cybersecurity - Security Ticks

Enterprises are losing track of the devices inside their networks

cybersecurity, embedded systems, Forescout, hardware, Internet of Things, News, research, vulnerability management / SecurityTicks

Enterprises are losing track of the devices inside their networks 2025-11-06 at 08:37 By Sinisa Markovic Security teams are often surprised when they discover the range and number of devices connected to their networks. The total goes far beyond what appears in agent-based telemetry or old manual asset inventories. Enterprise networks face broader exposure from […]

React to this headline:

Enterprises are losing track of the devices inside their networks Read More »

Humans built the problem, AI just scaled it

Artificial Intelligence, cybersecurity, data loss prevention, data security, email security, News, Proofpoint, report / SecurityTicks

Humans built the problem, AI just scaled it 2025-11-06 at 08:04 By Anamarija Pogorelec Information moves across cloud platforms, personal devices, and AI tools, often faster than security teams can track it. Proofpoint’s 2025 Data Security Landscape report shows that most organizations faced data loss last year, usually caused by their own people. With AI

React to this headline:

Humans built the problem, AI just scaled it Read More »

What shadow AI means for your company’s security

Artificial Intelligence, cybersecurity, Don't miss, News, risk, Video, XM Cyber / SecurityTicks

What shadow AI means for your company’s security 2025-11-06 at 07:45 By Help Net Security In this Help Net Security video, Peled Eldan‏, Head of Research at XM Cyber, explains the hidden risks of shadow AI. He describes how employees often use unapproved AI tools at work to save time or solve problems, even when

React to this headline:

What shadow AI means for your company’s security Read More »

Retailers are learning to say no to ransom demands

cybersecurity, Encryption, extortion, News, Ransomware, report, Retail, Sophos / SecurityTicks

Retailers are learning to say no to ransom demands 2025-11-06 at 07:45 By Anamarija Pogorelec Ransomware remains one of the biggest operational risks for retailers, but the latest data shows a shift in how these attacks unfold. Fewer incidents now lead to data encryption, recovery costs have dropped, and businesses are bouncing back faster. Yet

React to this headline:

Retailers are learning to say no to ransom demands Read More »

PortGPT: How researchers taught an AI to backport security patches automatically

Artificial Intelligence, automation, Canonical, CISO, cybersecurity, DevSecOps, Don't miss, Features, Git, Hot stuff, Linux, LLMs, News, open source, patching, research, strategy, tips / SecurityTicks

PortGPT: How researchers taught an AI to backport security patches automatically 2025-11-05 at 09:07 By Mirko Zorz Keeping older software versions secure often means backporting patches from newer releases. It is a routine but tedious job, especially for large open-source projects such as the Linux kernel. A new research effort has built a tool that

React to this headline:

PortGPT: How researchers taught an AI to backport security patches automatically Read More »

AI can flag the risk, but only humans can close the loop

Artificial Intelligence, Compliance, cybersecurity, digital forensics, Don't miss, Endpoint Security, EY, Features, machine learning, monitoring, News, third party compromise / SecurityTicks

AI can flag the risk, but only humans can close the loop 2025-11-05 at 09:07 By Mirko Zorz In this Help Net Security interview, Dilek Çilingir, Global Forensic & Integrity Services Leader at EY, discusses how AI is transforming third-party assessments and due diligence. She explains how machine learning and behavioral analytics help organizations detect

React to this headline:

AI can flag the risk, but only humans can close the loop Read More »

Connected homes: Is bystander privacy anyone’s responsibility?

