data security - Security Ticks

Biotech platforms keep missing the mark on security fundamentals

access control, cybersecurity, Data leak, data security, healthcare, News, report, Sekurno / SecurityTicks

Biotech platforms keep missing the mark on security fundamentals 2025-10-02 at 08:27 By Anamarija Pogorelec A new security posture report on the biotech sector shows how quickly attackers could reach sensitive health data with only basic reconnaissance. Researchers needed less than two hours per company to uncover exposed genomic records, unprotected APIs, and misconfigured systems, […]

React to this headline:

Biotech platforms keep missing the mark on security fundamentals Read More »

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247)

backup, consumer, data security, Don't miss, Hot stuff, NAS, News, SMBs, vulnerability, Western Digital / SecurityTicks

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247) 2025-09-30 at 14:11 By Zeljka Zorz Western Digital has fixed a critical remote code execution vulnerability (CVE-2025-30247) in the firmware powering its My Cloud network-attached storage (NAS) devices, and has urged users to upgrade as soon as possible. About CVE-2025-30247 Western Digital’s My Cloud

React to this headline:

Western Digital My Cloud NAS devices vulnerable to unauthenticated RCE (CVE-2025-30247) Read More »

GenAI is exposing sensitive data at scale

Artificial Intelligence, Concentric AI, cybersecurity, Data leak, data security, generative AI, News, report, survey / SecurityTicks

GenAI is exposing sensitive data at scale 2025-09-25 at 07:46 By Anamarija Pogorelec Sensitive data is everywhere and growing fast. A new report from Concentric AI highlights how unstructured data, duplicate files, and risky sharing practices are creating serious problems for security teams. The findings show how generative AI tools like Microsoft Copilot are adding

React to this headline:

GenAI is exposing sensitive data at scale Read More »

Creating a compliance strategy that works across borders

Compliance, cybersecurity, data security, Don't miss, EQS Group, EU, Features, Hot stuff, News, regulation, USA / SecurityTicks

Creating a compliance strategy that works across borders 2025-09-17 at 08:37 By Mirko Zorz In this Help Net Security interview, Marco Goldberg, Managing Director at EQS Group, discusses how compliance and regulation are evolving worldwide. He talks about how organizations can stay compliant with international rules while keeping their systems practical and user-friendly. Goldberg points

React to this headline:

Creating a compliance strategy that works across borders Read More »

Static feeds leave intelligence teams reacting to irrelevant or late data

cybersecurity, data security, Flashpoint, monitoring, News, report, Threat Intelligence / SecurityTicks

Static feeds leave intelligence teams reacting to irrelevant or late data 2025-09-15 at 07:12 By Anamarija Pogorelec Boards and executives are not asking for another feed of indicators. They want to know whether their organization is being targeted, how exposed they are, and what steps need to be taken. A new report from Flashpoint argues

React to this headline:

Static feeds leave intelligence teams reacting to irrelevant or late data Read More »

Your heartbeat could reveal your identity, even in anonymized datasets

biometrics, data security, Don't miss, Features, hardware, healthcare, Hot stuff, News, Privacy, research, wearable tech / SecurityTicks

Your heartbeat could reveal your identity, even in anonymized datasets 2025-09-12 at 09:12 By Mirko Zorz A new study has found that electrocardiogram (ECG) signals, often shared publicly for medical research, can be linked back to individuals. Researchers were able to re-identify people in anonymous datasets with surprising accuracy, raising questions about how health data

React to this headline:

Your heartbeat could reveal your identity, even in anonymized datasets Read More »

When typing becomes tracking: Study reveals widespread silent keystroke interception

data collection, data security, Don't miss, Features, Hot stuff, News, Privacy, research, surveillance / SecurityTicks

When typing becomes tracking: Study reveals widespread silent keystroke interception 2025-09-11 at 09:17 By Mirko Zorz You type your email address into a website form but never hit submit. Hours later, a marketing email shows up in your inbox. According to new research, that is not a coincidence. A team of researchers from UC Davis,

React to this headline:

When typing becomes tracking: Study reveals widespread silent keystroke interception Read More »

How attackers weaponize communications networks

BlackBerry, cybersecurity, data security, Don't miss, Features, Hot stuff, network, network monitoring, News, regulation, secure communications, telecommunications / SecurityTicks

How attackers weaponize communications networks 2025-09-11 at 08:30 By Mirko Zorz In this Help Net Security interview, Gregory Richardson, Vice President, Advisory CISO Worldwide, at BlackBerry, talks about the growing risks to communications networks. He explains why attackers focus on these networks and how their motivations range from corporate espionage to geopolitical influence. The discussion

React to this headline:

How attackers weaponize communications networks Read More »

AI is everywhere, but scaling it is another story

Artificial Intelligence, CISO, Compliance, data security, News, report, Tines / SecurityTicks

AI is everywhere, but scaling it is another story 2025-09-11 at 08:02 By Anamarija Pogorelec AI is being adopted across industries, but many organizations are hitting the same obstacles, according to Tines. IT leaders say orchestration is the key to scaling AI. They point to governance, visibility, and collaboration as the critical areas executives need

React to this headline:

AI is everywhere, but scaling it is another story Read More »

Identity management was hard, AI made it harder

Artificial Intelligence, automation, CISO, data security, identity management, News, report, SailPoint, survey / SecurityTicks

Identity management was hard, AI made it harder 2025-09-08 at 07:33 By Anamarija Pogorelec Identity security is becoming a core part of cybersecurity operations, but many organizations are falling behind. A new report from SailPoint shows that as AI-driven identities and machine accounts grow, most security teams are not prepared to manage them at scale.

