cybersecurity - Security Ticks

The fragmented nature of API security ownership

API security, cybersecurity, Industry news, Traceable AI / SecurityTicks

The fragmented nature of API security ownership 23/05/2023 at 06:34 By Help Net Security While API security remains a top cybersecurity concern this year, there is still an alarming lack of implementation for most companies, according to Traceable AI. Companies overlook API security Companies are struggling with unchecked API sprawl, lack of clarity on who […]

React to this headline:

The fragmented nature of API security ownership Read More »

Online scams target bargain-hunting holiday travelers

cybercrime, cybersecurity, fraud, McAfee, News / SecurityTicks

Online scams target bargain-hunting holiday travelers 23/05/2023 at 06:01 By Help Net Security 30% of adults have fallen victim or know someone who has fallen victim to an online scam while trying to save money when booking travel, according to McAfee. 34% of those who had money stolen have lost over $1,000 before their trip

React to this headline:

Online scams target bargain-hunting holiday travelers Read More »

What flying a plane can teach you about cybersecurity

CISO, cybersecurity, News, podcast, strategy, tips, travel industry / SecurityTicks

What flying a plane can teach you about cybersecurity 22/05/2023 at 06:12 By Help Net Security Before taking on the role as GM of IAI’s cyber division, Esti Peshin was a member of Israel’s parliament, wielding both legislation and regulation to strengthen the country’s renowned high-tech ecosystem. Despite her commitments, Esti shared with the Left

React to this headline:

What flying a plane can teach you about cybersecurity Read More »

Inadequate tools leave AppSec fighting an uphill battle for cloud security

Application Security, Backslash Security, cloud security, cybersecurity, News, report, vulnerability management / SecurityTicks

Inadequate tools leave AppSec fighting an uphill battle for cloud security 19/05/2023 at 06:32 By Help Net Security AppSec teams are stuck in a catch-up cycle, unable to keep up with the increasingly rapid, agile dev pace, and playing security defense via an endless and unproductive vulnerability chase, according to Backslash Security. Costly ‘defensive tax’

React to this headline:

Inadequate tools leave AppSec fighting an uphill battle for cloud security Read More »

Organizations’ cyber resilience efforts fail to keep up with evolving threats

CISO, cyber resilience, cyber risk, cyberattacks, cybersecurity, Immersive Labs, News, report, Risk Management / SecurityTicks

Organizations’ cyber resilience efforts fail to keep up with evolving threats 18/05/2023 at 08:00 By Help Net Security A steady increase in cyberattacks and evolving threat landscape are resulting in more organizations turning their attention to building long-term cyber resilience; however, many of these programs are falling short and fail to prove teams’ real-world cyber

React to this headline:

Organizations’ cyber resilience efforts fail to keep up with evolving threats Read More »

Scammers exploit AI trend with fake ChatGPT apps on Google Play, Apple App Store

apple, Artificial Intelligence, ChatGPT, cybersecurity, Don't miss, Google Play, Hot stuff, News, scams, software, threats / SecurityTicks

Scammers exploit AI trend with fake ChatGPT apps on Google Play, Apple App Store 17/05/2023 at 14:17 By Help Net Security Sophos researchers uncovered multiple apps masquerading as legitimate, ChatGPT-based chatbots to overcharge users. These apps have popped up in the Google Play and Apple App Store. Because the free versions have near-zero functionality and

React to this headline:

Scammers exploit AI trend with fake ChatGPT apps on Google Play, Apple App Store Read More »

Preparing for federal supply chain security standardization

Compliance, cyber hygiene, cybersecurity, data, Don't miss, Expert analysis, Expert corner, framework, Government, Hot stuff, opinion, strategy, supply chain, threat, Tresorit / SecurityTicks

Preparing for federal supply chain security standardization 17/05/2023 at 09:42 By Help Net Security In 2021, the Biden Administration published the Executive Order on Improving the Nation’s Cybersecurity (EO 14028), setting off an agency-wide security initiative with the ultimate objective of standardizing security requirements across the Department of Defense (DoD) and the Federal Civilian Executive

React to this headline:

Preparing for federal supply chain security standardization Read More »

Infamous cybercrime marketplace offers pre-order service for stolen credentials

cybercrime, cybercriminals, cybersecurity, Malware, News, SecureWorks / SecurityTicks

Infamous cybercrime marketplace offers pre-order service for stolen credentials 17/05/2023 at 09:42 By Help Net Security Infostealer malware, which consist of code that infects devices without the user’s knowledge and steals data, remains widely available to buy through underground forums and marketplaces, with the volume of logs, or collections of stolen data, available for sale

React to this headline:

Infamous cybercrime marketplace offers pre-order service for stolen credentials Read More »

Malicious open-source components threatening digital infrastructure

cybersecurity, Don't miss, Endor Labs, Hot stuff, open source, software, threats, Video / SecurityTicks

Malicious open-source components threatening digital infrastructure 17/05/2023 at 09:42 By Help Net Security A new risk emerges in the digital era, where open-source software has become a fundamental pillar in developing innovative applications. The threat? Malicious open-source components. In this Help Net Security video, Henrik Plate, Lead Security Researcher at Endor Labs, discusses the dual-edged

React to this headline:

Malicious open-source components threatening digital infrastructure Read More »

Google Cloud CISO on why the Google Cybersecurity Certificate matters

certification, cybersecurity, Features, Google Cloud, News, opinion, SANS, skill development / SecurityTicks

Google Cloud CISO on why the Google Cybersecurity Certificate matters 16/05/2023 at 11:53 By Mirko Zorz As part of Google’s commitment to building a strong cybersecurity workforce, the Google Cybersecurity Certificate offers an affordable and accessible pathway to a career in cybersecurity. In this Help Net Security interview, Phil Venables, CISO at Google Cloud, sheds

