attacks - Security Ticks

Despite rising insider risk costs, budgets are being wasted in the wrong places

attacks, cybersecurity, data breach, Dtex Systems, Gartner, News, Ponemon Institute, remediation, report, risk, Risk Management, social engineering, survey / SecurityTicks

Despite rising insider risk costs, budgets are being wasted in the wrong places 25/09/2023 at 06:02 By Help Net Security The cost of an insider risk is the highest it’s ever been, as organizations spend more time than ever trying to contain insider incidents, according to DTEX Systems. The average annual cost of an insider […]

React to this headline:

Despite rising insider risk costs, budgets are being wasted in the wrong places Read More »

SMEs overestimate their cybersecurity preparedness

attacks, cyber insurance, cybersecurity, data breach, Guardz, MSP, News, report, survey, training / SecurityTicks

SMEs overestimate their cybersecurity preparedness 22/09/2023 at 06:02 By Help Net Security 57% of SMEs have fallen victim to at least one cybersecurity breach, among whom 31% reported that their business experienced a breach within the past 12 months alone, according to Guardz. The increasing number of evolving cyber threats poses a significant risk to

React to this headline:

SMEs overestimate their cybersecurity preparedness Read More »

Hidden dangers loom for subsea cables, the invisible infrastructure of the internet

attacks, critical infrastructure, cyber espionage, cyber resilience, cybersecurity, ENISA, EU, law, News, regulation, report / SecurityTicks

Hidden dangers loom for subsea cables, the invisible infrastructure of the internet 21/09/2023 at 06:32 By Help Net Security More than 97% of the world’s internet traffic passes through subsea cables at some point, according to ENISA. Subsea cables are a vital component of the global internet infrastructure, and it is critical to protect them

React to this headline:

Hidden dangers loom for subsea cables, the invisible infrastructure of the internet Read More »

Enterprises persist with outdated authentication strategies

attacks, authentication, cybercriminals, cybersecurity, dark web, Don't miss, Enzoic, MFA, News, password management, passwordless, passwords, policy, report, strategy, vulnerability assessment / SecurityTicks

Enterprises persist with outdated authentication strategies 15/09/2023 at 07:33 By Help Net Security Despite authentication being a cornerstone of cybersecurity, risk mitigation strategies remain outdated, according to new research from Enzoic. With the attack surface expanding and the increasing sophistication of cyber threats, organizations are struggling to deliver secure and user-friendly authentication. The research uncovered

React to this headline:

Enterprises persist with outdated authentication strategies Read More »

Best practices for implementing a proper backup strategy

attacks, backup, cybersecurity, Don't miss, Hot stuff, Incident Response, Malware, network, Ransomware, strategy, Video, Wasabi / SecurityTicks

Best practices for implementing a proper backup strategy 08/09/2023 at 07:01 By Help Net Security Implementing a robust backup strategy for safeguarding crucial business data is more essential than ever. Without such a plan, organizations risk paying ransoms and incurring expenses related to investigations and lost productivity. In this Help Net Security video, David Boland,

React to this headline:

Best practices for implementing a proper backup strategy Read More »

Connected cars and cybercrime: A primer

attacks, connected cars, cybercrime, cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, exploit, Hot stuff, identity theft, Keylogger, Malware, News, opinion, phishing, VicOne / SecurityTicks

Connected cars and cybercrime: A primer 05/09/2023 at 08:02 By Help Net Security Original equipment suppliers (OEMs) and their suppliers who are weighing how to invest their budgets might be inclined to slow pedal investment in addressing cyberthreats. To date, the attacks that they have encountered have remained relatively unsophisticated and not especially harmful. Analysis

React to this headline:

Connected cars and cybercrime: A primer Read More »

Ransomware attacks go beyond just data

attacks, backup, Cloud, data, ESG, Keepit, News, Ransomware, report, strategy, survey, threat / SecurityTicks

