SecurityTicks

RansomHub Becomes 2024’s Top Ransomware Group, Hitting 600+ Organizations Globally

RansomHub Becomes 2024’s Top Ransomware Group, Hitting 600+ Organizations Globally 2025-02-14 at 13:24 By The threat actors behind the RansomHub ransomware-as-a-service (RaaS) scheme have been observed leveraging now-patched security flaws in Microsoft Active Directory and the Netlogon protocol to escalate privileges and gain unauthorized access to a victim network’s domain controller as part of their […]

RansomHub Becomes 2024’s Top Ransomware Group, Hitting 600+ Organizations Globally Read More »

FBI, CISA Urge Memory-Safe Practices for Software Development 

FBI, CISA Urge Memory-Safe Practices for Software Development  2025-02-14 at 12:20 By Paul Shread In a strongly worded advisory, the FBI and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have urged software developers to cease unsafe development practices that lead to “unforgivable” buffer overflow vulnerabilities.  “Despite the existence of well-documented, effective mitigations for buffer […]

FBI, CISA Urge Memory-Safe Practices for Software Development  Read More »

Watchdog ponders why Apple doesn’t apply its strict app tracking rules to itself

Watchdog ponders why Apple doesn’t apply its strict app tracking rules to itself 2025-02-14 at 11:30 By Jude Karabus Germany’s Federal Cartel Office voices concerns iPhone maker may be breaking competition law Apple is feeling the heat over its acclaimed iPhone privacy policy after a German regulator’s review of iOS tracking consent alleged that the […]

Watchdog ponders why Apple doesn’t apply its strict app tracking rules to itself Read More »

Grip Security unveils SSPM solution to strengthen SaaS security posture

Grip Security unveils SSPM solution to strengthen SaaS security posture 2025-02-14 at 10:46 By Industry News Grip Security has unveiled its SaaS Security Posture Management (SSPM) solution, which proactively identifies misconfigurations, enforces best practices and strengthens SaaS security posture against emerging risks. Unlike traditional SSPM products, Grip SSPM is built on a foundation of visibility […]

Grip Security unveils SSPM solution to strengthen SaaS security posture Read More »

HPE says blocking Juniper buy is a sure Huawei to ensure China and Cisco thrive

HPE says blocking Juniper buy is a sure Huawei to ensure China and Cisco thrive 2025-02-14 at 09:02 By Simon Sharwood Analyst argues stopping the deal benefits Switchzilla by preventing rise of strong challenger for AI networks HPE has fired back at the US Department of Justice’s objection to its takeover of Juniper Networks, with […]

HPE says blocking Juniper buy is a sure Huawei to ensure China and Cisco thrive Read More »

Chinese AI marches on as Baidu makes its chatbot free, Alibaba scores Apple deal

Chinese AI marches on as Baidu makes its chatbot free, Alibaba scores Apple deal 2025-02-14 at 07:30 By Simon Sharwood New ‘Deep Search’ thinking and planning bot to go up against peoples’ champion DeepSeek Chinese AI continued to march onto the world stage this week, with Alibaba and Baidu both taking major strides.… This article […]

Chinese AI marches on as Baidu makes its chatbot free, Alibaba scores Apple deal Read More »

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks 2025-02-14 at 07:22 By Threat actors who were behind the exploitation of a zero-day vulnerability in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products in December 2024 likely also exploited a previously unknown SQL injection flaw in PostgreSQL, according to findings from Rapid7. The […]

PostgreSQL Vulnerability Exploited Alongside BeyondTrust Zero-Day in Targeted Attacks Read More »

Pig butchering scams are exploding

Pig butchering scams are exploding 2025-02-14 at 07:03 By Help Net Security 2024 is set to be a record year for scammers who received at least US$9.9 billion in crypto revenues from their illicit activities, according to Chainalysis. This figure is projected to rise to an all-time high of $12.4 billion as ongoing analysis uncovers […]

