial Intelligence, attacks, BEC scams, browser, Cloud, cloud storage, cybercriminals, Email, Employees, machine learning, News, Perception Point, phishing, report, scams, social engineering / SecurityTicks

Threat actors exploit new channels for advanced phishing attacks 26/05/2023 at 07:36 By Help Net Security Perception Point’s team has identified a 356% increase in the number of advanced phishing attacks attempted by threat actors in 2022. Overall, the total number of attacks increased by 87%, highlighting the growing threat that cyber attacks now pose

React to this headline:

Threat actors exploit new channels for advanced phishing attacks Read More »

Strengthening travel safety protocols with ISO 31030

CISO, Compliance, Don't miss, Everbridge, Hot stuff, opinion, security standard, standards, strategy, tips, travel industry, Video / SecurityTicks

Strengthening travel safety protocols with ISO 31030 26/05/2023 at 07:20 By Help Net Security In this Help Net Security video, Tracy Reinhold, Chief Security Officer at Everbridge, talks about ISO 31030, the officially recognized International Standard for travel risk management, guiding how to manage risks to organizations and travelers. The global pandemic has been the

React to this headline:

Strengthening travel safety protocols with ISO 31030 Read More »

Cybercriminals masquerading as MFA vendors

attacks, cybercriminals, email security, MFA, News, phishing, spam, VIPRE Security / SecurityTicks

Cybercriminals masquerading as MFA vendors 26/05/2023 at 07:20 By Help Net Security Cybercriminals are increasingly posing as multi-factor authentication vendors and small businesses are becoming more popular targets, according to VIPRE. Attachment-based malspam is on the rise Financial institutions (48%) are still the most targeted sector by a wide margin. Insider attacks now take on

React to this headline:

Cybercriminals masquerading as MFA vendors Read More »

Fresh perspectives needed to manage growing vulnerabilities

Cloud, NetSPI, News, NIST, penetration testing, remediation, report, vulnerability / SecurityTicks

Fresh perspectives needed to manage growing vulnerabilities 26/05/2023 at 06:03 By Help Net Security In its inaugural 2023 Offensive Security Vision Report, NetSPI unveils findings that highlight vulnerability trends across applications, cloud, and networks. Vulnerability patterns The report offers a look back — and forward — at some of the most significant vulnerability patterns of

React to this headline:

Fresh perspectives needed to manage growing vulnerabilities Read More »

Media industry cites lack of native security for public cloud issues

Uncategorized / SecurityTicks

Media industry cites lack of native security for public cloud issues 25/05/2023 at 21:33 By A survey found that, while media and entertainment organizations are still relatively new to cloud storage, public cloud storage use is on the rise. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React

React to this headline:

Media industry cites lack of native security for public cloud issues Read More »

Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation

Cybersecurity Funding, funding, Funding/M&A / SecurityTicks

Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation 25/05/2023 at 19:52 By Ionut Arghire Website impersonation detection and prevention company Memcyco raises $10 million in seed funding. The post Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Memcyco Raises $10 Million in Seed Funding to Prevent Website Impersonation Read More »

Earning the “C” in CISO: Staying secure through economic turbulence

Uncategorized / SecurityTicks

Earning the “C” in CISO: Staying secure through economic turbulence 25/05/2023 at 19:33 By With talk of a possible global recession this year, security professionals need to start anticipating the potential impacts to securing their organizations. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Earning the “C” in CISO: Staying secure through economic turbulence Read More »

Invicta Stealer Spreading Through Phony GoDaddy Refund Invoices

Blisk, BraveSoftware, ChromePlus, CocCoc Browser, Coowon, cybercrime, darkweb, Epic Privacy Browser, GoDaddy, Invicta, Iridium, Malware, QIP Surf, Sleipnir, Slimjet, Stealer, Steam, Threat Intelligence / SecurityTicks

Invicta Stealer Spreading Through Phony GoDaddy Refund Invoices 25/05/2023 at 19:16 By cybleinc Cyble Research & Intelligence Labs analyzes Invicta, a new stealer that spreads via fake GoDaddy Refund invoices to infect users. The post Invicta Stealer Spreading Through Phony GoDaddy Refund Invoices appeared first on Cyble. This article is an excerpt from Cyble View

React to this headline:

Invicta Stealer Spreading Through Phony GoDaddy Refund Invoices Read More »

