cyber risk - Security Ticks

Most GitHub Actions workflows are insecure in some way

cyber risk, cybersecurity, GitHub, Legit Security, News, report, survey / SecurityTicks

Most GitHub Actions workflows are insecure in some way 2024-07-17 at 06:01 By Help Net Security Most GitHub Actions are susceptible to exploitation; they are overly privileged or have risky dependencies, according to Legit Security. GitHub Actions security flaws pose major risks The report found the GitHub Actions marketplace’s security posture to be especially concerning, […]

React to this headline:

Most GitHub Actions workflows are insecure in some way Read More »

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices

Compliance, cyber risk, cybersecurity, Don't miss, Endor Labs, Hot stuff, how-to, News, strategy, tips, Video / SecurityTicks

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices 2024-07-09 at 06:31 By Help Net Security Shadow engineering is present in many organizations, and it can lead to security, compliance, and risk challenges. In this Help Net Security video, Darren Meyer, Staff Research Engineer at Endor Labs, discusses why it causes issues and how

React to this headline:

Shadow engineering exposed: Addressing the risks of unauthorized engineering practices Read More »

Organizations weigh the risks and rewards of using AI

AuditBoard, cyber risk, cybersecurity, News, report, survey / SecurityTicks

Organizations weigh the risks and rewards of using AI 2024-07-05 at 06:31 By Help Net Security 78% of organizations are tracking AI as an emerging risk while simultaneously adopting the technology themselves, according to AuditBoard. Organizations prioritize AI risk assessment The report, based on a survey of over 400 security professionals in the US involved

React to this headline:

Organizations weigh the risks and rewards of using AI Read More »

Organizations use outdated approaches to secure APIs

Cloudflare, cyber risk, cybersecurity, News, report, survey / SecurityTicks

Organizations use outdated approaches to secure APIs 2024-07-04 at 06:31 By Help Net Security Security teams are struggling to keep pace with the risks posed by organizations’ dependency on modern applications—the technology that underpins all of today’s most used sites, according to Cloudflare. The report underscores that the volume of threats stemming from issues in

React to this headline:

Organizations use outdated approaches to secure APIs Read More »

Find out which cybersecurity threats organizations fear the most

Check Point, Code42, ConnectWise, cyber risk, CyberArk, cybersecurity, Don't miss, Entrust, Hot stuff, Jumio, McAfee, Mimecast, News, Ping Identity, Proofpoint, report, survey, Trellix, Veeam Software / SecurityTicks

Find out which cybersecurity threats organizations fear the most 2024-06-19 at 06:31 By Help Net Security This article compiles excerpts from various reports, presenting statistics and insights on cybersecurity threats faced by businesses and individuals alike. Cyber insurance isn’t the answer for ransom payments Veeam | 2024 Ransomware Trends Report | June 2024 Ransomware remains

React to this headline:

Find out which cybersecurity threats organizations fear the most Read More »

Third-party vendors pose serious cybersecurity threat to national security

cyber risk, cybersecurity, Don't miss, Hot stuff, Ransomware, SecurityScorecard, third party compromise, threat, Video / SecurityTicks

Third-party vendors pose serious cybersecurity threat to national security 2024-06-04 at 07:01 By Help Net Security In this Help Net Security video, Paul Prudhomme, Principal Security Analyst at SecurityScorecard, discusses the findings of the 2024 Redefining Resilience: Concentrated Cyber Risk in a Global Economy Research report. This research details a surge in adversaries exploiting third-party

React to this headline:

Third-party vendors pose serious cybersecurity threat to national security Read More »

Worried about job security, cyber teams hide security incidents

cyber risk, cybersecurity, generative AI, News, report, survey, VikingCloud / SecurityTicks

Worried about job security, cyber teams hide security incidents 2024-05-24 at 07:01 By Help Net Security The frequency and severity of cyberattacks are increasing—yet most businesses remain unprepared, according to VikingCloud. Between a growing talent shortage, alert fatigue, and new sophisticated attack methods, companies are more susceptible than ever. The research reveals that 40% of

React to this headline:

Worried about job security, cyber teams hide security incidents Read More »

Technological complexity drives new wave of identity risks

ConductorOne, cyber risk, cybersecurity, data breach, identity, News, report, survey / SecurityTicks

Technological complexity drives new wave of identity risks 2024-05-22 at 06:01 By Help Net Security Security leaders are facing increased technological and organizational complexity, which is creating a new wave of identity risks for their organizations, according to ConductorOne. Based on a survey of 523 US-based IT security leaders at companies with 250 to 10,000

React to this headline:

Technological complexity drives new wave of identity risks Read More »

Understanding cyber risks beyond data breaches

Aqua Security, Bitdefender, cyber risk, cybersecurity, Imperva, Seraphic, Tanium, Video / SecurityTicks

Understanding cyber risks beyond data breaches 2024-05-20 at 06:01 By Help Net Security While some may associate cyber risks primarily with technology and data breaches, they can also lead to brand or reputational harm, reduced productivity, and financial losses. This Help Net Security round-up presents excerpts from previously recorded videos featuring security experts covering a

React to this headline:

Understanding cyber risks beyond data breaches Read More »

51% of enterprises experienced a breach despite large security stacks

CISO, cyber risk, cybersecurity, News, penetration testing, Pentera, report, survey / SecurityTicks

51% of enterprises experienced a breach despite large security stacks 2024-04-19 at 06:31 By Help Net Security Threat actors are continuing to successfully breach across the entire attack surface and the stakes are only getting higher: 93% of enterprises who admitted a breach reported unplanned downtime, data exposure, or financial loss as a result, according

React to this headline:

51% of enterprises experienced a breach despite large security stacks Read More »

