2025 - Security Ticks

DeepSeek’s popularity exploited by malware peddlers, scammers

Artificial Intelligence, China, consumer, data security, DeepSeek, Don't miss, enterprise, Hot stuff, KELA, LLMs, Malware, News, Privacy, threat / SecurityTicks

DeepSeek’s popularity exploited by malware peddlers, scammers 2025-01-29 at 15:18 By Zeljka Zorz As US-based AI companies struggle with the news that the recently released Chinese-made open source DeepSeek-R1 reasoning model performs as well as theirs for a fraction of the cost, users are rushing to try out DeepSeek’s AI tool. In the process, they […]

React to this headline:

New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems

ICS Vulnerabilities, vulnerability / SecurityTicks

New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems 2025-01-29 at 15:03 By daksh sharma Overview The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued two urgent advisories regarding serious ICS vulnerabilities in industrial control systems (ICS) products. These ICS vulnerabilities, identified in Schneider Electric’s RemoteConnect and SCADAPack x70 Utilities, as well as

React to this headline:

New ICS Vulnerabilities Discovered in Schneider Electric and B&R Automation Systems Read More »

New SLAP and FLOP CPU Attacks Expose Data From Apple Computers, Phones

apple, CPU vulnerability, Endpoint Security, FLOP, side-channel attack, SLAP / SecurityTicks

New SLAP and FLOP CPU Attacks Expose Data From Apple Computers, Phones 2025-01-29 at 14:48 By Eduard Kovacs New CPU side-channel attacks named SLAP and FLOP can be exploited to remotely steal data from Apple mobile and desktop devices. The post New SLAP and FLOP CPU Attacks Expose Data From Apple Computers, Phones appeared first

React to this headline:

New SLAP and FLOP CPU Attacks Expose Data From Apple Computers, Phones Read More »

‘Bro delete the chat’: Feel the panic shortly before cops bust major online fraud ring

Uncategorized / SecurityTicks

‘Bro delete the chat’: Feel the panic shortly before cops bust major online fraud ring 2025-01-29 at 14:33 By Connor Jones Mastermind begs colluders to bury evidence later used to imprison him In announcing the sentencing of three Brits who ran OTP Agency, an account-takeover business, the National Crime Agency (NCA) revealed how a 2021

React to this headline:

‘Bro delete the chat’: Feel the panic shortly before cops bust major online fraud ring Read More »

Security research discovers vulnerabilities in popular travel service

Uncategorized / SecurityTicks

Security research discovers vulnerabilities in popular travel service 2025-01-29 at 14:18 By An account takeover vulnerability has been discovered in a popular online travel service. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source React to this headline:

React to this headline:

Security research discovers vulnerabilities in popular travel service Read More »

Aquabot Botnet Targeting Vulnerable Mitel Phones

Aquabot, botnet, exploited, Malware & Threats, Mirai, Mitel / SecurityTicks

Aquabot Botnet Targeting Vulnerable Mitel Phones 2025-01-29 at 14:18 By Ionut Arghire The Mirai-based Aquabot botnet has been targeting a vulnerability in Mitel SIP phones for which a proof-of-concept (PoC) exploit exists. The post Aquabot Botnet Targeting Vulnerable Mitel Phones appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Aquabot Botnet Targeting Vulnerable Mitel Phones Read More »

Smiths Group Scrambling to Restore Systems Following Cyberattack

cyberattack, cybercrime, Smiths / SecurityTicks

Smiths Group Scrambling to Restore Systems Following Cyberattack 2025-01-29 at 14:03 By Ionut Arghire Engineering firm Smiths Group has disclosed a cyberattack that forced it to take some systems offline and activate business continuity plans. The post Smiths Group Scrambling to Restore Systems Following Cyberattack appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Smiths Group Scrambling to Restore Systems Following Cyberattack Read More »

AI in Cybersecurity: What’s Effective and What’s Not – Insights from 200 Experts

Uncategorized / SecurityTicks

AI in Cybersecurity: What’s Effective and What’s Not – Insights from 200 Experts 2025-01-29 at 14:03 By Curious about the buzz around AI in cybersecurity? Wonder if it’s just a shiny new toy in the tech world or a serious game changer? Let’s unpack this together in a not-to-be-missed webinar that goes beyond the hype

React to this headline:

AI in Cybersecurity: What’s Effective and What’s Not – Insights from 200 Experts Read More »

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits

Uncategorized / SecurityTicks

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits 2025-01-29 at 14:03 By A team of security researchers from Georgia Institute of Technology and Ruhr University Bochum has demonstrated two new side-channel attacks targeting Apple silicon that could be exploited to leak sensitive information from web browsers like Safari and Google

React to this headline:

New SLAP & FLOP Attacks Expose Apple M-Series Chips to Speculative Execution Exploits Read More »

Hyperoptic customers left in dark as power outage takes down systems

Uncategorized / SecurityTicks

Hyperoptic customers left in dark as power outage takes down systems 2025-01-29 at 13:45 By Richard Speed What falls down and doesn’t get back up? Full fiber broadband in Glasgow UK broadband provider Hyperoptic has taken a long weekend, leaving some customers disconnected after the company’s systems went down following a storm.… This article is

