cybersecurity - Security Ticks

Outsourcing cybersecurity: How SMBs can make smart moves

Compliance, ConnectWise, cybersecurity, MSP, News, SMBs, strategy, tips / SecurityTicks

Outsourcing cybersecurity: How SMBs can make smart moves 2025-05-23 at 08:32 By Anamarija Pogorelec Outsourcing cybersecurity can be a practical and affordable option. It allows small businesses to get the protection they need without straining their budgets, freeing up time and resources to focus on core operations. 76% of SMBs lack the in-house skills to […]

React to this headline:

Outsourcing cybersecurity: How SMBs can make smart moves Read More »

Shift left strategy creates heavy burden for developers

cybersecurity, News, Pynt, report, software development, survey / SecurityTicks

Shift left strategy creates heavy burden for developers 2025-05-23 at 07:32 By Help Net Security While 47% of organizations claim to have implemented shift left security strategies, many still struggle with execution gaps and security inefficiencies, according to Pynt. Of those who haven’t implemented shift left, half of them have no plans to do so

React to this headline:

Shift left strategy creates heavy burden for developers Read More »

The hidden gaps in your asset inventory, and how to close them

asset discovery, CISO, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, ThingsRecon, tips / SecurityTicks

The hidden gaps in your asset inventory, and how to close them 2025-05-22 at 09:06 By Mirko Zorz In this Help Net Security interview, Tim Grieveson, CSO at ThingsRecon, breaks down the first steps security teams should take to regain visibility, the most common blind spots in asset discovery, and why context should drive risk

React to this headline:

The hidden gaps in your asset inventory, and how to close them Read More »

CTM360 report: Ransomware exploits trust more than tech

CTM360, cybercrime, cybersecurity, Don't miss, Europe, Hot stuff, News, Ransomware, report, UK / SecurityTicks

CTM360 report: Ransomware exploits trust more than tech 2025-05-22 at 08:35 By Anamarija Pogorelec A recent wave of ransomware attacks has disrupted major retailers across the UK. According to a new report from CTM360, the attackers didn’t need to break down the door, they were invited in through misplaced trust and weak identity safeguards. This

React to this headline:

CTM360 report: Ransomware exploits trust more than tech Read More »

Many rush into GenAI deployments, frequently without a security net

Artificial Intelligence, cyber risk, cybersecurity, generative AI, News, report, survey, Thales / SecurityTicks

Many rush into GenAI deployments, frequently without a security net 2025-05-22 at 08:03 By Help Net Security 70% percent of organizations view the pace of AI development, particularly in GenAI, as the leading security concern related to its adoption, followed by lack of data integrity (64%) and trustworthiness (57%), according to Thales. GenAI becomes a

React to this headline:

Many rush into GenAI deployments, frequently without a security net Read More »

Be careful what you share with GenAI tools at work

Artificial Intelligence, cyber risk, cybersecurity, generative AI, Ivanti, Netskope, News, Snow Software, WitnessAI / SecurityTicks

Be careful what you share with GenAI tools at work 2025-05-22 at 07:04 By Sinisa Markovic We use GenAI at work to make tasks easier, but are we aware of the risks? According to Netskope, the average organization now shares more than 7.7GB of data with AI tools per month, and 75% of enterprise users

React to this headline:

Be careful what you share with GenAI tools at work Read More »

What good threat intelligence looks like in practice

CISO, cybersecurity, Cyware, Don't miss, Features, Hot stuff, News, opinion, strategy, Threat Intelligence, tips / SecurityTicks

What good threat intelligence looks like in practice 2025-05-21 at 08:32 By Mirko Zorz In this Help Net Security interview, Anuj Goel, CEO of Cyware, discusses how threat intelligence is no longer a nice to have, it’s a core cyber defense requirement. But turning intelligence into action remains a challenge for many organizations. The path

React to this headline:

What good threat intelligence looks like in practice Read More »

Nation-state APTs ramp up attacks on Ukraine and the EU

China, cyber espionage, cybersecurity, ESET, EU, News, North Korea, report, Russian Federation, survey, Ukraine / SecurityTicks

Nation-state APTs ramp up attacks on Ukraine and the EU 2025-05-21 at 07:02 By Help Net Security Russian APT groups intensified attacks against Ukraine and the EU, exploiting zero-day vulnerabilities and deploying wipers, according to ESET. Ukraine faces rising cyber threats The Russia-aligned Sandworm group intensified destructive operations against Ukrainian energy companies, deploying a new

React to this headline:

Nation-state APTs ramp up attacks on Ukraine and the EU Read More »

Closing security gaps in multi-cloud and SaaS environments

Cloud, cloud security, collaboration, cybersecurity, Don't miss, Features, Hot stuff, News, Qualys, SaaS, strategy / SecurityTicks

Closing security gaps in multi-cloud and SaaS environments 2025-05-20 at 09:06 By Mirko Zorz In this Help Net Security interview, Kunal Modasiya, SVP, Product Management, GTM, and Growth at Qualys, discusses recent Qualys research on the state of cloud and SaaS security. He talks about how siloed visibility, fragmented tools, and a lack of incident

React to this headline:

Closing security gaps in multi-cloud and SaaS environments Read More »

Containers are just processes: The illusion of namespace security

containers, cybersecurity, Don't miss, Edera, Expert analysis, Expert corner, Hot stuff, Kubernetes, Linux, News, open source, opinion / SecurityTicks

Containers are just processes: The illusion of namespace security 2025-05-20 at 08:31 By Help Net Security In the early days of commercial open source, major vendors cast doubt on its security, claiming transparency was a flaw. In fact, that openness fueled strong communities and faster security improvements, making OSS often more secure than proprietary code.