73% brace for cybersecurity impact on business in the next year or two

Cisco, cyber risk, cybersecurity, News, report, strategy, survey / SecurityTicks

73% brace for cybersecurity impact on business in the next year or two 2024-04-02 at 06:31 By Help Net Security Only 3% of organizations across the globe have the ‘mature’ level of readiness needed to be resilient against modern cybersecurity risks, according to Cisco. The 2024 Cisco Cybersecurity Readiness Index highlights that readiness is down

React to this headline:

73% brace for cybersecurity impact on business in the next year or two Read More »

Advanced cybersecurity strategies boost shareholder returns

BitSight, boardroom, cyber risk, cybersecurity, data breach, Diligent, News, regulation, report, strategy / SecurityTicks

Advanced cybersecurity strategies boost shareholder returns 2024-03-29 at 07:01 By Help Net Security Companies demonstrating advanced cybersecurity performance generate a shareholder return that is 372% higher than their peers with basic cybersecurity performance, according to a new report from Diligent and Bitsight. Boards under pressure to fortify cyber oversight The escalation in the frequency and

React to this headline:

Advanced cybersecurity strategies boost shareholder returns Read More »

Immediate AI risks and tomorrow’s dangers

Artificial Intelligence, BSidesZG, ChatGPT, cyber risk, cyberattack, Don't miss, generative AI, GitGuardian, Hot stuff, LLMs, News, threat / SecurityTicks

Immediate AI risks and tomorrow’s dangers 2024-03-08 at 08:37 By Helga Labus “At the most basic level, AI has given malicious attackers superpowers,” Mackenzie Jackson, developer and security advocate at GitGuardian, told the audience last week at Bsides Zagreb. These superpowers are most evident in the growing impact of fishing, smishing and vishing attacks since

React to this headline:

Immediate AI risks and tomorrow’s dangers Read More »

The importance of a good API security strategy

API security, cyber risk, Don't miss, Hot stuff, News, software development, strategy, threats / SecurityTicks

The importance of a good API security strategy 2024-02-21 at 06:32 By Helga Labus In 2024, API requests accounted for 57% of dynamic internet traffic around the globe, according to the Cloudflare 2024 API Security & Management Report, confirming that APIs are a crucial component of modern software development. But with their increased adoption over

React to this headline:

The importance of a good API security strategy Read More »

Common cloud security mistakes and how to avoid them

cloud security, cyber risk, Data Protection, Don't miss, Hot stuff, misconfiguration, News, strategy, threats, tips / SecurityTicks

Common cloud security mistakes and how to avoid them 2024-02-07 at 08:01 By Helga Labus According to recent surveys, 98% of organizations keep their financial, business, customer and/or employee information in the cloud but, at the same time, 95% of cloud security professionals are not sure their security protections and their team would manage to

React to this headline:

Common cloud security mistakes and how to avoid them Read More »

Third-party risk management best practices and why they matter

cyber resilience, cyber risk, Don't miss, Hot stuff, News, Risk Management, third party compromise, tips / SecurityTicks

Third-party risk management best practices and why they matter 2024-01-29 at 08:01 By Helga Labus With organizations increasingly relying on third-party vendors, upping the third-party risk management (TPRM) game has become imperative to prevent the fallout of third-party compromises. Third-party risks SecurityScorecard recently found that 98% of organizations are connected with at least one third-party

React to this headline:

Third-party risk management best practices and why they matter Read More »

Fighting insider threats is tricky but essential work

cyber risk, Don't miss, enterprise, Hot stuff, human error, Insider Threat, News / SecurityTicks

Fighting insider threats is tricky but essential work 2024-01-25 at 08:01 By Helga Labus Business executives are worried about accidental internal staff error (71%) almost as much as they are worried about external threats (75%). But which of the two is a bigger threat to a company? External vs insider threats External threats can cause

React to this headline:

Fighting insider threats is tricky but essential work Read More »

2024 brings new risks, with cyber incidents in the spotlight

Allianz, cyber risk, cybersecurity, data breach, News, report, survey / SecurityTicks

2024 brings new risks, with cyber incidents in the spotlight 2024-01-23 at 06:31 By Help Net Security Cyber incidents such as ransomware attacks, data breaches, and IT disruptions are the biggest worry for companies globally in 2024, according to Allianz. The closely interlinked peril of business interruption ranks second. Natural catastrophes (up from #6 to

React to this headline:

2024 brings new risks, with cyber incidents in the spotlight Read More »

The reality of hacking threats in connected car systems

automotive security, car hacking, Compliance, connected cars, cyber risk, cybersecurity, data theft, Don't miss, Features, Hot stuff, IOActive, News, opinion, regulation, standards, supply chain / SecurityTicks

The reality of hacking threats in connected car systems 2024-01-22 at 07:31 By Mirko Zorz With the integration of sophisticated technologies like over-the-air updates and increased data connectivity, cars are no longer just modes of transportation but also hubs of personal and operational data. This shift brings forth unique cybersecurity challenges, ranging from hacking and

React to this headline:

The reality of hacking threats in connected car systems Read More »

The power of AI in cybersecurity

Artificial Intelligence, cyber risk, cybersecurity, Don't miss, generative AI, Hot stuff, machine learning, News, threat detection / SecurityTicks

The power of AI in cybersecurity 2024-01-18 at 06:31 By Helga Labus The widespread adoption of artificial intelligence (AI), particularly generative AI (GenAI), has revolutionized organizational landscapes and transformed both the cyber threat landscape and cybersecurity. AI as a powerful cybersecurity tool As organizations handle increasing amounts of data daily, AI offers advanced capabilities that

React to this headline:

The power of AI in cybersecurity Read More »