Incident Response - Security Ticks

White House Proposal Slashes Half-Billion from CISA Budget

budget, CISA, CVE, DHS, Government, Incident Response, Nation-State, RSA Conference / SecurityTicks

White House Proposal Slashes Half-Billion from CISA Budget 2025-05-05 at 18:31 By Ryan Naraine The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.” The post White House Proposal Slashes Half-Billion from CISA Budget appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

White House Proposal Slashes Half-Billion from CISA Budget Read More »

Canadian Electric Utility Hit by Cyberattack

Canada, cyberattack, electric, Emera, Featured, Incident Response, Nova Scotia Power, utility / SecurityTicks

Canadian Electric Utility Hit by Cyberattack 2025-05-01 at 17:15 By Eduard Kovacs Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks. The post Canadian Electric Utility Hit by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Canadian Electric Utility Hit by Cyberattack Read More »

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers

China, cyberespionage, fake IT workers, Incident Response, North Korea, SentinelOne / SecurityTicks

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers 2025-05-01 at 11:32 By Eduard Kovacs SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently. The post SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers appeared first on SecurityWeek. This article is

React to this headline:

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers Read More »

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC

agentic AI, AI, Artificial Intelligence, Incident Response, SentinelOne, SOC / SecurityTicks

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC 2025-04-29 at 19:01 By Kevin Townsend Athena marks a major leap in SOC automation, enabling real-time detection, triage, and remediation with minimal human oversight. The post SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC appeared first on SecurityWeek. This article is an excerpt

React to this headline:

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC Read More »

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances

Data Breaches, DBIR, Fortinet, Incident Response, Ivanti, Malware & Threats, Ransomware, SonicWall, Verizon / SecurityTicks

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances 2025-04-24 at 18:12 By Ryan Naraine The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices. The post Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances appeared first on SecurityWeek. This article

React to this headline:

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances Read More »

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs

attack lifecycle, attack tools, Don't miss, ESXi, Hot stuff, Incident Response, MITRE, MITRE ATT&CK, News, threat modeling / SecurityTicks

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs 2025-04-23 at 16:13 By Zeljka Zorz MITRE has released the latest version of its ATT&CK framework, which now also includes a new section (“matrix”) to cover the tactics, techniques and procedures (TTPs) used to target VMware ESXi hypervisors. About MITRE ATT&CK MITRE ATT&CK is a regularly

React to this headline:

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs Read More »

Conduent Says Names, Social Security Numbers Stolen in Cyberattack

conduent, Incident Response, Malware & Threats, Ransomware, Safepay, SEC / SecurityTicks

Conduent Says Names, Social Security Numbers Stolen in Cyberattack 2025-04-15 at 17:34 By Ionut Arghire The business services provider confirms personal information such as names and Social Security numbers was stolen in a January cyberattack. The post Conduent Says Names, Social Security Numbers Stolen in Cyberattack appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Conduent Says Names, Social Security Numbers Stolen in Cyberattack Read More »

Kidney Dialysis Services Provider DaVita Hit by Ransomware

DaVita, Incident Response, medical, Ransomware, SEC / SecurityTicks

Kidney Dialysis Services Provider DaVita Hit by Ransomware 2025-04-15 at 17:34 By Ionut Arghire DaVita has not named the ransomware group behind the incident or share details on the attacker’s ransom demands. The post Kidney Dialysis Services Provider DaVita Hit by Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Kidney Dialysis Services Provider DaVita Hit by Ransomware Read More »

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle

Connect Secure, CVE-2025-22457, Incident Response, Ivanti, Malware & Threats, Mandiant, Rapid7, VPN, Vulnerabilities / SecurityTicks

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle 2025-04-11 at 21:05 By Ryan Naraine The CVE-2025-22457 has already been exploited by a China-nexus hacking gang notorious for breaking into edge network devices. The post Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle appeared first on SecurityWeek. This

React to this headline:

Rapid7 Reveals RCE Path in Ivanti VPN Appliance After Silent Patch Debacle Read More »

Qevlar AI Raises $10 Million for Autonomous Investigation Platform

Cybersecurity Funding, funding, Incident Response, Qevlar / SecurityTicks

Qevlar AI Raises $10 Million for Autonomous Investigation Platform 2025-04-09 at 15:24 By Ionut Arghire French cybersecurity startup Qevlar AI has raised $10 million in a funding round led by EQT Ventures and Forgepoint Capital International. The post Qevlar AI Raises $10 Million for Autonomous Investigation Platform appeared first on SecurityWeek. This article is an

React to this headline:

Qevlar AI Raises $10 Million for Autonomous Investigation Platform Read More »

Zero to Hero – A “Measured” Approach to Building a World-Class Offensive Security Program

Incident Response, Network Security, Offensive Security / SecurityTicks

Zero to Hero – A “Measured” Approach to Building a World-Class Offensive Security Program 2025-03-31 at 17:40 By Trevin Edgeworth A strong security program will sometimes require substantial organizational and cultural changes around security practices, and inevitably, a higher cost. The post Zero to Hero – A “Measured” Approach to Building a World-Class Offensive Security

