guidance - Security Ticks

US, Allies Push for SBOMs to Bolster Cybersecurity

Application Security, CISA, guidance, Risk Management, SBOM / SecurityTicks

US, Allies Push for SBOMs to Bolster Cybersecurity 2025-09-04 at 13:52 By Ionut Arghire SBOM adoption will drive software supply chain security, decreasing risks and costs, and improving transparency. The post US, Allies Push for SBOMs to Bolster Cybersecurity appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to […]

React to this headline:

US, Allies Push for SBOMs to Bolster Cybersecurity Read More »

CISA Requests Public Feedback on Updated SBOM Guidance

Application Security, CISA, guidance, SBOM, Supply Chain Security / SecurityTicks

CISA Requests Public Feedback on Updated SBOM Guidance 2025-08-25 at 13:54 By Ionut Arghire CISA has updated the Minimum Elements for a Software Bill of Materials (SBOM) guidance and is seeking public comment. The post CISA Requests Public Feedback on Updated SBOM Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

React to this headline:

CISA Requests Public Feedback on Updated SBOM Guidance Read More »

US Warns of Hackers Targeting ICS/SCADA at Oil and Gas Organizations

alert, CISA, Featured, guidance, ICS, ICS/OT, SCADA / SecurityTicks

US Warns of Hackers Targeting ICS/SCADA at Oil and Gas Organizations 2025-05-07 at 11:17 By Ionut Arghire The US government warns of threat actors targeting ICS/SCADA systems at oil and natural gas organizations. The post US Warns of Hackers Targeting ICS/SCADA at Oil and Gas Organizations appeared first on SecurityWeek. This article is an excerpt

React to this headline:

US Warns of Hackers Targeting ICS/SCADA at Oil and Gas Organizations Read More »

CISA Issues Guidance After Oracle Cloud Hack

CISA, credentials, guidance, Identity & Access, Oracle / SecurityTicks

CISA Issues Guidance After Oracle Cloud Hack 2025-04-17 at 14:05 By Eduard Kovacs CISA is making recommendations for organizations and users in light of the recent Oracle legacy cloud environment hack. The post CISA Issues Guidance After Oracle Cloud Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

CISA Issues Guidance After Oracle Cloud Hack Read More »

US, Allies Warn of Threat Actors Using ‘Fast Flux’ to Hide Server Locations

CISA, DNS, fast flux, guidance, Malware & Threats / SecurityTicks

US, Allies Warn of Threat Actors Using ‘Fast Flux’ to Hide Server Locations 2025-04-04 at 15:29 By Ionut Arghire US and allied countries warn of threat actors using the “fast flux” technique to change DNS records and hide malicious servers’ locations. The post US, Allies Warn of Threat Actors Using ‘Fast Flux’ to Hide Server

React to this headline:

US, Allies Warn of Threat Actors Using ‘Fast Flux’ to Hide Server Locations Read More »

GAO Tells Coast Guard to Improve Cybersecurity of Maritime Transportation System

coast guard, GAO, guidance, Maritime, Security Architecture / SecurityTicks

GAO Tells Coast Guard to Improve Cybersecurity of Maritime Transportation System 2025-02-12 at 15:18 By Ionut Arghire A new GAO report assesses that the Coast Guard needs to improve Maritime Transportation System (MTS) cybersecurity. The post GAO Tells Coast Guard to Improve Cybersecurity of Maritime Transportation System appeared first on SecurityWeek. This article is an

React to this headline:

GAO Tells Coast Guard to Improve Cybersecurity of Maritime Transportation System Read More »

Five Eyes Agencies Release Guidance on Securing Edge Devices

Edge Devices, Government, guidance, Network Security / SecurityTicks

Five Eyes Agencies Release Guidance on Securing Edge Devices 2025-02-06 at 14:31 By Ionut Arghire Five Eyes cybersecurity agencies have released guidance on securing edge devices against increasing threats. The post Five Eyes Agencies Release Guidance on Securing Edge Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Five Eyes Agencies Release Guidance on Securing Edge Devices Read More »

US, Allies Release Guidance on Securing OT Environments

CISA, Government, guidance, ICS, ICS/OT / SecurityTicks

US, Allies Release Guidance on Securing OT Environments 2024-10-02 at 17:01 By Ionut Arghire New guidance provides information on how to create and maintain a secure operational technology (OT) environment. The post US, Allies Release Guidance on Securing OT Environments appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

US, Allies Release Guidance on Securing OT Environments Read More »

Five Eyes Agencies Release Guidance on Detecting Active Directory Intrusions

Active Directory, guidance, Identity & Access / SecurityTicks

Five Eyes Agencies Release Guidance on Detecting Active Directory Intrusions 2024-09-27 at 17:31 By Ionut Arghire Five Eyes cybersecurity agencies have released joint guidance on identifying Active Directory compromises. The post Five Eyes Agencies Release Guidance on Detecting Active Directory Intrusions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Five Eyes Agencies Release Guidance on Detecting Active Directory Intrusions Read More »

US, Allies Release Guidance on Event Logging and Threat Detection

CISA, Government, guidance, logs / SecurityTicks

US, Allies Release Guidance on Event Logging and Threat Detection 2024-08-23 at 15:01 By Ionut Arghire Government agencies in the US and allied countries have released guidance on how organizations can define a baseline for event logging best practices. The post US, Allies Release Guidance on Event Logging and Threat Detection appeared first on SecurityWeek.