CCTV, cybersecurity, Don't miss, Features, hardware, Hot stuff, Internet of Things, News, Privacy, research, smart home, surveillance / SecurityTicks

Connected homes: Is bystander privacy anyone’s responsibility? 2025-11-05 at 09:07 By Sinisa Markovic Smart doorbells, connected cameras, and home monitoring systems have become common sights on doorsteps and living rooms. They promise safety and convenience, but they also raise a problem. These devices record more than their owners. They capture neighbors, visitors, and anyone passing

React to this headline:

Connected homes: Is bystander privacy anyone’s responsibility? Read More »

Google says 2026 will be the year AI supercharges cybercrime

Artificial Intelligence, automation, CISO, cloud security, cybercrime, cybersecurity, Don't miss, Google, Google Cloud, identity management, News, predictions, report / SecurityTicks

Google says 2026 will be the year AI supercharges cybercrime 2025-11-05 at 07:06 By Anamarija Pogorelec Security leaders are staring down a year of major change. In its Cybersecurity Forecast 2026, Google paints a picture of a threat landscape transformed by AI, supercharged cybercrime, and increasingly aggressive nation-state operations. Attackers are moving faster, scaling their

React to this headline:

Google says 2026 will be the year AI supercharges cybercrime Read More »

How nations build and defend their cyberspace capabilities

attacks, CERT, CISO, cyber attribution, cybersecurity, Cyberwarfare, Don't miss, Features, Government, Hot stuff, News, strategy, tips / SecurityTicks

How nations build and defend their cyberspace capabilities 2025-11-04 at 11:54 By Mirko Zorz In this Help Net Security interview, Dr. Bernhards Blumbergs, Lead Cyber Security Expert at CERT.LV, discusses how cyberspace has become an integral part of national and military operations. He explains how countries develop capabilities to act and defend in this domain,

React to this headline:

How nations build and defend their cyberspace capabilities Read More »

Financial services can’t shake security debt

Application Security, cybersecurity, financial industry, News, open source, remediation, report, Veracode / SecurityTicks

Financial services can’t shake security debt 2025-11-04 at 07:30 By Anamarija Pogorelec In financial services, application security risk is becoming a long game. Fewer flaws appear in new code, but old ones linger longer, creating a kind of software “interest” that keeps growing, according to Veracode’s 2025 State of Software Security report. Researchers analyzed data

React to this headline:

Financial services can’t shake security debt Read More »

A new way to think about zero trust for workloads

CISO, cybersecurity, Don't miss, enterprise, Features, framework, Hot stuff, News, OpenID, research, SentinelOne, strategy, Zero Networks, zero trust / SecurityTicks

A new way to think about zero trust for workloads 2025-11-03 at 09:10 By Mirko Zorz Static credentials have been a weak point in cloud security for years. A new paper by researchers from SentinelOne takes direct aim at that issue with a practical model for authenticating workloads without long-lived secrets. Instead of relying on

React to this headline:

A new way to think about zero trust for workloads Read More »

Securing real-time payments without slowing them down

cybersecurity, Don't miss, Features, financial industry, fraud, Hot stuff, identity verification, News, regulation, security controls, Tyro / SecurityTicks

Securing real-time payments without slowing them down 2025-11-03 at 08:00 By Mirko Zorz In this Help Net Security interview, Arun Singh, CISO at Tyro, discusses what it takes to secure real-time payments without slowing them down. He explains how analytics, authentication, and better industry cooperation can help stay ahead of fraud. Singh also touches on

React to this headline:

Securing real-time payments without slowing them down Read More »

Employees keep finding new ways around company access controls

1Password, access control, Artificial Intelligence, cybersecurity, News, passwords, policy, report, SaaS, shadow IT / SecurityTicks

Employees keep finding new ways around company access controls 2025-11-03 at 07:30 By Anamarija Pogorelec AI, SaaS, and personal devices are changing how people get work done, but the tools that protect company systems have not kept up, according to 1Password. Tools like SSO, MDM, and IAM no longer align with how employees and AI

React to this headline:

Employees keep finding new ways around company access controls Read More »

Europe’s phone networks are drowning in fake calls

cybersecurity, EU, Europe, Europol, fraud, law enforcement, News, regulation, report, scams, spoofing / SecurityTicks