React to this headline:

Google Cloud CISO on why the Google Cybersecurity Certificate matters Read More »

New trends in ransomware attacks shape the future of cybersecurity

Corvus Insurance, cybercrime, cybersecurity, Don't miss, Hot stuff, Malware, Ransomware, trends, Video / SecurityTicks

New trends in ransomware attacks shape the future of cybersecurity 16/05/2023 at 09:23 By Help Net Security Corvus Insurance analyzed data from the dark web and ransomware leak sites. Researchers uncovered a 60% increase in ransomware victims in March 2023, marking the highest monthly victim count observed in the past two years. In this Help

React to this headline:

New trends in ransomware attacks shape the future of cybersecurity Read More »

3 tips to accelerate zero trust adoption

CISO, cyber risk, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, opinion, strategy, Syxsense, tips, zero trust / SecurityTicks

3 tips to accelerate zero trust adoption 16/05/2023 at 09:23 By Help Net Security Zero trust adoption is beginning to accelerate as networks get more complex. Gartner predicts that by 2026, 10% of large enterprises will have a comprehensive, mature, and measurable zero-trust program in place (compared to just 1% today). But adoption has been

React to this headline:

3 tips to accelerate zero trust adoption Read More »

SquareX’s vision: A future where internet security is a non-issue

CISO, cybersecurity, Don't miss, Features, Hot stuff, News, SquareX, strategy / SecurityTicks

SquareX’s vision: A future where internet security is a non-issue 15/05/2023 at 12:11 By Mirko Zorz With an ever-evolving landscape of cyber threats, the necessity for innovative, effective, and user-friendly security products has never been more apparent. Current security solutions, however, seem to lag behind, struggling to adequately address the challenges posed by increasingly sophisticated

React to this headline:

SquareX’s vision: A future where internet security is a non-issue Read More »

Web entity activity reveals insights into internet security

Censys, cybersecurity, Don't miss, Hot stuff, threats, Video / SecurityTicks

Web entity activity reveals insights into internet security 15/05/2023 at 08:13 By Help Net Security For its recent research focusing on web entities (or content served over HTTP), Censys leveraged its internet-wide scan data to understand better the applications and services that have become core to our existence, evaluating the state of security on the

React to this headline:

Web entity activity reveals insights into internet security Read More »

Top 3 trends shaping the future of cybersecurity and IAM

authentication, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, identity, identity management, opinion, Ping Identity, zero trust / SecurityTicks

Top 3 trends shaping the future of cybersecurity and IAM 12/05/2023 at 07:30 By Help Net Security The need to protect sensitive information from unauthorized access and theft has never been greater, and cybersecurity and IAM technologies are evolving to meet this challenge while providing users with more convenience. There are three key trends to

React to this headline:

Top 3 trends shaping the future of cybersecurity and IAM Read More »

CISOs’ confidence in post-pandemic security landscape fades

CISO, cybersecurity, data, News, Proofpoint, report / SecurityTicks

CISOs’ confidence in post-pandemic security landscape fades 12/05/2023 at 06:00 By Help Net Security Most CISOs have returned to the elevated concerns they experienced early in the pandemic, according to Proofpoint. Elevated concerns among CISOs Globally, 68% of surveyed CISOs feel at risk of a material cyber attack, compared to 48% the year before, when

React to this headline:

CISOs’ confidence in post-pandemic security landscape fades Read More »

Automotive industry employees unaware of data security risks

automotive security, cybersecurity, data security, News, Salesforce, survey, Upstream / SecurityTicks

Automotive industry employees unaware of data security risks 11/05/2023 at 06:30 By Help Net Security 30% of automotive employees don’t check security protocols before trying a new tool, according to Salesforce. This could put their company and customer data at risk. Alarming rise in automotive API attacks Cybersecurity is a growing concern in the automotive

React to this headline:

Automotive industry employees unaware of data security risks Read More »

Kubernetes Bill of Materials (KBOM) open-source tool enhances cloud security response to CVEs

cybersecurity, GitHub, Kubernetes, News / SecurityTicks

Kubernetes Bill of Materials (KBOM) open-source tool enhances cloud security response to CVEs 10/05/2023 at 09:26 By Help Net Security Kubernetes Security Operations Center (KSOC) released the first-ever Kubernetes Bill of Materials (KBOM) standard. Available in an open-source CLI tool, this KBOM enables cloud security teams to understand the scope of third-party tooling in their

React to this headline:

Kubernetes Bill of Materials (KBOM) open-source tool enhances cloud security response to CVEs Read More »

Company executives can’t afford to ignore cybersecurity anymore

CISO, cybersecurity, Delinea, News, report, security metrics / SecurityTicks

Company executives can’t afford to ignore cybersecurity anymore 10/05/2023 at 06:00 By Help Net Security Asked about the Board and C-Suite‘s understanding of cybersecurity across the organisation, only 39% of respondents think their company’s leadership has a sound understanding of cybersecurity’s role as a business enabler, according to Delinea. The high cost of ignoring security

React to this headline:

Company executives can’t afford to ignore cybersecurity anymore Read More »

To enable ethical hackers, a law reform is needed

cybercriminals, cybersecurity, Don't miss, Expert analysis, Expert corner, hacker, HackerOne, Hot stuff, law, opinion, UK, vulnerability / SecurityTicks

To enable ethical hackers, a law reform is needed 09/05/2023 at 08:13 By Help Net Security Organizations need to be able to match the ingenuity and resources of cybercriminals to better defend themselves against the increasing number of threats and attacks that could paralyze their business. Unfortunately, some laws restrict genuine security research. As we

React to this headline:

To enable ethical hackers, a law reform is needed Read More »