NordPass unveils File Attachments functionality

Industry news, NordPass / SecurityTicks

NordPass unveils File Attachments functionality 25/05/2023 at 19:01 By Industry News NordPass has unveiled that its password manager now offers new features. NordPass Premium users can attach up to 3GB of files to items stored in NordPass. The company is also allowing its customers to customize their password items. The latest addition to NordPass —

React to this headline:

NordPass unveils File Attachments functionality Read More »

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry

Uncategorized / SecurityTicks

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry 25/05/2023 at 18:31 By A new botnet called Dark Frost has been observed launching distributed denial-of-service (DDoS) attacks against the gaming industry. “The Dark Frost botnet, modeled after Gafgyt, QBot, Mirai, and other malware strains, has expanded to encompass hundreds of compromised devices,” Akamai security researcher Allen

React to this headline:

Dark Frost Botnet Launches Devastating DDoS Attacks on Gaming Industry Read More »

Zyxel Issues Critical Security Patches for Firewall and VPN Products

Uncategorized / SecurityTicks

Zyxel Issues Critical Security Patches for Firewall and VPN Products 25/05/2023 at 18:31 By Zyxel has released software updates to address two critical security flaws affecting select firewall and VPN products that could be abused by remote attackers to achieve code execution. Both the flaws – CVE-2023-33009 and CVE-2023-33010 – are buffer overflow vulnerabilities and are rated 9.8 out

React to this headline:

Zyxel Issues Critical Security Patches for Firewall and VPN Products Read More »

Analyzing the NTC Vulkan Leak: What it Says About Russia’s Cyber Capabilities

Uncategorized / SecurityTicks

Analyzing the NTC Vulkan Leak: What it Says About Russia’s Cyber Capabilities 25/05/2023 at 18:02 By Information disclosed in the leaked NTC Vulkan papers allows us to investigate the high probability of cooperation between the Russian private software development company and the Russian Ministry of Defense, namely, the GRU (Sandworm), and possibly others This article

React to this headline:

Analyzing the NTC Vulkan Leak: What it Says About Russia’s Cyber Capabilities Read More »

Tufin R23-1 prevents security blind spots with improved network access automation

Industry news, Tufin / SecurityTicks

Tufin R23-1 prevents security blind spots with improved network access automation 25/05/2023 at 18:02 By Industry News Tufin announced the R23-1 release of its Tufin orchestration platform. The latest release extends security teams’ visibility and control into the cloud, enabling enterprises to better bridge the gaps between network and cloud security. With R23-1, Tufin customers

React to this headline:

Tufin R23-1 prevents security blind spots with improved network access automation Read More »

New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid

CosmicEnergy, Featured, ICS, ICS/OT, OT / SecurityTicks

New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid 25/05/2023 at 17:48 By Eduard Kovacs Mandiant has analyzed a new Russia-linked ICS malware named CosmicEnergy that is designed to cause electric power disruption. The post New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

New Russia-Linked CosmicEnergy ICS Malware Could Disrupt Electric Grid Read More »

Security Pros: Before You Do Anything, Understand Your Threat Landscape

Incident Response, Threat Intelligence / SecurityTicks

Security Pros: Before You Do Anything, Understand Your Threat Landscape 25/05/2023 at 17:48 By Marc Solomon Regardless of the use case your security organization is focused on, you’ll likely waste time and resources and make poor decisions if you don’t start with understanding your threat landscape. The post Security Pros: Before You Do Anything, Understand

React to this headline:

Security Pros: Before You Do Anything, Understand Your Threat Landscape Read More »

Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised

data breach, Data Breaches / SecurityTicks

Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised 25/05/2023 at 17:48 By Associated Press The second-largest health insurer in Massachusetts was the victim of a ransomware attack in which sensitive personal information as well as health information of current and past members may have been compromised. The post Major Massachusetts

React to this headline:

Major Massachusetts Health Insurer Hit by Ransomware Attack, Member Data May Be Compromised Read More »

Cynet Protects Hospital From Lethal Infection

Uncategorized / SecurityTicks

Cynet Protects Hospital From Lethal Infection 25/05/2023 at 17:30 By A hospital with 2,000 employees in the E.U. deployed Cynet protections across its environment. The hospital was in the process of upgrading several expensive imaging systems that were still supported by Windows XP and Windows 7 machines. Cynet protections were in place on most of

React to this headline:

Cynet Protects Hospital From Lethal Infection Read More »

May 2023