framework - Security Ticks

Building security that protects customers, not just auditors

cybersecurity, Don't miss, Features, framework, Hot stuff, monitoring, News, Rapyd, security standard / SecurityTicks

Building security that protects customers, not just auditors 2025-09-16 at 09:31 By Mirko Zorz In this Help Net Security interview, Nir Rothenberg, CISO at Rapyd, discusses global differences in payment security maturity and the lessons that can be learned from leading regions. He points out that good engineering usually leads to strong security, and cautions […]

React to this headline:

Building security that protects customers, not just auditors Read More »

Can AI agents catch what your SOC misses?

Artificial Intelligence, cybersecurity, Don't miss, Features, framework, Hot stuff, network monitoring, News, open source, research, security operations, SOC / SecurityTicks

Can AI agents catch what your SOC misses? 2025-09-02 at 10:45 By Mirko Zorz A new research project called NetMoniAI shows how AI agents might reshape network monitoring and security. Developed by a team at Texas Tech University, the framework brings together two ideas: distributed monitoring at the edge and AI-driven analysis at the center.

React to this headline:

Can AI agents catch what your SOC misses? Read More »

AIDEFEND: Free AI defense framework

Artificial Intelligence, cybersecurity, Don't miss, framework, Hot stuff, News, open source / SecurityTicks

AIDEFEND: Free AI defense framework 2025-09-01 at 09:21 By Mirko Zorz AIDEFEND (Artificial Intelligence Defense Framework) is an open knowledge base dedicated to AI security, providing defensive countermeasures and best practices to help security pros safeguard AI and machine learning systems. Practicality is at the core of AIDEFEND. The framework is designed to be “highly

React to this headline:

AIDEFEND: Free AI defense framework Read More »

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior

CISO, cyber resilience, cybersecurity, Don't miss, Features, framework, Hot stuff, machine learning, MITRE ATT&CK, News, OWASP, reconnaissance, research, security operations, SOC / SecurityTicks

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior 2025-09-01 at 09:21 By Mirko Zorz A team of researchers from Frondeur Labs, DistributedApps.ai, and OWASP has developed a new machine learning framework designed to help defenders anticipate attacker behavior across the stages of the Cyber Kill Chain. The work explores how machine learning models

React to this headline:

KillChainGraph: Researchers test machine learning framework for mapping attacker behavior Read More »

New framework aims to outsmart malware evasion tricks

Aryaka, cybersecurity, Don't miss, Features, framework, Hot stuff, machine learning, Malware, News, research / SecurityTicks

New framework aims to outsmart malware evasion tricks 2025-08-29 at 10:03 By Mirko Zorz Attackers have learned how to trick machine learning malware detectors with small but clever code changes, and researchers say they may finally have an answer. In a new paper, academics from Inria and the CISPA Helmholtz Center for Information Security describe

React to this headline:

New framework aims to outsmart malware evasion tricks Read More »

What happens when penetration testing goes virtual and gets an AI coach

Artificial Intelligence, Don't miss, Features, framework, Hot stuff, News, penetration testing, research, Sectigo, skill development, training / SecurityTicks

What happens when penetration testing goes virtual and gets an AI coach 2025-08-19 at 09:32 By Mirko Zorz Cybersecurity training often struggles to match the complexity of threats. A new approach combining digital twins and LLMs aims to close that gap. Researchers from the University of Bari Aldo Moro propose using Cyber Digital Twins (CDTs)

React to this headline:

What happens when penetration testing goes virtual and gets an AI coach Read More »

The top CTEM platforms you should know in 2025

cybersecurity, Don't miss, framework, Hot stuff, Ionix, News, opinion, threat, threat detection, vulnerability management / SecurityTicks

The top CTEM platforms you should know in 2025 2025-08-14 at 08:02 By Help Net Security Continuous Threat Exposure Management (CTEM) is a modern cybersecurity strategy originally coined by Gartner analysts, which focuses on identifying, prioritizing, validating, and mobilizing teams to reduce threat exposure across an organization’s full attack surface. It’s in a category of

React to this headline:

The top CTEM platforms you should know in 2025 Read More »

The legal minefield of hacking back

bug bounty, CISO, cybersecurity, Don't miss, Features, framework, hacking, Hot stuff, ImmuneFi, law, News, opinion, strategy, tips / SecurityTicks

The legal minefield of hacking back 2025-07-28 at 08:57 By Mirko Zorz In this Help Net Security interview, Gonçalo Magalhães, Head of Security at Immunefi, discusses the legal and ethical implications of hacking back in cross-border cyber incidents. He warns that offensive cyber actions risk violating international law, escalating conflicts, and harming innocent third parties.

React to this headline:

The legal minefield of hacking back Read More »

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats

AADAPT, Cryptocurrency, framework, MITRE, Risk Management / SecurityTicks

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats 2025-07-15 at 10:19 By Ionut Arghire The MITRE AADAPT framework provides documentation for identifying, investigating, and responding to weaknesses in digital asset payments. The post MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

MITRE Unveils AADAPT Framework to Tackle Cryptocurrency Threats Read More »

How FinTechs are turning GRC into a strategic enabler

Artificial Intelligence, Compliance, cybersecurity, Don't miss, EU, Europe, Features, financial industry, Fintech, framework, GRC, Hot stuff, News, regulation, Risk Management, Riverty / SecurityTicks

How FinTechs are turning GRC into a strategic enabler 2025-07-02 at 08:36 By Mirko Zorz In this Help Net Security interview, Alexander Clemm, Corp GRC Lead, Group CISO, and BCO at Riverty, shares how the GRC landscape for FinTechs has matured in response to tighter regulations and global growth. He discusses the impact of frameworks

