Europe - Security Ticks

Croatian research institute confirms ransomware attack via ToolShell vulnerabilities

Croatia, Don't miss, Europe, Hot stuff, News, Ransomware, SharePoint, vulnerability / SecurityTicks

Croatian research institute confirms ransomware attack via ToolShell vulnerabilities 2025-08-13 at 18:01 By Zeljka Zorz The Ruđer Bošković Institute (RBI), the largest Croatian science and technology research institute, has confirmed that it was the one of “at least 9,000 institutions worldwide” that were attacked using the Microsoft SharePoint “ToolShell” vulnerabilities. The attack happened on Thursday, […]

React to this headline:

Croatian research institute confirms ransomware attack via ToolShell vulnerabilities Read More »

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)

Citrix, Don't miss, Europe, Fortinet, Hot stuff, NCSC-NL, NetScaler, News, Shadowserver / SecurityTicks

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543) 2025-08-12 at 17:51 By Zeljka Zorz FortiGuard Labs has reported a dramatic spike in exploitation attempts targeting Citrix Bleed 2, a critical buffer over‑read flaw (CVE‑2025‑5777) affecting Citrix NetScaler ADC (Application Delivery Controller) and Gateway devices. Since July 28, 2025, they have detected over 6,000 exploitation

React to this headline:

Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543) Read More »

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088)

0-day, APT, backdoor, BI.ZONE, Canada, cyber espionage, Don't miss, ESET, Europe, exploit, Hot stuff, News, Russian Federation, spear-phishing, WinRAR / SecurityTicks

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088) 2025-08-12 at 16:11 By Zeljka Zorz The RomCom attackers aren’t the only ones that have been leveraging the newly unveiled WinRAR vulnerability (CVE-2025-8088) in zero-day attacks: according to Russian cybersecurity company BI.ZONE, a group tracked as Paper Werewolf has been using it to target Russian organizations.

React to this headline:

WinRAR zero-day was exploited by two threat actors (CVE-2025-8088) Read More »

Digital sovereignty becomes a matter of resilience for Europe

Compliance, cybersecurity, Don't miss, EU, Europe, Features, Hot stuff, News, open source, regulation, Wire / SecurityTicks

Digital sovereignty becomes a matter of resilience for Europe 2025-07-25 at 08:37 By Mirko Zorz In this Help Net Security interview, Benjamin Schilz, CEO of Wire, discusses Europe’s push for digital sovereignty through initiatives like Gaia-X and the EU AI Act. As the continent redefines its technological future, the focus shifts from regulation to building

React to this headline:

Digital sovereignty becomes a matter of resilience for Europe Read More »

Six months into DORA, most financial firms are still not ready

Censuswide, Compliance, cyber risk, EU, Europe, Government, News, regulation, Veeam Software / SecurityTicks

Six months into DORA, most financial firms are still not ready 2025-07-25 at 07:57 By Help Net Security It’s been six months since the EU’s Digital Operational Resilience Act (DORA) came into effect, but a new Censuswide survey shows that nearly all financial services organizations in EMEA still feel unprepared. An overwhelming 96% of respondents

React to this headline:

Six months into DORA, most financial firms are still not ready Read More »

Machine unlearning gets a practical privacy upgrade

cybersecurity, Don't miss, EU, Europe, Features, Hot stuff, machine learning, News, Privacy, research / SecurityTicks

Machine unlearning gets a practical privacy upgrade 2025-07-17 at 09:08 By Mirko Zorz Machine learning models are everywhere now, from chatbots to credit scoring tools, and they carry traces of the data they were trained on. When someone asks to have their personal data erased under laws like the GDPR, their data also needs to

React to this headline:

Machine unlearning gets a practical privacy upgrade Read More »

Inorganic DNA: How nanoparticles could be the future of anti-counterfeiting tech

authentication, Don't miss, Elementag, EU, Europe, Features, hardware, Hot stuff, News, QR codes, supply chain / SecurityTicks