Ransomware attacks go beyond just data 04/09/2023 at 07:01 By Help Net Security 65% of organizations confirmed that ransomware is one of the top three threats to their viability, and for 13%, it is the biggest threat, according to a report by Enterprise Strategy Group (ESG) and Keepit. Organizations’ strategies against ransomware According to the

React to this headline:

Ransomware attacks go beyond just data Read More »

Understand the fine print of your cyber insurance policies

access management, attacks, Compliance, cyber insurance, cybersecurity, Delinea, human error, News, policy, report / SecurityTicks

Understand the fine print of your cyber insurance policies 01/09/2023 at 06:32 By Help Net Security A significant gap is emerging between insurance providers, as organizations skip the fine print and seek affordable and comprehensive coverage, potentially putting them in a tough place when they need to use this safety net, according to a Delinea

React to this headline:

Understand the fine print of your cyber insurance policies Read More »

Is the new OWASP API Top 10 helpful to defenders?

API security, attacks, authentication, automation, bot, Cequence Security, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, OWASP, SSO / SecurityTicks

Is the new OWASP API Top 10 helpful to defenders? 30/08/2023 at 07:32 By Help Net Security The OWASP Foundation’s Top Ten lists have helped defenders focus their efforts with respect to specific technologies and the OWASP API (Application Programming Interface) Security Top 10 2023 is no exception. First drafted five years ago and updated

React to this headline:

Is the new OWASP API Top 10 helpful to defenders? Read More »

Cybersecurity insurance is missing the risk

attacks, cyber insurance, cybersecurity, data breach, Don't miss, Eclipz.io, Expert analysis, Expert corner, Hot stuff, opinion, Ransomware / SecurityTicks

Cybersecurity insurance is missing the risk 25/08/2023 at 08:04 By Help Net Security Cybersecurity insurance is a rapidly growing market, swelling from approximately $13B in 2022 to an estimated $84B in 2030 (26% CAGR), but insurers are struggling with quantifying the potential risks of offering this type of insurance. The traditional actuary models do not

React to this headline:

Cybersecurity insurance is missing the risk Read More »

Cybercriminals turn to AI to bypass modern email security measures

Artificial Intelligence, attacks, BEC scams, cybercriminals, cybersecurity, Email, email security, News, Osterman Research, Perception Point, phishing, report, scams, threats / SecurityTicks

Cybercriminals turn to AI to bypass modern email security measures 23/08/2023 at 06:31 By Help Net Security Cybercriminals employ artificial intelligence (AI) to create complex email threats like phishing and business email compromise (BEC) attacks, while modern email security systems use AI to counter these attacks, according to Perception Point and Osterman Research. AI’s role

React to this headline:

Cybercriminals turn to AI to bypass modern email security measures Read More »

Ransomware: To pay or not to pay

attacks, Barrier Networks, cybersecurity, Don't miss, Expert analysis, Expert corner, extortion, Hot stuff, opinion, Ransomware / SecurityTicks

Ransomware: To pay or not to pay 15/08/2023 at 08:05 By Help Net Security Comprehensive security plans and programs must focus on defense, but also on answering these key question: “How will the organization respond to a ransomware attack?”, and “At what point will the option of paying the ransom be on the table?” What

React to this headline:

Ransomware: To pay or not to pay Read More »

APTs use of lesser-known TTPs are no less of a headache

APT, attacks, Don't miss, Expert analysis, Expert corner, Hot stuff, Malware, opinion, strategy, WithSecure / SecurityTicks

APTs use of lesser-known TTPs are no less of a headache 14/08/2023 at 08:32 By Help Net Security APT (advanced persistent threat) attacks were once considered to be primarily a problem for large corporations, but the number of these (often state-sponsored) attacks against small- and medium-sized businesses has increased significantly. Everyone is fair game, and

React to this headline:

APTs use of lesser-known TTPs are no less of a headache Read More »