React to this headline:

How FinTechs are turning GRC into a strategic enabler Read More »

CC Signals lets you set boundaries with AI without locking down your work

Artificial Intelligence, framework, News / SecurityTicks

CC Signals lets you set boundaries with AI without locking down your work 2025-06-26 at 09:07 By Anamarija Pogorelec Creative Commons introduced CC Signals, a new framework that helps data and content owners communicate how they want their work used by AI systems. The idea is to build a shared understanding of what’s acceptable, and

React to this headline:

CC Signals lets you set boundaries with AI without locking down your work Read More »

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques

CardinalOps, cybersecurity, framework, MITRE, MITRE ATT&CK, News, report, SIEM, SOC, survey, threat detection / SecurityTicks

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques 2025-06-09 at 07:32 By Help Net Security Using the MITRE ATT&CK framework as a baseline, organizations are generally improving year-over-year in understanding security information and event management (SIEM) detection coverage and quality, but plenty of room for improvement remains, according to CardinalOps. MITRE ATT&CK enhances SOC

React to this headline:

Enterprise SIEMs miss 79% of known MITRE ATT&CK techniques Read More »

How AI agents reshape industrial automation and risk management

Artificial Intelligence, critical infrastructure, cybersecurity, Don't miss, Features, framework, Hot stuff, News, Siemens, standards, strategy / SecurityTicks

How AI agents reshape industrial automation and risk management 2025-05-27 at 08:33 By Mirko Zorz In this Help Net Security interview, Michael Metzler, Vice President Horizontal Management Cybersecurity for Digital Industries at Siemens, discusses the cybersecurity implications of deploying AI agents in industrial environments. He talks about the risks that come with AI agents making

React to this headline:

How AI agents reshape industrial automation and risk management Read More »

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks

Artificial Intelligence, Don't miss, framework, GitHub, Hot stuff, Meta, News, open source, software / SecurityTicks

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks 2025-05-26 at 08:52 By Mirko Zorz LlamaFirewall is a system-level security framework for LLM-powered applications, built with a modular design to support layered, adaptive defense. It is designed to mitigate a wide spectrum of AI agent security risks including jailbreaking and indirect prompt injection,

React to this headline:

LlamaFirewall: Open-source framework to detect and mitigate AI centric security risks Read More »

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel

cybersecurity, Don't miss, framework, Hot stuff, MITRE, MITRE ATT&CK, News, Video / SecurityTicks

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel 2025-05-19 at 07:04 By Help Net Security In this Help Net Security video, Adam Pennington, MITRE ATT&CK Lead, breaks down what’s new in the ATT&CK v17 release. He highlights the addition of the ESXi platform, new and updated techniques for Linux, refinements to mitigation guidance, and

React to this headline:

Inside MITRE ATT&CK v17: Smarter defenses, sharper threat intel Read More »

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed

cybersecurity, framework, News, OpenSSF, The Linux Foundation / SecurityTicks

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed 2025-05-16 at 08:08 By Help Net Security The Linux Foundation, in collaboration with OpenSSF and Linux Foundation Education, has released the Cybersecurity Skills Framework, a global reference guide that helps organizations identify and address critical cybersecurity competencies across a broad

React to this headline:

Cybersecurity Skills Framework connects the dots between IT job roles and the practical skills needed Read More »

UNIDIR Intrusion Path: New framework to analyze ICT environment activities

critical infrastructure, framework, ICS/SCADA, News / SecurityTicks

UNIDIR Intrusion Path: New framework to analyze ICT environment activities 2025-05-13 at 07:37 By Help Net Security Malicious activity in the ICT environment is growing. However, a non-technical audience often struggle to understand these threats, either because technical explanations are too complex or because media coverage oversimplifies the issues. To help understand and analyze these

React to this headline:

UNIDIR Intrusion Path: New framework to analyze ICT environment activities Read More »

Villain: Open-source framework for managing and enhancing reverse shells

Don't miss, framework, GitHub, News, open source, software / SecurityTicks

Villain: Open-source framework for managing and enhancing reverse shells 2025-04-30 at 08:04 By Mirko Zorz Villain is an open-source Stage 0/1 command-and-control (C2) framework designed to manage multiple reverse TCP and HoaxShell-based shells. Beyond simply handling connections, Villain enhances these shells with added functionality, offering commands and utilities, and allowing for shell sessions sharing across

React to this headline:

Villain: Open-source framework for managing and enhancing reverse shells Read More »

13 core principles to strengthen AI cybersecurity

Artificial Intelligence, ETSI, framework, News, security standard, standards / SecurityTicks

13 core principles to strengthen AI cybersecurity 2025-04-25 at 07:55 By Help Net Security The new ETSI TS 104 223 specification for securing AI provides reliable and actionable cybersecurity guidance aimed at protecting end users. Adopting a whole-lifecycle approach, the framework outlines 13 core principles that expand into 72 detailed, trackable principles across five key

React to this headline:

13 core principles to strengthen AI cybersecurity Read More »

Strategic AI readiness for cybersecurity: From hype to reality

Artificial Intelligence, Aryaka, Compliance, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, News, opinion, strategy / SecurityTicks

Strategic AI readiness for cybersecurity: From hype to reality 2025-04-16 at 08:34 By Help Net Security AI readiness in cybersecurity involves more than just possessing the latest tools and technologies; it is a strategic necessity. Many companies could encounter serious repercussions, such as increased volumes of advanced cyber threats, if they fail to exploit AI

React to this headline:

Strategic AI readiness for cybersecurity: From hype to reality Read More »