Inorganic DNA: How nanoparticles could be the future of anti-counterfeiting tech 2025-07-15 at 09:00 By Mirko Zorz For decades, manufacturers and security professionals have been playing a high-stakes game of cat and mouse with counterfeiters. From holograms and QR codes to RFID tags and serial numbers, the industry’s toolkit has evolved, but so have the

React to this headline:

Inorganic DNA: How nanoparticles could be the future of anti-counterfeiting tech Read More »

How FinTechs are turning GRC into a strategic enabler

Artificial Intelligence, Compliance, cybersecurity, Don't miss, EU, Europe, Features, financial industry, Fintech, framework, GRC, Hot stuff, News, regulation, Risk Management, Riverty / SecurityTicks

How FinTechs are turning GRC into a strategic enabler 2025-07-02 at 08:36 By Mirko Zorz In this Help Net Security interview, Alexander Clemm, Corp GRC Lead, Group CISO, and BCO at Riverty, shares how the GRC landscape for FinTechs has matured in response to tighter regulations and global growth. He discusses the impact of frameworks

React to this headline:

How FinTechs are turning GRC into a strategic enabler Read More »

GenAI is everywhere, but security policies haven’t caught up

Artificial Intelligence, deepfakes, Europe, generative AI, ISACA, News, policy, regulation, report, skill development / SecurityTicks

GenAI is everywhere, but security policies haven’t caught up 2025-07-01 at 08:07 By Help Net Security Nearly three out of four European IT and cybersecurity professionals say staff are already using generative AI at work, up ten points in a year, but just under a third of organizations have put formal policies in place, according

React to this headline:

GenAI is everywhere, but security policies haven’t caught up Read More »

Fraudsters behind €460 million crypto scam arrested in Spain

arrest, cybercrime, EU, Europe, Europol, law enforcement, News, scams / SecurityTicks

Fraudsters behind €460 million crypto scam arrested in Spain 2025-06-30 at 18:31 By Anamarija Pogorelec Spanish authorities arrested five members of a criminal network responsible for laundering €460 million stolen through global cryptocurrency investment fraud schemes. Source: Europol The operation, led by the Guardia Civil with support from Europol and law enforcement in Estonia, France,

React to this headline:

Fraudsters behind €460 million crypto scam arrested in Spain Read More »

Europe’s AI strategy: Smart caution or missed opportunity?

Accenture, Artificial Intelligence, Aunoo AI, CXO, cyber resilience, Data Protection, Don't miss, enterprise, EU, Europe, Features, Hot stuff, investment, Lakera, News, predictions, report, Verax AI / SecurityTicks

Europe’s AI strategy: Smart caution or missed opportunity? 2025-06-30 at 08:03 By Mirko Zorz Europe is banking on AI to help solve its economic problems. Productivity is stalling, and tech adoption is slow. Global competitors, especially the U.S., are pulling ahead. A new report from Accenture says AI could help reverse that trend, but only

React to this headline:

Europe’s AI strategy: Smart caution or missed opportunity? Read More »

History made as MI6 appoints first female Chief

Europe, law enforcement, News, UK / SecurityTicks

History made as MI6 appoints first female Chief 2025-06-16 at 16:33 By Sinisa Markovic The UK government has appointed Blaise Florence Metreweli as the next Chief of the Secret Intelligence Service (SIS), also known as MI6. Metreweli will take up the role, traditionally referred to by the codename “C,” succeeding Sir Richard Moore, who is

React to this headline:

History made as MI6 appoints first female Chief Read More »

iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200)

Amnesty International, Citizen Lab, Don't miss, Europe, exploit, government-backed attacks, Hot stuff, iOS, News, Privacy, Recorded Future, spyware, vulnerability / SecurityTicks

iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200) 2025-06-13 at 15:22 By Zeljka Zorz A zero-click attack leveraging a freshly disclosed Messages vulnerability (CVE-2025-43200) has infected the iPhones of two European journalists with Paragon’s Graphite mercenary spyware, Citizen Lab researchers have revealed on Thursday. The attacks happened in January and early February 2025. “We

React to this headline:

iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200) Read More »

