Don't miss - Security Ticks

Microsoft delays Windows Recall rollout, more security testing needed

data security, Don't miss, Hot stuff, Microsoft, News, Privacy, Windows / SecurityTicks

Microsoft delays Windows Recall rollout, more security testing needed 2024-06-14 at 15:46 By Zeljka Zorz Microsoft is delaying the release of Recall, a controversial Windows 11 feature that will allow users to search their computer for specific content that has previously been viewed by them. A preview of Recall should have been broadly available on […]

React to this headline:

Microsoft delays Windows Recall rollout, more security testing needed Read More »

YetiHunter: Open-source threat hunting tool for Snowflake environments

Don't miss, Hot stuff, Mandiant, News, open source, Permiso, Snowflake, threat detection, threat hunting / SecurityTicks

YetiHunter: Open-source threat hunting tool for Snowflake environments 2024-06-14 at 13:31 By Zeljka Zorz Cloud identity protection company Permiso has created YetiHunter, a threat detection and hunting tool companies can use to query their Snowflake environments for evidence of compromise. YetiHunter executing queries (Source: Permiso Security) Recent attacks against Snowflake customers Cloud-based data storage and

React to this headline:

YetiHunter: Open-source threat hunting tool for Snowflake environments Read More »

Modern fraud detection need not rely on PII

cybercrime, cybersecurity, Darwinium, Don't miss, Expert analysis, fraud, Hot stuff, News, opinion, threats / SecurityTicks

Modern fraud detection need not rely on PII 2024-06-14 at 07:32 By Help Net Security Trends in online fraud detection often act as the canary in the coal mine when it comes to understanding and combating the next generation of online scams, fraud and cybersecurity threats. These days, security and fraud experts worry that insufficient

React to this headline:

Modern fraud detection need not rely on PII Read More »

Solving the systemic problem of recurring vulnerabilities

AttackForge, collaboration, cybersecurity, Don't miss, Hot stuff, patching, penetration testing, sandbox, SecDim, Video, vulnerability management / SecurityTicks

Solving the systemic problem of recurring vulnerabilities 2024-06-14 at 06:31 By Help Net Security In this Help Net Security video, Dr. Pedram Hayati, CEO at SecDim, and Fil Filiposki, founder of AttackForge, discuss how the two companies have formed a strategic collaboration to tackle the major challenge of resurfacing vulnerabilities. By integrating SecDim’s AppSec Learning

React to this headline:

Solving the systemic problem of recurring vulnerabilities Read More »

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577)

CVE, Devcore, Don't miss, exploit, Hot stuff, Imperva, News, PHP, Ransomware, vulnerability, WatchTowr, Windows / SecurityTicks

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577) 2024-06-13 at 15:01 By Zeljka Zorz An OS command injection vulnerability in Windows-based PHP (CVE-2024-4577) in CGI mode is being exploited by the TellYouThePass ransomware gang. Imperva says the attacks started on June 8, two days after the PHP development team pushed out fixes, and one

React to this headline:

PHP command injection flaw exploited to deliver ransomware (CVE-2024-4577) Read More »

Urgently needed: AI governance in cyber warfare

Artificial Intelligence, cybersecurity, Cyberwarfare, Don't miss, Expert analysis, Expert corner, Hot stuff, Information Security Forum, News, opinion, risk / SecurityTicks

Urgently needed: AI governance in cyber warfare 2024-06-13 at 12:31 By Help Net Security Artificial intelligence is quickly becoming central to societal growth. AI has great power to improve daily life, from education to healthcare, from sustainability to defense. AI also brings to the forefront a number of risks that cut across the core values

React to this headline:

Urgently needed: AI governance in cyber warfare Read More »

How businesses can integrate token technology into existing payment systems

Artificial Intelligence, Compliance, cybersecurity, Don't miss, Features, Hot stuff, identity verification, mobile payment, News, opinion, regulation, strategy, tokenization, Visa / SecurityTicks