React to this headline:

Zero to Hero – A “Measured” Approach to Building a World-Class Offensive Security Program Read More »

5 pitfalls that can delay cyber incident response and recovery

automation, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Incident Response, News, opinion, ShadowHQ, threats / SecurityTicks

5 pitfalls that can delay cyber incident response and recovery 2025-03-20 at 08:35 By Help Net Security The responsibility of cyber incident response falls squarely on the shoulders of the CISO. And many CISOs invest heavily in technical response procedures, tabletop exercises and theoretical plans only to find out that when an actual breach strikes

React to this headline:

5 pitfalls that can delay cyber incident response and recovery Read More »

Review: Cybersecurity Tabletop Exercises

books, cybersecurity, Don't miss, Hot stuff, Incident Response, News, Review, Reviews, skill development, strategy, tips / SecurityTicks

Review: Cybersecurity Tabletop Exercises 2025-03-17 at 07:31 By Mirko Zorz Packed with real-world case studies and practical examples, Cybersecurity Tabletop Exercises offers insights into how organizations have successfully leveraged tabletop exercises to identify security gaps and enhance their incident response strategies. The authors explore a range of realistic scenarios, including phishing campaigns, ransomware attacks, and

React to this headline:

Review: Cybersecurity Tabletop Exercises Read More »

A Guide to Security Investments: The Anatomy of a Cyberattack

CISO Strategy, cyberattack, Incident Response / SecurityTicks

A Guide to Security Investments: The Anatomy of a Cyberattack 2025-03-12 at 17:31 By Torsten George Organizations must recognize that security is not about the number of tools deployed, it is about ensuring those tools effectively disrupt the attack chain at every stage. The post A Guide to Security Investments: The Anatomy of a Cyberattack

React to this headline:

A Guide to Security Investments: The Anatomy of a Cyberattack Read More »

The 5 stages of incident response grief

cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, Incident Response, LogicGate, News, opinion / SecurityTicks

The 5 stages of incident response grief 2025-03-05 at 18:03 By Help Net Security Whether we recognize it or not, anytime an incident occurs, it sets off the grieving process. But grief isn’t a bad thing: it’s how we process our emotional reactions and move on. That’s precisely what security teams need to do in

React to this headline:

The 5 stages of incident response grief Read More »

Mastering the cybersecurity tightrope of protection, detection, and response

cyber resilience, cybersecurity, data security, Don't miss, Encryption, Features, Hot stuff, Incident Response, monitoring, News, opinion, Sophos, strategy / SecurityTicks

Mastering the cybersecurity tightrope of protection, detection, and response 2025-02-21 at 08:05 By Mirko Zorz In this Help Net Security interview, Chester Wisniewski, Director and Global Field CISO at Sophos, discusses the shifting ransomware landscape, the risks posed by quantum decryption threats, and the role of vendor security validation. Wisniewski notes that cyber resilience is

React to this headline:

Mastering the cybersecurity tightrope of protection, detection, and response Read More »

Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems

Incident Response, Threat Intelligence, Virginia / SecurityTicks

Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems 2025-02-14 at 20:18 By Associated Press The chief deputy attorney general of the agency sent an email on Wednesday that said nearly all of is computer systems were offline. The post Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems appeared first

React to this headline:

Virginia Attorney General’s Office Struck by Cyberattack Targeting Attorneys’ Computer Systems Read More »

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents

Incident Response, SOC / SecurityTicks

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents 2025-02-06 at 14:04 By Joshua Goldfarb The blame of security incidents may be shared—but the burden of response always falls on the security team. Here’s how to prepare for the inevitable. The post Security Teams Pay the Price: The Unfair Reality of Cyber Incidents

React to this headline:

Security Teams Pay the Price: The Unfair Reality of Cyber Incidents Read More »

74% of CISOs are increasing crisis simulation budgets

CISO, cybersecurity, Hack The Box, Incident Response, investment, News, report, strategy, survey / SecurityTicks

74% of CISOs are increasing crisis simulation budgets 2025-01-28 at 06:46 By Help Net Security In the aftermath of 2024’s high-profile cybersecurity incidents, including NHS, CrowdStrike, 23andMe, Transport for London, and Cencora, CISOs are reassessing their organisation’s readiness to manage a potential “chaos” of a full-scale cyber crisis, according to Hack The Box. Many CISOs

React to this headline:

74% of CISOs are increasing crisis simulation budgets Read More »

Who handles what? Common misconceptions about SaaS security responsibilities

Cloud, cybersecurity, Don't miss, Features, Guidewire, Hot stuff, identity management, Incident Response, News, opinion, SaaS / SecurityTicks

Who handles what? Common misconceptions about SaaS security responsibilities 2024-12-09 at 07:33 By Mirko Zorz In this Help Net Security interview, James Dolph, CISO at Guidewire, addresses common misconceptions about security responsibilities in cloud environments, particularly in SaaS, and how these misunderstandings can lead to security risks. What common misconceptions do you encounter about the

React to this headline:

Who handles what? Common misconceptions about SaaS security responsibilities Read More »