Pig butchering scams are exploding Read More »

Inconsistent security strategies fuel third-party threats

Inconsistent security strategies fuel third-party threats 2025-02-14 at 06:36 By Help Net Security 47% of organizations have experienced a data breach or cyberattack over the past 12 months that involved a third-party accessing their network, according to Imprivata and the Ponemon Institute. Third-party security incidents persist Notably, 64% of respondents say these types of third-party […]

Inconsistent security strategies fuel third-party threats Read More »

Lawyers face judge’s wrath after AI cites made-up cases in fiery hoverboard lawsuit

Lawyers face judge’s wrath after AI cites made-up cases in fiery hoverboard lawsuit 2025-02-14 at 06:16 By Thomas Claburn Talk about court red-handed Demonstrating yet again that uncritically trusting the output of generative AI is dangerous, attorneys involved in a product liability lawsuit have apologized to the presiding judge for submitting documents that cite non-existent […]

Lawyers face judge’s wrath after AI cites made-up cases in fiery hoverboard lawsuit Read More »

New infosec products of the week: February 14, 2025

New infosec products of the week: February 14, 2025 2025-02-14 at 06:03 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Armor, EchoMark, Netwrix, Palo Alto Networks, and Socure. Palo Alto Networks Cortex Cloud applies AI-driven insights to reduce risk and prevent threats Palo Alto […]

New infosec products of the week: February 14, 2025 Read More »

Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks

Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks 2025-02-14 at 04:34 By Jessica Lyons Some employees steal sticky notes, others ‘borrow’ malicious code A crew identified as a Chinese government-backed espionage group appears to have started moonlighting as a ransomware player – further evidence that lines are blurring between nation-state cyberspies and financially motivated […]

Chinese spies suspected of ‘moonlighting’ as tawdry ransomware crooks Read More »

After clash over Rust in the Linux kernel, Asahi lead quits, slams ‘failure of leadership’

After clash over Rust in the Linux kernel, Asahi lead quits, slams ‘failure of leadership’ 2025-02-14 at 00:20 By Thomas Claburn I fought the Torv and … the Torv won Hector Martin, project lead of Asahi Linux, resigned early Friday, Japan Standard Time, citing developer burnout, demanding users, and Linus Torvalds’s handling of the integration […]

After clash over Rust in the Linux kernel, Asahi lead quits, slams ‘failure of leadership’ Read More »

Trump admin prepares to change conditions of CHIPS Act and its $39B subsidies: sources

Trump admin prepares to change conditions of CHIPS Act and its $39B subsidies: sources 2025-02-14 at 00:06 By Reuters One of the sources said the White House is also frustrated by companies that accepted CHIPS Act subsidies and then announced significant overseas expansion plans, including in China. The law allowed some investments in China. This […]

Trump admin prepares to change conditions of CHIPS Act and its $39B subsidies: sources Read More »

Hackers Exploit Palo Alto Networks Firewall to Deploy RA World Ransomware

Hackers Exploit Palo Alto Networks Firewall to Deploy RA World Ransomware 2025-02-13 at 23:12 View original post at Safety Detectives A South Asian software company fell victim to a major cyberattack in late 2024 when hackers exploited a critical flaw in Palo Alto Networks’ PAN-OS firewall (CVE-2024-0012). This vulnerability, rated 9.3 on the CVSS scale, […]

Hackers Exploit Palo Alto Networks Firewall to Deploy RA World Ransomware Read More »

Japan Takes Bold Step with Active Cyber Defense Bill

Japan Takes Bold Step with Active Cyber Defense Bill 2025-02-13 at 23:01 View original post at Safety Detectives Japan has officially taken a major step toward strengthening its cybersecurity defenses with the approval of the Active Cyber Defense Bill, a set of laws aimed at preventing cyberattacks before they cause serious damage. The legislation, which […]

Japan Takes Bold Step with Active Cyber Defense Bill Read More »

Scroll to Top