Hot stuff - Security Ticks

Why the “voluntary AI commitments” extracted by the White House are nowhere near enough

Artificial Intelligence, cybersecurity, Don't miss, Expert analysis, Expert corner, framework, Hot stuff, Ironscales, monitoring, opinion, regulation, USA / SecurityTicks

Why the “voluntary AI commitments” extracted by the White House are nowhere near enough 16/08/2023 at 08:03 By Help Net Security Representatives from Amazon, Anthropic, Google, Inflection, Meta, Microsoft, and OpenAI recently convened at the White House for a meeting with President Biden with the stated mission of “ensuring the responsible development and distribution of […]

React to this headline:

Why the “voluntary AI commitments” extracted by the White House are nowhere near enough Read More »

How CISOs break down complex security challenges

CISO, cyber resilience, cyber risk, cybersecurity, digital transformation, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips, Uptycs / SecurityTicks

How CISOs break down complex security challenges 16/08/2023 at 07:33 By Mirko Zorz The role of the CISO has evolved into a critical position that encompasses many responsibilities aimed at safeguarding digital assets, preserving data integrity, and mitigating cyber threats. In essence, the role of the CISO is a complex and ever-evolving one that demands

React to this headline:

How CISOs break down complex security challenges Read More »

SEC cybersecurity rules shape the future of incident management

Compliance, cybersecurity, Don't miss, Government, Hot stuff, regulation, Schellman, strategy, USA, Video / SecurityTicks

SEC cybersecurity rules shape the future of incident management 16/08/2023 at 07:05 By Help Net Security The SEC adopted rules requiring registrants to disclose material cybersecurity incidents they experience and to disclose on an annual basis material information regarding their cybersecurity risk management, strategy, and governance. The Commission also adopted rules requiring foreign private issuers

React to this headline:

SEC cybersecurity rules shape the future of incident management Read More »

Ransomware: To pay or not to pay

attacks, Barrier Networks, cybersecurity, Don't miss, Expert analysis, Expert corner, extortion, Hot stuff, opinion, Ransomware / SecurityTicks

Ransomware: To pay or not to pay 15/08/2023 at 08:05 By Help Net Security Comprehensive security plans and programs must focus on defense, but also on answering these key question: “How will the organization respond to a ransomware attack?”, and “At what point will the option of paying the ransom be on the table?” What

React to this headline:

Ransomware: To pay or not to pay Read More »

Balancing telecom security, law enforcement, and customer trust

5G, Artificial Intelligence, awareness, BlackDice Cyber, cybersecurity, Don't miss, Features, Hot stuff, IoT, law enforcement, machine learning, mobile devices, News, opinion, penetration testing, Privacy Policy, remote working, surveillance, telecommunications, zero trust / SecurityTicks

Balancing telecom security, law enforcement, and customer trust 15/08/2023 at 07:48 By Mirko Zorz In this Help Net Security interview, Mark O’Neill, CTO at BlackDice Cyber, talks about collaboration, transparent policies, and a security-first mindset. As 5G and IoT emerge, robust measures and AI will navigate challenges and shape the telecom industry’s future. Considering the

React to this headline:

Balancing telecom security, law enforcement, and customer trust Read More »

How threats to mid-sized businesses impact us all

cybersecurity, Don't miss, Hot stuff, NormCyber, strategy, threats, tips, Video / SecurityTicks

How threats to mid-sized businesses impact us all 15/08/2023 at 07:06 By Help Net Security In this Help Net Security video, Paul Cragg, CTO at NormCyber, discusses how organizations grapple with many cyber threats. For smaller in-house IT teams, distinguishing between minor events and genuine threats becomes an overwhelming challenge since even a single overlooked

React to this headline:

How threats to mid-sized businesses impact us all Read More »

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks

attack, Cisco, Cloudflare, Data leak, Don't miss, Hot stuff, Malwarebytes, Mozilla, News, NordVPN, Privacy, research, VPN, vulnerability / SecurityTicks

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks 14/08/2023 at 16:47 By Zeljka Zorz Several vulnerabilities that affect most VPN products out there can be exploited by attackers to read user traffic, steal user information, or even attack user devices, researchers have discovered. “Our attacks are not computationally expensive, meaning anyone with the appropriate