Europe’s phone networks are drowning in fake calls 2025-11-03 at 07:00 By Anamarija Pogorelec Caller ID spoofing has become one of Europe’s most persistent enablers of cyber fraud. A new position paper from Europol warns that manipulated phone identities now drive much of the continent’s financial and social engineering crime, making it difficult for law

React to this headline:

Europe’s phone networks are drowning in fake calls Read More »

The secret to audit success? Think like your auditor

Appfire, CISO, cybersecurity, Don't miss, News, security auditing, Video / SecurityTicks

The secret to audit success? Think like your auditor 2025-10-31 at 09:52 By Help Net Security In this Help Net Security video, Doug Kersten, CISO at Appfire, shares practical, experience-driven advice on how CISOs can avoid the most common mistakes when preparing for an audit. He breaks down what often frustrates auditors, why organization and

React to this headline:

The secret to audit success? Think like your auditor Read More »

AI chatbots are sliding toward a privacy crisis

Artificial Intelligence, ChatGPT, CISO, cyber risk, cybersecurity, Don't miss, Features, generative AI, Harmonic, Ivanti, LLMs, News, OpenAI, Privacy, Tanium / SecurityTicks

AI chatbots are sliding toward a privacy crisis 2025-10-31 at 09:00 By Sinisa Markovic AI chat tools are taking over offices, but at what cost to privacy? People often feel anonymous in chat interfaces and may share personal data without realizing the risks. Cybercriminals see the same opening, and it may only be a matter

React to this headline:

AI chatbots are sliding toward a privacy crisis Read More »

You can’t audit how AI thinks, but you can audit what it does

Artificial Intelligence, auditing, CFA Institute, CISO, cybersecurity, Don't miss, Features, financial industry, Hot stuff, News, strategy / SecurityTicks

You can’t audit how AI thinks, but you can audit what it does 2025-10-31 at 08:30 By Mirko Zorz In this Help Net Security interview, Wade Bicknell, Head, IT Security & Operations, CFA Institute, discusses how CISOs can use AI while maintaining security and governance. He explains why AI presents both defensive opportunities and emerging

React to this headline:

You can’t audit how AI thinks, but you can audit what it does Read More »

Passwordless adoption moves from hype to habit

authentication, CISO, cybersecurity, Dashlane, Don't miss, enterprise, News, passwordless, passwords, report, survey / SecurityTicks

Passwordless adoption moves from hype to habit 2025-10-31 at 08:00 By Anamarija Pogorelec With the average person juggling more than 300 credentials and credential abuse still the top attack vector, the password’s decline is long overdue. Across every major sector, organizations are changing how users log in, and new data shows the shift is picking

React to this headline:

Passwordless adoption moves from hype to habit Read More »

Email breaches are the silent killers of business growth

Barracuda Networks, cybersecurity, email security, News, Ransomware, report / SecurityTicks

Email breaches are the silent killers of business growth 2025-10-30 at 07:16 By Anamarija Pogorelec 78% of organizations were hit by an email breach in the past 12 months, according to the Email Security Breach Report 2025 by Barracuda. Phishing, impersonation, and account takeover continue to drive incidents that often lead to ransomware and data

React to this headline:

Email breaches are the silent killers of business growth Read More »

OpenAI’s gpt-oss-safeguard enables developers to build safer AI

cybersecurity, Don't miss, News, OpenAI, software development / SecurityTicks

OpenAI’s gpt-oss-safeguard enables developers to build safer AI 2025-10-29 at 19:07 By Sinisa Markovic OpenAI is releasing a research preview of gpt-oss-safeguard, a set of open-weight reasoning models for safety classification. The models come in two sizes: gpt-oss-safeguard-120b and gpt-oss-safeguard-20b. Both are fine-tuned versions of the gpt-oss open models and available under the Apache 2.0

React to this headline:

OpenAI’s gpt-oss-safeguard enables developers to build safer AI Read More »