Bridging the cybersecurity skills gap through cyber range training

attacks, Cloud Range, critical infrastructure, cyber resilience, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, SOC, threats, training / SecurityTicks

Bridging the cybersecurity skills gap through cyber range training 24/07/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Debbie Gordon, CEO of Cloud Range explains the concept of a cyber range, its crucial role in preparing for real-world cyber threats, and the importance of realism in cyber training scenarios. Gordon also discusses

React to this headline:

Bridging the cybersecurity skills gap through cyber range training Read More »

Attackers intensify DDoS attacks with new tactics

attacks, cybercrime, cybersecurity, DDoS, Gcore, News, report / SecurityTicks

Attackers intensify DDoS attacks with new tactics 21/07/2023 at 07:31 By Help Net Security As we entered 2023, the cybersecurity landscape witnessed an increase in sophisticated, high-volume attacks, according to Gcore. The maximum attack power rose from 600 to 800 Gbps. UDP flood attacks were most common and amounted to 52% of total attacks, while

React to this headline:

Attackers intensify DDoS attacks with new tactics Read More »

67% of daily security alerts overwhelm SOC analysts

attacks, cybersecurity, News, report, SOC, Vectra / SecurityTicks

67% of daily security alerts overwhelm SOC analysts 20/07/2023 at 06:36 By Help Net Security Today’s security operations (SecOps) teams are tasked with protecting progressively sophisticated, fast-paced cyberattacks, according to Vectra AI. Yet, the complexity of people, processes, and technology at their disposal is making cyber defense increasingly unsustainable. The ever-expanding attack surface combined with

React to this headline:

67% of daily security alerts overwhelm SOC analysts Read More »

Exploring the macro shifts in enterprise security

attacks, Cloud, cloud security, cybersecurity, data breach, identity management, News, Ransomware, Scale, supply chain compromise, survey / SecurityTicks

Exploring the macro shifts in enterprise security 20/07/2023 at 06:04 By Help Net Security The number of successful ransomware attacks and data breach attempts fell by 30% over the last year, the number of reported security incident types at organizations increased, according to the 2023 Cybersecurity Perspectives Survey by Scale. Security incident types In fact,

React to this headline:

Exploring the macro shifts in enterprise security Read More »

Real-world examples of quantum-based attacks

attacks, cybersecurity, Don't miss, Hot stuff, quantum computing, strategy, tips, Video / SecurityTicks

Real-world examples of quantum-based attacks 17/07/2023 at 07:02 By Help Net Security Quantum computing is poised to revolutionize the way we secure and privatize data. It can potentially disrupt our existing encryption methods, endangering sensitive data from various sources in ways even beyond what we’ve experienced with AI. In this Help Net Security video, Tommaso

React to this headline:

Real-world examples of quantum-based attacks Read More »

Satellites lack standard security mechanisms found in mobile phones and laptops

attacks, authentication, communication, cybersecurity, News, report, reverse engineering, vulnerability / SecurityTicks

Satellites lack standard security mechanisms found in mobile phones and laptops 14/07/2023 at 07:34 By Help Net Security Researchers from Ruhr University Bochum and the CISPA Helmholtz Center for Information Security in Saarbrücken have assessed the security mechanisms of satellites currently orbiting the Earth from an IT perspective. Moritz Schloegel (left) and Johannes Willbold analyzed

React to this headline:

Satellites lack standard security mechanisms found in mobile phones and laptops Read More »

20% of malware attacks bypass antivirus protection

attacks, cybercrime, cybersecurity, Malware, News, report, SpyCloud, survey / SecurityTicks

20% of malware attacks bypass antivirus protection 13/07/2023 at 07:02 By Help Net Security Security leaders are concerned about attacks that leverage malware-exfiltrated authentication data, with 53% expressing extreme concern and less than 1% admitting they weren’t concerned at all, according to SpyCloud. However, many still lack the necessary tools to investigate the security and

React to this headline:

20% of malware attacks bypass antivirus protection Read More »