How businesses can integrate token technology into existing payment systems 2024-06-13 at 07:02 By Mirko Zorz In this Help Net Security interview, Mark Nelsen, SVP and Global Head of Consumer Product at Visa, discusses the integration of token technology into existing payment systems. How do businesses integrate tokenization into their existing payment systems, and what

React to this headline:

How businesses can integrate token technology into existing payment systems Read More »

Maximizing productivity with Copilot for Microsoft 365: A security perspective

access control, Artificial Intelligence, cybersecurity, Don't miss, generative AI, Hot stuff, Microsoft 365, risk, Varonis, Video / SecurityTicks

Maximizing productivity with Copilot for Microsoft 365: A security perspective 2024-06-13 at 06:31 By Help Net Security In this Help Net Security video, Brian Vecci, Field CTO at Varonis, talks about maximizing the potential of Microsoft Copilot for 365. He highlights its productivity benefits and addresses critical security challenges, providing actionable steps to ensure safe

React to this headline:

Maximizing productivity with Copilot for Microsoft 365: A security perspective Read More »

20,000 FortiGate appliances compromised by Chinese hackers

attacks, China, Don't miss, enterprise, Fortinet, Government, government-backed attacks, hardware, Hot stuff, Malware, News, Remote Access Trojan / SecurityTicks

20,000 FortiGate appliances compromised by Chinese hackers 2024-06-12 at 14:16 By Zeljka Zorz Coathanger – a piece of malware specifically built to persist on Fortinet’s FortiGate appliances – may still be lurking on too many devices deployed worldwide. How Coathanger persists on FortiGate devices In February 2024, the Dutch Military Intelligence and Security Service (MIVD)

React to this headline:

20,000 FortiGate appliances compromised by Chinese hackers Read More »

Open-source security in AI

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, open source, Open Source Technology Improvement Fund, opinion / SecurityTicks

Open-source security in AI 2024-06-12 at 07:31 By Help Net Security New AI products are coming onto the market faster than we have seen in any previous technology revolution. Companies’ free access and right to use open source in AI software models has allowed them to prototype an AI product to market cheaper than ever

React to this headline:

Open-source security in AI Read More »

Security and privacy strategies for CISOs in a mobile-first world

BYOD, CISO, Cloud, Compliance, cybersecurity, data security, Don't miss, Features, Hot stuff, human error, hybrid workforce, Lookout, mobile devices, News, opinion, strategy, threat / SecurityTicks

Security and privacy strategies for CISOs in a mobile-first world 2024-06-12 at 07:01 By Mirko Zorz In this Help Net Security interview, Jim Dolce, CEO at Lookout, discusses securing mobile devices to mitigate escalating cloud threats. He emphasizes that organizations must shift their approach to data security, acknowledging the complexities introduced by mobile access to

React to this headline:

Security and privacy strategies for CISOs in a mobile-first world Read More »

Six months of SEC’s cyber disclosure rules

boardroom, CISO, cybersecurity, Don't miss, Government, Hot stuff, regulation, Risk Management, Tanium, Video / SecurityTicks

Six months of SEC’s cyber disclosure rules 2024-06-12 at 06:02 By Help Net Security In this Help Net Security video, Mark Millender, Senior Advisor of Global Executive Engagement at Tanium, discusses the overall sentiment from CISOs of large, public companies on the effectiveness and understanding of SEC’s cyber disclosure rules and common misconceptions and gray

React to this headline:

Six months of SEC’s cyber disclosure rules Read More »

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103)

Automox, CVE, Don't miss, Hot stuff, Microsoft, Morphisec, News, Outlook, Patch Tuesday, security update, Tenable, Trend Micro / SecurityTicks

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) 2024-06-11 at 23:01 By Zeljka Zorz June 2024 Patch Tuesday is here and Microsoft has delivered fixes for a critical MSMQ flaw (CVE-2024-30080) and a RCE vulnerability in Microsoft Outlook (CVE-2024-30103). 49 CVE-numbered vulnerabilities have been fixed in total, none of which have been exploited in

React to this headline:

Microsoft fixes RCE vulnerabilities in MSMQ, Outlook (CVE-2024-30080, CVE-2024-30103) Read More »

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)

