framework - Security Ticks

A2AS framework targets prompt injection and agentic AI security risks

agentic AI, Artificial Intelligence, CISO, cybersecurity, Don't miss, framework, LLMs, News / SecurityTicks

A2AS framework targets prompt injection and agentic AI security risks 2025-10-01 at 08:31 By Mirko Zorz AI systems are now deeply embedded in business operations, and this introduces new security risks that traditional controls are not built to handle. The newly released A2AS framework is designed to protect AI agents at runtime and prevent real-world […]

React to this headline:

A2AS framework targets prompt injection and agentic AI security risks Read More »

CSA Unveils SaaS Security Controls Framework to Ease Complexity

Cloud, cloud security, framework, SaaS, Security Infrastructure / SecurityTicks

CSA Unveils SaaS Security Controls Framework to Ease Complexity 2025-09-25 at 15:33 By Kevin Townsend New framework from the Cloud Security Alliance helps SaaS customers navigate the shared responsibility model with confidence. The post CSA Unveils SaaS Security Controls Framework to Ease Complexity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

CSA Unveils SaaS Security Controls Framework to Ease Complexity Read More »

New framework sets baseline for SaaS security controls

AppOmni, cloud security, Cloud Security Alliance, enterprise, framework, GuidePoint Security, MongoDB, News, SaaS / SecurityTicks

New framework sets baseline for SaaS security controls 2025-09-25 at 10:12 By Anamarija Pogorelec Managing security across dozens or even hundreds of SaaS apps has become a major headache. Each tool has its own settings, permissions, and logs, and most third-party risk processes only look at the vendor’s overall security, not the app itself. That

React to this headline:

New framework sets baseline for SaaS security controls Read More »

Cybersecurity AI (CAI): Open-source framework for AI security

agentic AI, Artificial Intelligence, Don't miss, framework, GitHub, News, open source, software / SecurityTicks

Cybersecurity AI (CAI): Open-source framework for AI security 2025-09-22 at 10:29 By Anamarija Pogorelec Cybersecurity AI (CAI) is an open-source framework that helps security teams build and run AI-driven tools for offensive and defensive tasks. It’s designed for anyone working in security, including researchers, ethical hackers, IT staff, and organizations that want to use AI

React to this headline:

Cybersecurity AI (CAI): Open-source framework for AI security Read More »

Building security that protects customers, not just auditors

cybersecurity, Don't miss, Features, framework, Hot stuff, monitoring, News, Rapyd, security standard / SecurityTicks

Building security that protects customers, not just auditors 2025-09-16 at 09:31 By Mirko Zorz In this Help Net Security interview, Nir Rothenberg, CISO at Rapyd, discusses global differences in payment security maturity and the lessons that can be learned from leading regions. He points out that good engineering usually leads to strong security, and cautions

React to this headline:

Building security that protects customers, not just auditors Read More »

Can AI agents catch what your SOC misses?

Artificial Intelligence, cybersecurity, Don't miss, Features, framework, Hot stuff, network monitoring, News, open source, research, security operations, SOC / SecurityTicks

Can AI agents catch what your SOC misses? 2025-09-02 at 10:45 By Mirko Zorz A new research project called NetMoniAI shows how AI agents might reshape network monitoring and security. Developed by a team at Texas Tech University, the framework brings together two ideas: distributed monitoring at the edge and AI-driven analysis at the center.

React to this headline:

Can AI agents catch what your SOC misses? Read More »

AIDEFEND: Free AI defense framework

Artificial Intelligence, cybersecurity, Don't miss, framework, Hot stuff, News, open source / SecurityTicks

AIDEFEND: Free AI defense framework 2025-09-01 at 09:21 By Mirko Zorz AIDEFEND (Artificial Intelligence Defense Framework) is an open knowledge base dedicated to AI security, providing defensive countermeasures and best practices to help security pros safeguard AI and machine learning systems. Practicality is at the core of AIDEFEND. The framework is designed to be “highly

React to this headline:

AIDEFEND: Free AI defense framework Read More »

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior

CISO, cyber resilience, cybersecurity, Don't miss, Features, framework, Hot stuff, machine learning, MITRE ATT&CK, News, OWASP, reconnaissance, research, security operations, SOC / SecurityTicks

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior 2025-09-01 at 09:21 By Mirko Zorz A team of researchers from Frondeur Labs, DistributedApps.ai, and OWASP has developed a new machine learning framework designed to help defenders anticipate attacker behavior across the stages of the Cyber Kill Chain. The work explores how machine learning models

React to this headline:

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior Read More »

New framework aims to outsmart malware evasion tricks

Aryaka, cybersecurity, Don't miss, Features, framework, Hot stuff, machine learning, Malware, News, research / SecurityTicks

New framework aims to outsmart malware evasion tricks 2025-08-29 at 10:03 By Mirko Zorz Attackers have learned how to trick machine learning malware detectors with small but clever code changes, and researchers say they may finally have an answer. In a new paper, academics from Inria and the CISPA Helmholtz Center for Information Security describe

React to this headline:

New framework aims to outsmart malware evasion tricks Read More »

What happens when penetration testing goes virtual and gets an AI coach

Artificial Intelligence, Don't miss, Features, framework, Hot stuff, News, penetration testing, research, Sectigo, skill development, training / SecurityTicks

