Featured - Security Ticks

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe

CISO, CISO Conversations, CISO Strategy, Featured, Uncategorized / SecurityTicks

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe 2025-04-15 at 13:02 By Kevin Townsend Van Horenbeeck’s career spans some of the biggest companies in tech: Verizon, Microsoft, Google, Amazon, Zendesk, and now SVP and CSO at Adobe. The post CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe […]

React to this headline:

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe Read More »

AI Hallucinations Create a New Software Supply Chain Threat

AI, Featured, Gen-AI, supply chain, Supply Chain Security / SecurityTicks

AI Hallucinations Create a New Software Supply Chain Threat 2025-04-14 at 16:07 By Ionut Arghire Researchers uncover new software supply chain threat from LLM-generated package hallucinations. The post AI Hallucinations Create a New Software Supply Chain Threat appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

AI Hallucinations Create a New Software Supply Chain Threat Read More »

China Admitted to US That It Conducted Volt Typhoon Attacks: Report

China, critical infrastructure, Featured, Government, Nation-State, US, Volt Typhoon / SecurityTicks

China Admitted to US That It Conducted Volt Typhoon Attacks: Report 2025-04-11 at 13:14 By Eduard Kovacs In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure. The post China Admitted to US That It Conducted Volt Typhoon Attacks: Report appeared first on SecurityWeek. This article is an

React to this headline:

China Admitted to US That It Conducted Volt Typhoon Attacks: Report Read More »

Treasury’s OCC Says Hackers Had Access to 150,000 Emails

email security, Featured, Government, OCC, Treasury / SecurityTicks

Treasury’s OCC Says Hackers Had Access to 150,000 Emails 2025-04-09 at 14:48 By Eduard Kovacs The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a year. The post Treasury’s OCC Says Hackers Had Access to 150,000 Emails appeared first on SecurityWeek.

React to this headline:

Treasury’s OCC Says Hackers Had Access to 150,000 Emails Read More »

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day

CVE-2025-29824, Featured, Malware & Threats, Microsoft, Patch Tuesday, Vulnerabilities, Windows CLFS, Zero-Day / SecurityTicks

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day 2025-04-08 at 22:03 By Ryan Naraine Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild. The post Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Microsoft Patches 125 Windows Vulns, Including Exploited CLFS Zero-Day Read More »

Android Update Patches Two Exploited Vulnerabilities

Android, Cellebrite, exploited, Featured, Mobile & Wireless, USB / SecurityTicks

Android Update Patches Two Exploited Vulnerabilities 2025-04-08 at 13:26 By Ionut Arghire Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs. The post Android Update Patches Two Exploited Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Android Update Patches Two Exploited Vulnerabilities Read More »

Call Records of Millions Exposed by Verizon App Vulnerability

Application Security, call records, Featured, Mobile & Wireless, Verizon, vulnerability / SecurityTicks

Call Records of Millions Exposed by Verizon App Vulnerability 2025-04-04 at 19:00 By Eduard Kovacs A patch has been released for a serious information disclosure vulnerability affecting a Verizon call filtering application. The post Call Records of Millions Exposed by Verizon App Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Call Records of Millions Exposed by Verizon App Vulnerability Read More »

Oracle Confirms Cloud Hack

cloud security, controversy, data breach, Featured, Oracle, Oracle Cloud / SecurityTicks

Oracle Confirms Cloud Hack 2025-04-04 at 13:36 By Eduard Kovacs Oracle has confirmed suffering a data breach but the tech giant is apparently trying to downplay the impact of the incident. The post Oracle Confirms Cloud Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Oracle Confirms Cloud Hack Read More »

Details Emerge on CVE Controversy Around Exploited CrushFTP Vulnerability

CrushFTP, CVE, exploited, Featured, Vulnerabilities / SecurityTicks

Details Emerge on CVE Controversy Around Exploited CrushFTP Vulnerability 2025-04-03 at 13:31 By Eduard Kovacs Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’. The post Details Emerge on CVE Controversy Around Exploited CrushFTP Vulnerability appeared first on SecurityWeek. This article is an

React to this headline:

Details Emerge on CVE Controversy Around Exploited CrushFTP Vulnerability Read More »

Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses

AI, Artificial Intelligence, DeepMind, Featured, Google, Vulnerabilities / SecurityTicks

Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses 2025-04-02 at 16:47 By Kevin Townsend DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights. The post Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Google DeepMind Unveils Framework to Exploit AI’s Cyber Weaknesses Read More »

Check Point Responds to Hacking Claims

Check Point, cybercrime, data breach, Data leak, Featured, hacked, security company hacked / SecurityTicks