React to this headline:

Containers are just processes: The illusion of namespace security Read More »

AI voice hijacking: How well can you trust your ears?

cybercrime, cybersecurity, deepfakes, Don't miss, News, scams, tips / SecurityTicks

AI voice hijacking: How well can you trust your ears? 2025-05-20 at 07:32 By Sinisa Markovic How sure are you that you can recognize an AI-cloned voice? If you think you’re completely certain, you might be wrong. Why it’s a growing threat With only three seconds of audio, criminals can now clone a person’s voice,

React to this headline:

AI voice hijacking: How well can you trust your ears? Read More »

CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide

CTM360, cybercrime, cybersecurity, Don't miss, Hot stuff, News, phishing, report, scams / SecurityTicks

CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide 2025-05-19 at 16:50 By Anamarija Pogorelec A phishing operation that targets corporate banking accounts across the globe has been analyzed in a new report by CTM360. The campaign uses fake Google ads, advanced filtering techniques, to steal sensitive login credentials and bypass MFA. Researchers uncovered

React to this headline:

CTM360 maps out real-time phishing infrastructure targeting corporate banking worldwide Read More »

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel

cybersecurity, Don't miss, framework, Hot stuff, MITRE, MITRE ATT&CK, News, Video / SecurityTicks

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel 2025-05-19 at 07:04 By Help Net Security In this Help Net Security video, Adam Pennington, MITRE ATT&CK Lead, breaks down what’s new in the ATT&CK v17 release. He highlights the addition of the ESXi platform, new and updated techniques for Linux, refinements to mitigation guidance, and

React to this headline:

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel Read More »

Deepfake attacks could cost you more than money

Artificial Intelligence, cybersecurity, deepfakes, Don't miss, Features, Hot stuff, Incident Response, News, policy, X-PHY / SecurityTicks

Deepfake attacks could cost you more than money 2025-05-16 at 09:04 By Mirko Zorz In this Help Net Security interview, Camellia Chan, CEO at X-PHY, discusses the dangers of deepfakes in real-world incidents, including their use in financial fraud and political disinformation. She explains AI-driven defense strategies and recommends updating incident response plans and internal

React to this headline:

Deepfake attacks could cost you more than money Read More »

Polymorphic phishing attacks flood inboxes

cybercrime, cybersecurity, News, phishing, report, survey / SecurityTicks

Polymorphic phishing attacks flood inboxes 2025-05-16 at 08:31 By Help Net Security AI is transforming the phishing threat landscape at a pace many security teams are struggling to match, according to Cofense. In 2024, researchers tracked one malicious email every 42 seconds. Many of the 42-second attacks were part of polymorphic phishing attacks. Unlike traditional

React to this headline:

Polymorphic phishing attacks flood inboxes Read More »

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed

cybersecurity, framework, News, OpenSSF, The Linux Foundation / SecurityTicks

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed 2025-05-16 at 08:08 By Help Net Security The Linux Foundation, in collaboration with OpenSSF and Linux Foundation Education, has released the Cybersecurity Skills Framework, a global reference guide that helps organizations identify and address critical cybersecurity competencies across a broad

React to this headline:

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed Read More »

How working in a stressful environment affects cybersecurity

burnout, CyberArk, cybersecurity, News, SANS, tips / SecurityTicks

How working in a stressful environment affects cybersecurity 2025-05-16 at 07:48 By Sinisa Markovic Stressful work environments don’t just erode morale, they can quietly undermine cybersecurity. When employees feel overworked, unsupported, or mistreated, their judgment and decision-making suffer. “From an organizational perspective, a toxic culture often leads to increased errors, missed threats, decreased productivity, and

React to this headline:

How working in a stressful environment affects cybersecurity Read More »

Building cybersecurity culture in science-driven organizations

CISO, collaboration, cybersecurity, Don't miss, Features, Hot stuff, News, Novonesis, standards, strategy, tips / SecurityTicks

Building cybersecurity culture in science-driven organizations 2025-05-15 at 08:31 By Mirko Zorz In this Help Net Security interview, Anne Sofie Roed Rasmussen, CISO at Novonesis, discusses how a science-driven organization approaches cybersecurity, aligning innovation with protection, measuring cultural progress, managing shadow IT, and earning trust from scientific leaders. How do you measure progress when it

React to this headline:

Building cybersecurity culture in science-driven organizations Read More »

How Kim Crawley challenges big tech in “Digital Safety in a Dangerous World”

books, cybersecurity, Don't miss, generative AI, Hot stuff, News, opinion, Privacy, tips / SecurityTicks

How Kim Crawley challenges big tech in “Digital Safety in a Dangerous World” 2025-05-15 at 07:34 By Mirko Zorz In this Help Net Security interview, Kim Crawley, cybersecurity expert and Professor at the Open Institute of Technology, discusses her upcoming book Digital Safety in a Dangerous World, which will feature her expert advice, as well

React to this headline:

How Kim Crawley challenges big tech in “Digital Safety in a Dangerous World” Read More »

Southwest Airlines CISO on tackling cyber risks in the aviation industry

CISO, critical infrastructure, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, strategy, travel industry / SecurityTicks

Southwest Airlines CISO on tackling cyber risks in the aviation industry 2025-05-14 at 08:33 By Mirko Zorz In this Help Net Security interview, Carrie Mills, VP and CISO, Southwest Airlines talks about the cybersecurity challenges facing the aviation industry. She explains how being part of critical infrastructure, a major consumer brand, and an airline each

React to this headline:

Southwest Airlines CISO on tackling cyber risks in the aviation industry Read More »