React to this headline:

Identity management was hard, AI made it harder Read More »

AI moves fast, but data security must move faster

Artificial Intelligence, data security, generative AI, News, report, survey, Thales / SecurityTicks

AI moves fast, but data security must move faster 2025-09-08 at 07:03 By Anamarija Pogorelec Generative AI is showing up everywhere in the enterprise, from customer service chatbots to marketing campaigns. It promises speed and innovation, but it also brings new and unfamiliar security risks. As companies rush to adopt these tools, many are discovering

React to this headline:

AI moves fast, but data security must move faster Read More »

How to reclaim control over your online shopping data

CCPA, cyber risk, cybersecurity, Data Protection, data security, DataGrail, EU, Europe, GDPR, LOKKER, News, online shopping, Privacy, regulation / SecurityTicks

How to reclaim control over your online shopping data 2025-09-05 at 09:33 By Sinisa Markovic Online shopping is convenient, saves time, and everything is just a click away. But how often do we stop to think about what happens to the data we leave behind, or the risks that might come with it? Where shopping

React to this headline:

How to reclaim control over your online shopping data Read More »

File security risks rise as insiders, malware, and AI challenges converge

cyber risk, cybersecurity, Data leak, data security, News, OPSWAT, Ponemon Institute, report, survey / SecurityTicks

File security risks rise as insiders, malware, and AI challenges converge 2025-09-05 at 08:42 By Anamarija Pogorelec Breaches tied to file access are happening often, and the costs add up quickly. Many organizations have faced multiple file-related incidents over the last two years, with financial losses stretching into the millions. The fallout often includes stolen

React to this headline:

File security risks rise as insiders, malware, and AI challenges converge Read More »

Social media apps that aggressively harvest user data

data security, Don't miss, Incogni, News, Privacy, report, survey / SecurityTicks

Social media apps that aggressively harvest user data 2025-08-27 at 07:10 By Sinisa Markovic Both domestic and foreign technology companies collect vast amounts of Americans’ personal data through mobile applications, according to Incogni. Some apps leverage data for marketing and advertising purposes, feeding algorithms to calculate optimal prices based on consumer behavior, often leading to

React to this headline:

Social media apps that aggressively harvest user data Read More »

Product showcase: iStorage datAshur PRO+C encrypted USB flash drive

backup, data security, Don't miss, Encryption, hardware, iStorage, News, Product showcase, storage / SecurityTicks

Product showcase: iStorage datAshur PRO+C encrypted USB flash drive 2025-08-21 at 08:00 By Anamarija Pogorelec The iStorage datAshur PRO+C is a USB-C flash drive featuring AES-XTS 256-bit hardware encryption. Available in capacities from 32 GB to 512 GB, the drive holds FIPS 140-3 Level 3 certification and operates without the need for software, making it

React to this headline:

Product showcase: iStorage datAshur PRO+C encrypted USB flash drive Read More »

Product showcase: Apricorn Aegis NVX, a high-security, portable SSD

Apricorn, data security, Don't miss, Encryption, hardware, News, Product showcase / SecurityTicks

Product showcase: Apricorn Aegis NVX, a high-security, portable SSD 2025-08-13 at 08:31 By Anamarija Pogorelec The Apricorn Aegis NVX is a hardware-based 256-Bit AES XTS external SSD drive with integrated USB-C cable. Its storage capacities range from 500GB to 2TB. The device is OS free and cross-platform compatible. Design and build The drive comes with

React to this headline:

Product showcase: Apricorn Aegis NVX, a high-security, portable SSD Read More »

CISOs say they’re prepared, their data says otherwise

Artificial Intelligence, automation, Axonius, cybersecurity, data security, Don't miss, News, report, vulnerability management / SecurityTicks

CISOs say they’re prepared, their data says otherwise 2025-08-06 at 08:02 By Sinisa Markovic Most security teams believe they can act quickly when a threat emerges. But many don’t trust the very data they rely on to do so, and that’s holding them back. A new Axonius report, based on a survey of 500 U.S.-based

React to this headline:

CISOs say they’re prepared, their data says otherwise Read More »

Product showcase: Protect your data with Apricorn Aegis Secure Key 3NXC

Apricorn, data security, Don't miss, Encryption, hardware, Hot stuff, News, Product showcase / SecurityTicks

Product showcase: Protect your data with Apricorn Aegis Secure Key 3NXC 2025-07-02 at 07:31 By Anamarija Pogorelec The Apricorn Aegis Secure Key 3NXC is a 256-bit AES XTS hardware-encrypted flash drive with a USB-C connector. It is available in storage capacities ranging from 4GB to 512GB and holds FIPS 140-2 Level 3 validation. The device

React to this headline:

Product showcase: Protect your data with Apricorn Aegis Secure Key 3NXC Read More »

Protecting patient data starts with knowing where it’s stored

BitSight, CISO, data, data security, Don't miss, healthcare, Main Line Health, News, Smart Meter, tips / SecurityTicks

Protecting patient data starts with knowing where it’s stored 2025-06-06 at 08:31 By Sinisa Markovic Patient data is often stored or processed outside the country where it was collected. When that happens, the data falls under the laws of the country where it resides. Depending on those laws, local governments may have legal access to

React to this headline:

Protecting patient data starts with knowing where it’s stored Read More »

Why security teams cannot rely solely on AI guardrails

Artificial Intelligence, CISO, CXO, cybersecurity, data security, LLMs, News, opinion / SecurityTicks

Why security teams cannot rely solely on AI guardrails 2025-05-12 at 09:19 By Mirko Zorz In this Help Net Security interview, Dr. Peter Garraghan, CEO of Mindgard, discusses their research around vulnerabilities in the guardrails used to protect large AI models. The findings highlight how even billion-dollar LLMs can be bypassed using surprisingly simple techniques,

React to this headline:

Why security teams cannot rely solely on AI guardrails Read More »