What happens when penetration testing goes virtual and gets an AI coach 2025-08-19 at 09:32 By Mirko Zorz Cybersecurity training often struggles to match the complexity of threats. A new approach combining digital twins and LLMs aims to close that gap. Researchers from the University of Bari Aldo Moro propose using Cyber Digital Twins (CDTs)

React to this headline:

What happens when penetration testing goes virtual and gets an AI coach Read More »

The top CTEM platforms you should know in 2025

cybersecurity, Don't miss, framework, Hot stuff, Ionix, News, opinion, threat, threat detection, vulnerability management / SecurityTicks

The top CTEM platforms you should know in 2025 2025-08-14 at 08:02 By Help Net Security Continuous Threat Exposure Management (CTEM) is a modern cybersecurity strategy originally coined by Gartner analysts, which focuses on identifying, prioritizing, validating, and mobilizing teams to reduce threat exposure across an organization’s full attack surface. It’s in a category of

React to this headline:

The top CTEM platforms you should know in 2025 Read More »

The legal minefield of hacking back

bug bounty, CISO, cybersecurity, Don't miss, Features, framework, hacking, Hot stuff, ImmuneFi, law, News, opinion, strategy, tips / SecurityTicks

The legal minefield of hacking back 2025-07-28 at 08:57 By Mirko Zorz In this Help Net Security interview, Gonçalo Magalhães, Head of Security at Immunefi, discusses the legal and ethical implications of hacking back in cross-border cyber incidents. He warns that offensive cyber actions risk violating international law, escalating conflicts, and harming innocent third parties.

React to this headline:

The legal minefield of hacking back Read More »

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats

AADAPT, Cryptocurrency, framework, MITRE, Risk Management / SecurityTicks

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats 2025-07-15 at 10:19 By Ionut Arghire The MITRE AADAPT framework provides documentation for identifying, investigating, and responding to weaknesses in digital asset payments. The post MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats Read More »

How FinTechs are turning GRC into a strategic enabler

Artificial Intelligence, Compliance, cybersecurity, Don't miss, EU, Europe, Features, financial industry, Fintech, framework, GRC, Hot stuff, News, regulation, Risk Management, Riverty / SecurityTicks

How FinTechs are turning GRC into a strategic enabler 2025-07-02 at 08:36 By Mirko Zorz In this Help Net Security interview, Alexander Clemm, Corp GRC Lead, Group CISO, and BCO at Riverty, shares how the GRC landscape for FinTechs has matured in response to tighter regulations and global growth. He discusses the impact of frameworks

React to this headline:

How FinTechs are turning GRC into a strategic enabler Read More »

CC Signals lets you set boundaries with AI without locking down your work

Artificial Intelligence, framework, News / SecurityTicks

CC Signals lets you set boundaries with AI without locking down your work 2025-06-26 at 09:07 By Anamarija Pogorelec Creative Commons introduced CC Signals, a new framework that helps data and content owners communicate how they want their work used by AI systems. The idea is to build a shared understanding of what’s acceptable, and

React to this headline:

CC Signals lets you set boundaries with AI without locking down your work Read More »

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques

CardinalOps, cybersecurity, framework, MITRE, MITRE ATT&CK, News, report, SIEM, SOC, survey, threat detection / SecurityTicks

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques 2025-06-09 at 07:32 By Help Net Security Using the MITRE ATT&CK framework as a baseline, organizations are generally improving year-over-year in understanding security information and event management (SIEM) detection coverage and quality, but plenty of room for improvement remains, according to CardinalOps. MITRE ATT&CK enhances SOC

React to this headline:

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques Read More »

How AI agents reshape industrial automation and risk management

Artificial Intelligence, critical infrastructure, cybersecurity, Don't miss, Features, framework, Hot stuff, News, Siemens, standards, strategy / SecurityTicks

How AI agents reshape industrial automation and risk management 2025-05-27 at 08:33 By Mirko Zorz In this Help Net Security interview, Michael Metzler, Vice President Horizontal Management Cybersecurity for Digital Industries at Siemens, discusses the cybersecurity implications of deploying AI agents in industrial environments. He talks about the risks that come with AI agents making

React to this headline:

How AI agents reshape industrial automation and risk management Read More »

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks

Artificial Intelligence, Don't miss, framework, GitHub, Hot stuff, Meta, News, open source, software / SecurityTicks

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks 2025-05-26 at 08:52 By Mirko Zorz LlamaFirewall is a system-level security framework for LLM-powered applications, built with a modular design to support layered, adaptive defense. It is designed to mitigate a wide spectrum of AI agent security risks including jailbreaking and indirect prompt injection,

React to this headline:

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks Read More »

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel

cybersecurity, Don't miss, framework, Hot stuff, MITRE, MITRE ATT&CK, News, Video / SecurityTicks

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel 2025-05-19 at 07:04 By Help Net Security In this Help Net Security video, Adam Pennington, MITRE ATT&CK Lead, breaks down what’s new in the ATT&CK v17 release. He highlights the addition of the ESXi platform, new and updated techniques for Linux, refinements to mitigation guidance, and

React to this headline:

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel Read More »

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed

cybersecurity, framework, News, OpenSSF, The Linux Foundation / SecurityTicks

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed 2025-05-16 at 08:08 By Help Net Security The Linux Foundation, in collaboration with OpenSSF and Linux Foundation Education, has released the Cybersecurity Skills Framework, a global reference guide that helps organizations identify and address critical cybersecurity competencies across a broad

React to this headline:

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed Read More »