GitHub becomes go-to platform for malware delivery across Europe

cybercrime, Europe, generative AI, GitHub, Netskope, News, phishing, report, survey / SecurityTicks

GitHub becomes go-to platform for malware delivery across Europe 2025-05-28 at 07:32 By Help Net Security Phishing has become the go-to method for attackers looking to get past security controls and access sensitive environments in Europe, according to Netskope. Users are now constantly dealing with phishing attempts, which have become so common and credible that

React to this headline:

GitHub becomes go-to platform for malware delivery across Europe Read More »

CTM360 report: Ransomware exploits trust more than tech

CTM360, cybercrime, cybersecurity, Don't miss, Europe, Hot stuff, News, Ransomware, report, UK / SecurityTicks

CTM360 report: Ransomware exploits trust more than tech 2025-05-22 at 08:35 By Anamarija Pogorelec A recent wave of ransomware attacks has disrupted major retailers across the UK. According to a new report from CTM360, the attackers didn’t need to break down the door, they were invited in through misplaced trust and weak identity safeguards. This

React to this headline:

CTM360 report: Ransomware exploits trust more than tech Read More »

Why EU encryption policy needs technical and civil society input

CISO, Don't miss, Encryption, EU, Europe, Features, Hot stuff, law, law enforcement, News, opinion, Privacy, regulation / SecurityTicks

Why EU encryption policy needs technical and civil society input 2025-05-19 at 08:02 By Mirko Zorz In this Help Net Security interview, Full Professor at University of Leuven, unpacks the European Commission’s encryption agenda, urging a balanced, technically informed approach to lawful access that safeguards privacy, security, and fundamental rights across the EU. Given the

React to this headline:

Why EU encryption policy needs technical and civil society input Read More »

European Vulnerability Database goes live, but who benefits?

Contrast Security, ENISA, EU, Europe, Legit Security, MITRE, NetRise, News / SecurityTicks

European Vulnerability Database goes live, but who benefits? 2025-05-14 at 07:20 By Mirko Zorz The European Union Agency for Cybersecurity (ENISA) has unveiled the European Vulnerability Database (EUVD), an initiative under the NIS2 Directive aimed at enhancing digital security across the EU. The database serves as a centralized repository offering aggregated and actionable information on

React to this headline:

European Vulnerability Database goes live, but who benefits? Read More »

Why SMEs can no longer afford to ignore cyber risk

CISO, cybersecurity, Don't miss, Europe, Features, Government, Hot stuff, News, opinion, strategy, tips, UK / SecurityTicks

Why SMEs can no longer afford to ignore cyber risk 2025-05-01 at 09:32 By Mirko Zorz In this Help Net Security interview, Steven Furnell, Professor of Cyber Security at the University of Nottingham, illustrates how small and medium-sized businesses (SMEs) must reassess their risk exposure and prioritize resilience to safeguard their long-term growth and stability.

React to this headline:

Why SMEs can no longer afford to ignore cyber risk Read More »

Marks & Spencer cyber incident linked to ransomware group

disruption, Don't miss, Europe, Hot stuff, News, Ransomware, Retail, UK / SecurityTicks

Marks & Spencer cyber incident linked to ransomware group 2025-04-29 at 14:18 By Zeljka Zorz The “cyber incident” that British multinational retailer Marks & Spencer has been struggling with for over a week is a ransomware attack, multiple sources have asserted. The Telegraph’s sources say ransomware was deployed by a unnamed criminal gang. Bleeping Computer’s

React to this headline:

Marks & Spencer cyber incident linked to ransomware group Read More »

How AI, corruption and digital tools fuel Europe’s criminal underworld

cybercrime, Don't miss, EU, Europe, Europol, law enforcement, News, report / SecurityTicks

How AI, corruption and digital tools fuel Europe’s criminal underworld 2025-03-24 at 09:31 By Help Net Security Europol has released its 2025 report on serious and organized crime in the EU. The EU Serious and Organised Crime Threat Assessment (EU-SOCTA) is based on intelligence from EU countries and global law enforcement. The findings are stark.

React to this headline:

How AI, corruption and digital tools fuel Europe’s criminal underworld Read More »