React to this headline:

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks Read More »

Macs are getting compromised to act as proxy exit nodes

Accenture, adware, AT&T, botnet, Don't miss, Hot stuff, macOS, Malware, News, Proxy / SecurityTicks

Macs are getting compromised to act as proxy exit nodes 14/08/2023 at 14:01 By Zeljka Zorz AdLoad, well-known malware that has been targeting systems running macOS for over half a decade, has been observed delivering a new payload that – unbeknown to the owners – enlisted their systems into a residential proxy botnet. According to

React to this headline:

Macs are getting compromised to act as proxy exit nodes Read More »

Major vulnerabilities discovered in data center solutions

critical infrastructure, data center, Don't miss, Hot stuff, News, security update, Trellix, vulnerability / SecurityTicks

Major vulnerabilities discovered in data center solutions 14/08/2023 at 13:17 By Helga Labus Researchers have discovered serious security vulnerabilities in two widely used data center solutions: CyberPower’s PowerPanel Enterprise Data Center Infrastructure Management (DCIM) platform and Dataprobe’s iBoot Power Distribution Unit (PDU). “An attacker could chain these vulnerabilities together to gain full access to these

React to this headline:

Major vulnerabilities discovered in data center solutions Read More »

APTs use of lesser-known TTPs are no less of a headache

APT, attacks, Don't miss, Expert analysis, Expert corner, Hot stuff, Malware, opinion, strategy, WithSecure / SecurityTicks

APTs use of lesser-known TTPs are no less of a headache 14/08/2023 at 08:32 By Help Net Security APT (advanced persistent threat) attacks were once considered to be primarily a problem for large corporations, but the number of these (often state-sponsored) attacks against small- and medium-sized businesses has increased significantly. Everyone is fair game, and

React to this headline:

APTs use of lesser-known TTPs are no less of a headache Read More »

Deception technology and breach anticipation strategies

CISO, cybersecurity, deception, digital transformation, Don't miss, Features, Hot stuff, how-to, Insider Threat, Lupovis, News, opinion, security operations, strategy, tips / SecurityTicks

Deception technology and breach anticipation strategies 14/08/2023 at 08:02 By Mirko Zorz Cybersecurity is undergoing a paradigm shift. Previously, defenses were built on the assumption of keeping adversaries out; now, strategies are formed with the idea that they might already be within the network. This modern approach has given rise to advanced methods prioritizing rapid

React to this headline:

Deception technology and breach anticipation strategies Read More »

How manufacturers can navigate cybersecurity regulations amid NIST 2.0

Compliance, Don't miss, framework, Hot stuff, NIST, Rockwell Automation, strategy, tips, Video / SecurityTicks

How manufacturers can navigate cybersecurity regulations amid NIST 2.0 14/08/2023 at 07:31 By Help Net Security The National Institute of Standards and Technology (NIST) released a discussion draft for possible Cybersecurity Framework (CSF) changes earlier this year. The proposed changes aim to help increase the CSF’s clarity and bring the updated version closer to national

React to this headline:

How manufacturers can navigate cybersecurity regulations amid NIST 2.0 Read More »

Product showcase: Free email security test by ImmuniWeb Community Edition

Don't miss, email security, FBI, Hot stuff, ImmuniWeb, News, phishing, Product showcase, software / SecurityTicks

Product showcase: Free email security test by ImmuniWeb Community Edition 14/08/2023 at 07:03 By Help Net Security According to an FBI report, in 2022, global losses from business email compromise (BEC) and email account compromise (EAC) attacks attained $43 billion, hitting a historic anti-record. Multiple cybersecurity vendors, including Microsoft and Trend Micro, reported a rapid

React to this headline:

Product showcase: Free email security test by ImmuniWeb Community Edition Read More »

Black Hat USA 2023 video walkthrough

1Password, Aqua Security, Black Hat, Black Hat USA 2023, CISA, Cisco, conferences, CyberFOX, Darktrace, Dasera, Don't miss, Fortanix, Fortinet, Fortra, Hot stuff, HUMAN Security, Illumio, ManageEngine, Mimecast, NetSPI, Palo Alto Networks, Proofpoint, SentinelOne, Sophos, Tenable, Trellix, Uptycs, Video, VMWare, Wiz, Zimperium / SecurityTicks