React to this headline:

US, Allies Release Guidance on Event Logging and Threat Detection Read More »

US, Allies Warn of Memory Unsafety Risks in Open Source Software

Application Security, CISA, guidance, open source, source code / SecurityTicks

US, Allies Warn of Memory Unsafety Risks in Open Source Software 2024-06-27 at 17:01 By Ionut Arghire Most critical open source software contains code written in a memory unsafe language, US, Australian, and Canadian government agencies warn. The post US, Allies Warn of Memory Unsafety Risks in Open Source Software appeared first on SecurityWeek. This

React to this headline:

US, Allies Warn of Memory Unsafety Risks in Open Source Software Read More »

US, Allies Publish Guidance on Securing Network Access

CISA, guidance, Network Security / SecurityTicks

US, Allies Publish Guidance on Securing Network Access 2024-06-19 at 15:50 By Ionut Arghire Government agencies in the US, New Zealand, and Canada have published new guidance on improving network security. The post US, Allies Publish Guidance on Securing Network Access appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

US, Allies Publish Guidance on Securing Network Access Read More »

EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems

Government, guidance, ICS/OT, Water / SecurityTicks

EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems 2024-05-21 at 14:31 By Eduard Kovacs The EPA has issued an enforcement alert, outlining the steps needed to comply with the Safe Drinking Water Act. The post EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems appeared first on SecurityWeek. This article

React to this headline:

EPA Issues Alert After Finding Critical Vulnerabilities in Drinking Water Systems Read More »

CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities

CISA, guidance, Vulnerabilities, vulnerability / SecurityTicks

CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities 2024-05-03 at 17:09 By Ionut Arghire CISA and the FBI warn of threat actors abusing path traversal software vulnerabilities in attacks targeting critical infrastructure. The post CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

CISA, FBI Urge Organizations to Eliminate Path Traversal Vulnerabilities Read More »

US Government Releases Guidance on Securing Election Infrastructure

Election, Government, guidance / SecurityTicks

US Government Releases Guidance on Securing Election Infrastructure 2024-04-19 at 15:16 By Ionut Arghire New US guidance details foreign malign influence operations to help election infrastructure stakeholders increase resilience. The post US Government Releases Guidance on Securing Election Infrastructure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

US Government Releases Guidance on Securing Election Infrastructure Read More »

Five Eyes Agencies Release New AI Security Guidance

AI, artificial inteligence, Artificial Intelligence, guidance / SecurityTicks

Five Eyes Agencies Release New AI Security Guidance 2024-04-18 at 17:46 By Eduard Kovacs Five Eyes cybersecurity agencies have released joint guidance on securely deploying and operating AI systems. The post Five Eyes Agencies Release New AI Security Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Five Eyes Agencies Release New AI Security Guidance Read More »

US Government Issues New DDoS Mitigation Guidance

DDoS, Government, guidance, Network Security / SecurityTicks

US Government Issues New DDoS Mitigation Guidance 2024-03-22 at 16:01 By Ionut Arghire CISA, the FBI, and MS-ISAC have released new guidance on how federal agencies can defend against DDoS attacks. The post US Government Issues New DDoS Mitigation Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

US Government Issues New DDoS Mitigation Guidance Read More »

UK Government Releases Cloud SCADA Security Guidance

guidance, ICS, ICS/OT, SCADA / SecurityTicks

UK Government Releases Cloud SCADA Security Guidance 2024-03-19 at 01:02 By Eduard Kovacs UK’s NCSC releases security guidance for OT organizations considering migrating their SCADA solutions to the cloud. The post UK Government Releases Cloud SCADA Security Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

UK Government Releases Cloud SCADA Security Guidance Read More »

US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities

CISA, Government, guidance, ICS/OT, Water / SecurityTicks

US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities 2024-01-19 at 14:01 By Ionut Arghire CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response. The post US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities appeared first on SecurityWeek. This article is an

React to this headline:

US Gov Publishes Cybersecurity Guidance for Water and Wastewater Utilities Read More »

NIST: No Silver Bullet Against Adversarial Machine Learning Attacks

AI, AI/ML, Artificial Intelligence, guidance, machine learning, NIST / SecurityTicks

NIST: No Silver Bullet Against Adversarial Machine Learning Attacks 2024-01-08 at 15:46 By Eduard Kovacs NIST has published guidance on adversarial machine learning (AML) attacks and mitigations, warning that there is no silver bullet. The post NIST: No Silver Bullet Against Adversarial Machine Learning Attacks appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

NIST: No Silver Bullet Against Adversarial Machine Learning Attacks Read More »