Featured - Security Ticks

Android Update Patches FreeType Vulnerability Exploited as Zero-Day

Android, exploited, Featured, FreeType, Mobile & Wireless, Zero-Day / SecurityTicks

Android Update Patches FreeType Vulnerability Exploited as Zero-Day 2025-05-06 at 12:00 By Ionut Arghire Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine. The post Android Update Patches FreeType Vulnerability Exploited as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

React to this headline:

Android Update Patches FreeType Vulnerability Exploited as Zero-Day Read More »

Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist

cybercrime, Data leak, Disney, Featured, guilty, hacker / SecurityTicks

Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist 2025-05-05 at 14:48 By Eduard Kovacs A 25-year-old has admitted hacking Disney systems and leaking data under the guise of a hacktivist collective named NullBulge. The post Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist appeared first on SecurityWeek. This article is an

React to this headline:

Man Admits Hacking Disney and Leaking Data Disguised as Hacktivist Read More »

UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks

Co-op, cyberattack, cybercrime, Featured, Harrods, M&S, Retail, UK / SecurityTicks

UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks 2025-05-02 at 14:05 By Ionut Arghire Major UK retailers Co-op, Harrods, and M&S are scrambling to restore services that were affected by cyberattacks. The post UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

UK Retailers Co-op, Harrods and M&S Struggle With Cyberattacks Read More »

Canadian Electric Utility Hit by Cyberattack

Canada, cyberattack, electric, Emera, Featured, Incident Response, Nova Scotia Power, utility / SecurityTicks

Canadian Electric Utility Hit by Cyberattack 2025-05-01 at 17:15 By Eduard Kovacs Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks. The post Canadian Electric Utility Hit by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Canadian Electric Utility Hit by Cyberattack Read More »

JPMorgan Chase CISO Fires Warning Shot Ahead of RSA Conference

CISO Strategy, Featured, RSA Conference 2025 / SecurityTicks

JPMorgan Chase CISO Fires Warning Shot Ahead of RSA Conference 2025-04-28 at 19:18 By Ryan Naraine This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business. The post JPMorgan Chase CISO Fires Warning Shot Ahead of RSA Conference appeared first on

React to this headline:

JPMorgan Chase CISO Fires Warning Shot Ahead of RSA Conference Read More »

SAP Zero-Day Possibly Exploited by Initial Access Broker

exploited, Featured, initial access broker, SAP, Vulnerabilities, Zero-Day / SecurityTicks

SAP Zero-Day Possibly Exploited by Initial Access Broker 2025-04-25 at 12:38 By Ionut Arghire A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications. The post SAP Zero-Day Possibly Exploited by Initial Access Broker appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

SAP Zero-Day Possibly Exploited by Initial Access Broker Read More »

Cyberattack Hits British Retailer Marks & Spencer

cyberattack, cybercrime, Featured, M&S, Marks&Spencer / SecurityTicks

Cyberattack Hits British Retailer Marks & Spencer 2025-04-23 at 13:35 By Ionut Arghire British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack. The post Cyberattack Hits British Retailer Marks & Spencer appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Cyberattack Hits British Retailer Marks & Spencer Read More »

Korean Telco Giant SK Telecom Hacked

cyberattack, data breach, Data Breaches, Featured, SK Telecom, South Korea, telecoms / SecurityTicks

Korean Telco Giant SK Telecom Hacked 2025-04-23 at 10:33 By Eduard Kovacs SK Telecom, South Korea’s largest telecom company, disclosed a data leak involving a malware infection. The post Korean Telco Giant SK Telecom Hacked appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Korean Telco Giant SK Telecom Hacked Read More »

The Shadow AI Surge: Study Finds 50% of Workers Use Unapproved AI Tools

AI, Artificial Intelligence, CISO Strategy, Data Protection, Featured, Shadow AI / SecurityTicks

The Shadow AI Surge: Study Finds 50% of Workers Use Unapproved AI Tools 2025-04-18 at 19:28 By Kevin Townsend With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise. The post The Shadow AI Surge: Study Finds 50% of Workers Use

React to this headline:

The Shadow AI Surge: Study Finds 50% of Workers Use Unapproved AI Tools Read More »

Fresh Windows NTLM Vulnerability Exploited in Attacks

exploited, Featured, NTLM, Vulnerabilities, Windows / SecurityTicks

Fresh Windows NTLM Vulnerability Exploited in Attacks 2025-04-18 at 11:30 By Ionut Arghire A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions. The post Fresh Windows NTLM Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to

React to this headline:

Fresh Windows NTLM Vulnerability Exploited in Attacks Read More »

SonicWall Flags Old Vulnerability as Actively Exploited

exploited, Featured, SMA, SonicWall, Vulnerabilities, vulnerability / SecurityTicks