Black Hat USA 2023 video walkthrough 11/08/2023 at 15:04 By Help Net Security Help Net Security is in Las Vegas this week for Black Hat USA 2023, and this video provides a closer look at the event. The exhibitors featured in this video are: 1Password, Aqua Security, CISA, Cisco, CyberFOX, Darktrace, Dasera, Fortanix, Fortinet, Fortra,

React to this headline:

Black Hat USA 2023 video walkthrough Read More »

How to handle API sprawl and the security threat it poses

API security, cybersecurity, Don't miss, Expert analysis, Expert corner, F5 Networks, Hot stuff, opinion, vulnerability / SecurityTicks

How to handle API sprawl and the security threat it poses 11/08/2023 at 08:34 By Help Net Security The proliferation of APIs has marked them as prime targets for malicious attackers. With recent reports indicating that API vulnerabilities are costing businesses billions of dollars annually, it’s no wonder they are at the top of mind

React to this headline:

How to handle API sprawl and the security threat it poses Read More »

How digital content security stays resilient amid evolving threats

CISO, cybersecurity, data, data security, Don't miss, Features, Hot stuff, News, opinion, RKVST, strategy, tips / SecurityTicks

How digital content security stays resilient amid evolving threats 11/08/2023 at 07:32 By Mirko Zorz With threats evolving and multiplying, it’s essential to understand how technological advancements can serve as both a challenge and an opportunity to safeguard digital content. In this Help Net Security interview, Rusty Cumpston, CEO at RKVST, discusses blockchain’s role in

React to this headline:

How digital content security stays resilient amid evolving threats Read More »

How to accelerate and access DDoS protection services using GRE

attack, CISO, cybersecurity, DDoS, Don't miss, Gcore, Hot stuff, how-to, strategy, tips, Video / SecurityTicks

How to accelerate and access DDoS protection services using GRE 11/08/2023 at 06:31 By Help Net Security As we entered 2023, the cybersecurity landscape witnessed an increase in sophisticated, high-volume attacks, according to Gcore. The maximum attack power rose from 600 to 800 Gbps. UDP flood attacks were most common and amounted to 52% of

React to this headline:

How to accelerate and access DDoS protection services using GRE Read More »

Microsoft 365 accounts of execs, managers hijacked through EvilProxy

account hijacking, Don't miss, Hot stuff, MFA, Microsoft 365, News, phishing, Proofpoint / SecurityTicks

Microsoft 365 accounts of execs, managers hijacked through EvilProxy 10/08/2023 at 14:48 By Helga Labus A phishing campaign leveraging the EvilProxy phishing-as-a-service (PhaaS) tool has been spotted targeting Microsoft 365 user accounts of C-level executives and managers at over 100 organizations around the world. The rise of phishing-as-a-service As organizations increasingly employ multi-factor authentication (MFA),

React to this headline:

Microsoft 365 accounts of execs, managers hijacked through EvilProxy Read More »

Will AI kill cybersecurity jobs?

Artificial Intelligence, Ben-Gurion University, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, opinion, professional / SecurityTicks

Will AI kill cybersecurity jobs? 10/08/2023 at 07:35 By Help Net Security Some ten years ago, the authors of The Second Machine Age wrote that “computers and other digital advances are doing for mental power—the ability to use our brains to understand and shape our environments—what the steam engine and its descendants did for muscle

React to this headline:

Will AI kill cybersecurity jobs? Read More »

Learning from past healthcare breaches to fortify future cybersecurity strategies

Centura Health, CISA, cybercrime, cybersecurity, data, data breach, Don't miss, Features, Health3PT, healthcare, HITRUST, Hot stuff, legacy technology, News, opinion / SecurityTicks

Learning from past healthcare breaches to fortify future cybersecurity strategies 10/08/2023 at 07:02 By Help Net Security In the face of rising cyber threats, the healthcare sector has become a hotbed for cyberattacks. Given the gravity of this situation, we sat down with Shenny Sheth, Deputy CISO at Centura Health, who sheds light on the

React to this headline:

Learning from past healthcare breaches to fortify future cybersecurity strategies Read More »