Android, CVE, DevOps, Don't miss, Hot stuff, Java, JetBrains, Kotlin, News, software development, vulnerability / SecurityTicks

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) 2024-06-11 at 15:46 By Zeljka Zorz JetBrains has fixed a critical vulnerability (CVE-2024-37051) that could expose users of its integrated development environments (IDEs) to GitHub access token compromise. About CVE-2024-37051 JetBrains offers IDEs for various programming languages. CVE-2024-37051 is a vulnerability in the

React to this headline:

Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051) Read More »

Cloud migration expands the CISO role yet again

CISO, Cloud, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, News, opinion, RegScale, Risk Management / SecurityTicks

Cloud migration expands the CISO role yet again 2024-06-11 at 07:31 By Help Net Security The CISO role used to be focused primarily on information security — creating and implementing policies to safeguard an organization’s data and IT infrastructure from cybersecurity threats. However, as organizations rapidly migrate to cloud environments, the responsibilities and challenges for

React to this headline:

Cloud migration expands the CISO role yet again Read More »

Preparing for a career in cybersecurity? Check out these statistics

Cobalt, cybersecurity, Don't miss, Entrust, Hot stuff, IBM, IDC, ISC2, News, Pluralsight, report, skill development, Skillsoft, Splunk, survey, VikingCloud / SecurityTicks

Preparing for a career in cybersecurity? Check out these statistics 2024-06-11 at 07:01 By Help Net Security This article includes excerpts from various reports that provide statistics and insights on cybersecurity jobs, skills shortages, and workforce dynamics. Lack of skills and budget slow zero-trust implementation Entrust | 2024 State of Zero Trust & Encryption Study

React to this headline:

Preparing for a career in cybersecurity? Check out these statistics Read More »

GDPR turns six: Expert discusses AI impact

Artificial Intelligence, Compliance, cybersecurity, Data Protection, Don't miss, EU, framework, GDPR, Hot stuff, Next DLP, policy, Video / SecurityTicks

GDPR turns six: Expert discusses AI impact 2024-06-11 at 06:31 By Help Net Security The European Union’s GDPR policy came into effect six years ago. Since then, it has become widely regarded as the standard for data sharing, but the rise of new technology has questioned its suitability and relevance. In this Help Net Security

React to this headline:

GDPR turns six: Expert discusses AI impact Read More »

The number of known Snowflake customer data breaches is rising

cloud security, credentials, data breach, data theft, Don't miss, enterprise, extortion, Hot stuff, News, Snowflake / SecurityTicks

The number of known Snowflake customer data breaches is rising 2024-06-10 at 15:46 By Zeljka Zorz LendingTree subsidiary QuoteWizard and automotive parts provider Advance Auto Parts have been revealed as victims of attackers who are trying to sell data stolen from Snowflake-hosted cloud databases. Snowflake says that their investigation is still ongoing, but continues to

React to this headline:

The number of known Snowflake customer data breaches is rising Read More »

AI’s role in accelerating vulnerability management

Artificial Intelligence, automation, cybersecurity, data analysis, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion, Risk Management, Seemplicity, threats, vulnerability management / SecurityTicks

AI’s role in accelerating vulnerability management 2024-06-10 at 08:01 By Help Net Security With its capability to analyze, predict, and automate, AI stands to reshape many corners of business, most notably cybersecurity. In the field of vulnerability management specifically, AI is poised to have a profound impact, enhancing two key areas: Providing quicker analysis and

React to this headline:

AI’s role in accelerating vulnerability management Read More »

Radare: Open-source reverse engineering framework

cybersecurity, Don't miss, GitHub, Hot stuff, News, open source, software / SecurityTicks

Radare: Open-source reverse engineering framework 2024-06-10 at 07:32 By Mirko Zorz Radare is an open-source UNIX-like reverse engineering framework and command-line toolset. It can be scripted, modified, and used for batch analysis. “I started the project in 2006 when I was working as a forensic analyst, and I wrote a simple command-line hexadecimal editor to

React to this headline:

Radare: Open-source reverse engineering framework Read More »

Don’t miss