React to this headline:

Hyperoptic customers left in dark as power outage takes down systems Read More »

Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products

ICS, ICS/OT, Rockwell Automation / SecurityTicks

Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products 2025-01-29 at 13:33 By Eduard Kovacs Rockwell Automation has released six new security advisories to inform customers about several critical and high-severity vulnerabilities. The post Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products Read More »

Oracle finance system at Europe’s largest city council still falls short 2.5 years later

Uncategorized / SecurityTicks

Oracle finance system at Europe’s largest city council still falls short 2.5 years later 2025-01-29 at 13:16 By Lindsay Clark Auditors find solution design ‘was not fully resolved’ when it went live in 2022 An Oracle-based ERP system used by Europe’s largest local authority is still not “safe and compliant” two-and-a-half years after it went

React to this headline:

Oracle finance system at Europe’s largest city council still falls short 2.5 years later Read More »

Cyber Insights 2025: Artificial Intelligence

Artificial Intelligence, CyberInsights2024, CyberInsights2025, Featured, Risk Management / SecurityTicks

Cyber Insights 2025: Artificial Intelligence 2025-01-29 at 13:15 By Kevin Townsend Artificial intelligence is upending cybersecurity. It is used by adversaries in their attacks, and by defenders in their defense. The post Cyber Insights 2025: Artificial Intelligence appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Cyber Insights 2025: Artificial Intelligence Read More »

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network

Australia, Australian Government, cyber news, cyberattack, HCSN, Health Cyber Sharing Network / SecurityTicks

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network 2025-01-29 at 12:48 By daksh sharma The Australian Government has awarded a $6.4 million grant to CI-ISAC Australia, enabling the establishment of a new Health Cyber Sharing Network (HCSN). This initiative is designed to facilitate the rapid exchange of critical cyber threat

React to this headline:

Australia’s Health Sector Receives $6.4 Million Cybersecurity Boost with New Threat Information-Sharing Network Read More »

SimpleHelp Remote Access Software Exploited in Attacks

exploited, Identity & Access, remote access, SimpleHelp, Vulnerabilities / SecurityTicks

SimpleHelp Remote Access Software Exploited in Attacks 2025-01-29 at 12:48 By Ionut Arghire Threat actors have been exploiting SimpleHelp remote access software shortly after the disclosure of three vulnerabilities. The post SimpleHelp Remote Access Software Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this

React to this headline:

SimpleHelp Remote Access Software Exploited in Attacks Read More »

How Interlock Ransomware Infects Healthcare Organizations

Uncategorized / SecurityTicks

How Interlock Ransomware Infects Healthcare Organizations 2025-01-29 at 12:48 By Ransomware attacks have reached an unprecedented scale in the healthcare sector, exposing vulnerabilities that put millions at risk. Recently, UnitedHealth revealed that 190 million Americans had their personal and healthcare data stolen during the Change Healthcare ransomware attack, a figure that nearly doubles the previously

React to this headline:

How Interlock Ransomware Infects Healthcare Organizations Read More »

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution

Uncategorized / SecurityTicks

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution 2025-01-29 at 12:48 By A critical security flaw has been disclosed in the Cacti open-source network monitoring and fault management framework that could allow an authenticated attacker to achieve remote code execution on susceptible instances. The flaw, tracked as CVE-2025-22604, carries a CVSS score of 9.1

React to this headline:

Critical Cacti Security Flaw (CVE-2025-22604) Enables Remote Code Execution Read More »

Ubuntu upgrade had our old Nvidia GPU begging for a downgrade

Uncategorized / SecurityTicks

Ubuntu upgrade had our old Nvidia GPU begging for a downgrade 2025-01-29 at 12:18 By Liam Proven If you need legacy drivers, you might want to keep your older OS version – possibly indefinitely The Reg FOSS desk spent some quality time downgrading Ubuntu to restore graphics acceleration. How and why would we do this?…

React to this headline:

Ubuntu upgrade had our old Nvidia GPU begging for a downgrade Read More »

AuthID PrivacyKey protects users’ biometric identities

authID.ai, Industry news / SecurityTicks

AuthID PrivacyKey protects users’ biometric identities 2025-01-29 at 11:49 By Industry News authID released PrivacyKey, a solution for protecting user biometric data while also avoiding all the compliance issues and risks related to biometric information storage. With the addition of PrivacyKey, authID serves as the ideal partner for organizations that previously delayed or avoided implementation

React to this headline:

AuthID PrivacyKey protects users’ biometric identities Read More »

Frenos Raises $3.88M in Seed Funding for OT Security Assessment Platform

Cybersecurity Funding, Frenos, funding, ICS/OT, OT, seed funding / SecurityTicks

Frenos Raises $3.88M in Seed Funding for OT Security Assessment Platform 2025-01-29 at 11:49 By Eduard Kovacs Frenos, a company that has developed an autonomous OT security assessment platform, has raised $3.88 million in seed funding. The post Frenos Raises $3.88M in Seed Funding for OT Security Assessment Platform appeared first on SecurityWeek. This article

React to this headline:

Frenos Raises $3.88M in Seed Funding for OT Security Assessment Platform Read More »