SonicWall Flags Old Vulnerability as Actively Exploited 2025-04-17 at 14:05 By Eduard Kovacs A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild. The post SonicWall Flags Old Vulnerability as Actively Exploited appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

SonicWall Flags Old Vulnerability as Actively Exploited Read More »

Apple Quashes Two Zero-Days With iOS, MacOS Patches

apple, CVE-2025-31200, CVE-2025-31201, Featured, iOS 18.4.1, macOS, Malware & Threats, Vulnerabilities, Zero-Day / SecurityTicks

Apple Quashes Two Zero-Days With iOS, MacOS Patches 2025-04-16 at 23:38 By Ryan Naraine The vulnerabilities are described as code execution and mitigation bypass issues that affect Apple’s iOS, iPadOS and macOS platforms. The post Apple Quashes Two Zero-Days With iOS, MacOS Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

Apple Quashes Two Zero-Days With iOS, MacOS Patches Read More »

MITRE CVE Program Gets Last-Hour Funding Reprieve

CISA, CVE, CVE Program, Featured, Government, MITRE, Vulnerabilities / SecurityTicks

MITRE CVE Program Gets Last-Hour Funding Reprieve 2025-04-16 at 19:36 By Ryan Naraine The US government’s cybersecurity agency CISA has “executed the option period on the contract” to keep the vulnerability catalog operational. The post MITRE CVE Program Gets Last-Hour Funding Reprieve appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

MITRE CVE Program Gets Last-Hour Funding Reprieve Read More »

MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty

CVE, Featured, Government, MITRE, NIST, NVD, Vulnerabilities / SecurityTicks

MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty 2025-04-15 at 23:46 By Ryan Naraine MITRE warns of a deterioration of national vulnerability databases and advisories, slowed vendor reaction and limited response operations. The post MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty appeared first on SecurityWeek. This article is an excerpt

React to this headline:

MITRE Warns CVE Program Faces Disruption Amid US Funding Uncertainty Read More »

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games

China, Featured, Nation-State, NSA / SecurityTicks

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games 2025-04-15 at 14:01 By Associated Press China accuses three alleged U.S. NSA operatives of cyberattacks targeting critical infrastructure and the Asian Games in Harbin. The post China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games appeared first on SecurityWeek. This article is

React to this headline:

China Pursuing 3 Alleged US Operatives Over Cyberattacks During Asian Games Read More »

Hertz Discloses Data Breach Linked to Cleo Hack

data breach, Data Breaches, Featured, Hertz / SecurityTicks

Hertz Discloses Data Breach Linked to Cleo Hack 2025-04-15 at 13:16 By Ionut Arghire Customers of the Hertz, Thrifty, and Dollar brands had their personal information stolen as a result of the Cleo hack last year. The post Hertz Discloses Data Breach Linked to Cleo Hack appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Hertz Discloses Data Breach Linked to Cleo Hack Read More »

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe

CISO, CISO Conversations, CISO Strategy, Featured, Uncategorized / SecurityTicks

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe 2025-04-15 at 13:02 By Kevin Townsend Van Horenbeeck’s career spans some of the biggest companies in tech: Verizon, Microsoft, Google, Amazon, Zendesk, and now SVP and CSO at Adobe. The post CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe

React to this headline:

CISO Conversations: Maarten Van Horenbeeck, SVP & Chief Security officer at Adobe Read More »

AI Hallucinations Create a New Software Supply Chain Threat

AI, Featured, Gen-AI, supply chain, Supply Chain Security / SecurityTicks

AI Hallucinations Create a New Software Supply Chain Threat 2025-04-14 at 16:07 By Ionut Arghire Researchers uncover new software supply chain threat from LLM-generated package hallucinations. The post AI Hallucinations Create a New Software Supply Chain Threat appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

AI Hallucinations Create a New Software Supply Chain Threat Read More »

China Admitted to US That It Conducted Volt Typhoon Attacks: Report

China, critical infrastructure, Featured, Government, Nation-State, US, Volt Typhoon / SecurityTicks

China Admitted to US That It Conducted Volt Typhoon Attacks: Report 2025-04-11 at 13:14 By Eduard Kovacs In a secret meeting between Chinese and US officials, the former confirmed conducting cyberattacks on US infrastructure. The post China Admitted to US That It Conducted Volt Typhoon Attacks: Report appeared first on SecurityWeek. This article is an

React to this headline:

China Admitted to US That It Conducted Volt Typhoon Attacks: Report Read More »

Treasury’s OCC Says Hackers Had Access to 150,000 Emails

email security, Featured, Government, OCC, Treasury / SecurityTicks

Treasury’s OCC Says Hackers Had Access to 150,000 Emails 2025-04-09 at 14:48 By Eduard Kovacs The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a year. The post Treasury’s OCC Says Hackers Had Access to 150,000 Emails appeared first on SecurityWeek.

React to this headline:

Treasury’s OCC Says Hackers Had Access to 150,000 Emails Read More »