Check Point Responds to Hacking Claims 2025-04-01 at 14:04 By Ionut Arghire Check Point has responded to a hacker’s claims of sensitive data theft, confirming an incident but saying that it had limited impact. The post Check Point Responds to Hacking Claims appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Check Point Responds to Hacking Claims Read More »

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia

Chrome, exploited, Featured, Firefox, sandbox escape, Vulnerabilities, Zero-Day / SecurityTicks

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia 2025-03-28 at 12:26 By Eduard Kovacs Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day. The post Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia appeared first on SecurityWeek. This

React to this headline:

Firefox Affected by Flaw Similar to Chrome Zero-Day Exploited in Russia Read More »

More Solar System Vulnerabilities Expose Power Grids to Hacking

energy, Featured, ICS, ICS/OT, solar, Vulnerabilities, vulnerability / SecurityTicks

More Solar System Vulnerabilities Expose Power Grids to Hacking 2025-03-27 at 12:32 By Eduard Kovacs Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA. The post More Solar System Vulnerabilities Expose Power Grids to Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

More Solar System Vulnerabilities Expose Power Grids to Hacking Read More »

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking

cloud security, Featured, IngressNightmare, Kubernetes, Vulnerabilities / SecurityTicks

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking 2025-03-25 at 12:17 By Eduard Kovacs Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes. The post IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

IngressNightmare Flaws Expose Many Kubernetes Clusters to Remote Hacking Read More »

FCC Probes Whether Banned Chinese Telecom Providers Still Operating in US

Ban, China, fcc, Featured, Government, Network Security, telecoms / SecurityTicks

FCC Probes Whether Banned Chinese Telecom Providers Still Operating in US 2025-03-24 at 14:31 By Eduard Kovacs The FCC is investigating whether Chinese firms such as Huawei, ZTE and China Telecom are still operating in the US. The post FCC Probes Whether Banned Chinese Telecom Providers Still Operating in US appeared first on SecurityWeek. This

React to this headline:

FCC Probes Whether Banned Chinese Telecom Providers Still Operating in US Read More »

Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed

Featured, GitHub, GitHub actions, supply chain, Supply Chain Security / SecurityTicks

Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed 2025-03-21 at 12:17 By Eduard Kovacs More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause. The post Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed appeared first on SecurityWeek. This article is an

React to this headline:

Impact, Root Cause of GitHub Actions Supply Chain Hack Revealed Read More »

Paragon Spyware Attacks Exploited WhatsApp Zero-Day

Citizen Lab, exploited, Featured, Graphite, Mobile & Wireless, Paragon, spyware, WhatsApp, Zero-Day / SecurityTicks

Paragon Spyware Attacks Exploited WhatsApp Zero-Day 2025-03-20 at 12:03 By Eduard Kovacs Attacks involving Paragon’s Graphite spyware involved a WhatsApp zero-day that could be exploited without any user interaction. The post Paragon Spyware Attacks Exploited WhatsApp Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Paragon Spyware Attacks Exploited WhatsApp Zero-Day Read More »

What’s Behind Google’s $32 Billion Wiz Acquisition?

Azure, cloud security, Featured, Funding/M&A, Google, Google Cloud, IPO, M&A Tracker, Microsoft, threat-intel, Wiz / SecurityTicks

What’s Behind Google’s $32 Billion Wiz Acquisition? 2025-03-19 at 17:09 By Ryan Naraine News analysis: Google positions itself to compete with Microsoft for enterprise security dollars. How does this deal affect startup ecosystem? The post What’s Behind Google’s $32 Billion Wiz Acquisition? appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

What’s Behind Google’s $32 Billion Wiz Acquisition? Read More »

Scareware Combined With Phishing in Attacks Targeting macOS Users

Featured, macOS 14.2, phishing, scareware / SecurityTicks

Scareware Combined With Phishing in Attacks Targeting macOS Users 2025-03-19 at 14:11 By Ionut Arghire A long-running campaign phishing for credentials through scareware recently switched to targeting macOS users. The post Scareware Combined With Phishing in Attacks Targeting macOS Users appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Scareware Combined With Phishing in Attacks Targeting macOS Users Read More »

Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash

acquires, cloud security, Featured, Funding/M&A, Google, M&A Tracker, Wiz / SecurityTicks

Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash 2025-03-18 at 15:18 By Eduard Kovacs Google has confirmed reports that it’s buying cloud security giant Wiz and says it’s prepared to pay $32 billion in cash. The post Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash appeared first

React to this headline:

Google to Acquire Cloud Security Giant Wiz for $32 Billion in Cash Read More »