Incident Response - Security Ticks

Kanvas: Open-source incident response case management tool

cybersecurity, Don't miss, GitHub, Hot stuff, Incident Response, MITRE, News, open source, software, WithSecure / SecurityTicks

Kanvas: Open-source incident response case management tool 2025-07-09 at 07:31 By Mirko Zorz Kanvas is an open-source incident response case management tool with a simple desktop interface, built in Python. It gives investigators a place to work with SOD (Spreadsheet of Doom) or similar files, so they can handle key tasks without jumping between different […]

React to this headline:

Kanvas: Open-source incident response case management tool Read More »

Exposure management is the answer to: “Am I working on the right things?”

cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, penetration testing, PlexTrac, strategy, vulnerability management / SecurityTicks

Exposure management is the answer to: “Am I working on the right things?” 2025-07-08 at 09:07 By Mirko Zorz In this Help Net Security interview, Dan DeCloss, Founder and CTO at PlexTrac, discusses the role of exposure management in cybersecurity and how it helps organizations gain visibility into their attack surface to improve risk assessment

React to this headline:

Exposure management is the answer to: “Am I working on the right things?” Read More »

Like Ransoming a Bike: Organizational Muscle Memory Drives the Most Effective Response

Incident Response, Ransomware / SecurityTicks

Like Ransoming a Bike: Organizational Muscle Memory Drives the Most Effective Response 2025-07-02 at 16:48 By Trevin Edgeworth Ransomware is a major threat to the enterprise. Tools and training help, but survival depends on one thing: your organization’s muscle memory to respond fast and recover stronger. The post Like Ransoming a Bike: Organizational Muscle Memory

React to this headline:

Like Ransoming a Bike: Organizational Muscle Memory Drives the Most Effective Response Read More »

Cyberattack Targets International Criminal Court

cyberattack, ICC, Incident Response, International Criminal Court / SecurityTicks

Cyberattack Targets International Criminal Court 2025-07-02 at 11:30 By Ionut Arghire The International Criminal Court (ICC) has detected and contained a sophisticated and targeted cyberattack. The post Cyberattack Targets International Criminal Court appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Cyberattack Targets International Criminal Court Read More »

Third-party breaches double, creating ripple effects across industries

cybersecurity, Incident Response, News, report, risk, SecurityScorecard, supply chain, third party compromise / SecurityTicks

Third-party breaches double, creating ripple effects across industries 2025-06-30 at 07:04 By Help Net Security Supply chain risks remain top-of-mind for the vast majority of CISOs and cybersecurity leaders, according to SecurityScorecard. Their findings reveal that the way most organizations manage supply chain cyber risk isn’t keeping pace with expanding threats. The expanding web of

React to this headline:

Third-party breaches double, creating ripple effects across industries Read More »

Microsoft Patch Tuesday Covers WebDAV Flaw Marked as ‘Already Exploited’

CVE-2025-33053, Incident Response, Malware & Threats, Microsoft, Microsoft Office, Patch Tuesday, Vulnerabilities, WebDAV, Zero-Day / SecurityTicks

Microsoft Patch Tuesday Covers WebDAV Flaw Marked as ‘Already Exploited’ 2025-06-10 at 21:20 By Ryan Naraine Redmond warns that external control of a file name or path in WebDAV “allows an unauthorized attacker to execute code over a network.” The post Microsoft Patch Tuesday Covers WebDAV Flaw Marked as ‘Already Exploited’ appeared first on SecurityWeek.

React to this headline:

Microsoft Patch Tuesday Covers WebDAV Flaw Marked as ‘Already Exploited’ Read More »

The legal questions to ask when your systems go dark

CISO, conferences, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, law, law firms, News, regulation, Span, strategy / SecurityTicks

The legal questions to ask when your systems go dark 2025-06-10 at 09:16 By Mirko Zorz At Span Cyber Security Arena, I sat down with Iva Mišković, Partner at the ISO-certified Mišković & Mišković law firm, to discuss the role of legal teams during cyber incidents. She shared why lawyers should assume the worst, coordinate

React to this headline:

The legal questions to ask when your systems go dark Read More »

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign

APT41, China, Incident Response, Malware & Threats, Nation-State, PurpleHaze, SentinelLabs, SentinelOne, Shadowpad / SecurityTicks

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign 2025-06-09 at 20:58 By Ryan Naraine Anti-malware vendor said it spent the past twelve months deflecting a stream of network reconnaissance probes from China-nexus threat actors The post Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Chinese Espionage Crews Circle SentinelOne in Year-Long Reconnaissance Campaign Read More »

Guardz Banks $56M Series B for All-in-One SMB Security

Endpoint Security, Funding/M&A, Guardz, Incident Response, Managed Services, MSPs, Series B, SMB / SecurityTicks

Guardz Banks $56M Series B for All-in-One SMB Security 2025-06-09 at 17:38 By SecurityWeek News The Israeli company said the Series B raise was led by ClearSky and included equity stakes for new backer Phoenix Financial. The post Guardz Banks $56M Series B for All-in-One SMB Security appeared first on SecurityWeek. This article is an

React to this headline:

Guardz Banks $56M Series B for All-in-One SMB Security Read More »

Victoria’s Secret Says It Will Postpone Earnings Report After Recent Security Breach

data breach, Incident Response, Victoria's Secret / SecurityTicks

Victoria’s Secret Says It Will Postpone Earnings Report After Recent Security Breach 2025-06-04 at 13:32 By Associated Press Victoria’s Secret is postponing the release of its quarterly earnings following a security breach that disrupted the popular lingerie brand’s corporate operations. The post Victoria’s Secret Says It Will Postpone Earnings Report After Recent Security Breach appeared

React to this headline:

Victoria’s Secret Says It Will Postpone Earnings Report After Recent Security Breach Read More »

ConnectWise Discloses Suspected State-Sponsored Hack

ConnectWise, Incident Response, Nation-State / SecurityTicks

ConnectWise Discloses Suspected State-Sponsored Hack 2025-05-30 at 13:51 By Ionut Arghire The IT software provider says ScreenConnect users were impacted by the attack, which exploited a high-severity ASP.NET vulnerability. The post ConnectWise Discloses Suspected State-Sponsored Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

ConnectWise Discloses Suspected State-Sponsored Hack Read More »

Victoria’s Secret Website Taken Offline After Cyberattack

cybercrime, Featured, Incident Response, Ransomware / SecurityTicks

Victoria’s Secret Website Taken Offline After Cyberattack 2025-05-29 at 14:31 By Ionut Arghire Website remains offline following suspected cyber incident, as experts warn of escalating threats targeting major retailers The post Victoria’s Secret Website Taken Offline After Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this

React to this headline:

Victoria’s Secret Website Taken Offline After Cyberattack Read More »

Vulnerabilities in CISA KEV Are Not Equally Critical: Report

CISA, CISA KEV, Incident Response, Ox Security, Vulnerabilities, Zero-Day / SecurityTicks

Vulnerabilities in CISA KEV Are Not Equally Critical: Report 2025-05-28 at 13:13 By Ionut Arghire New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog. The post Vulnerabilities in CISA KEV Are Not Equally Critical: Report appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Vulnerabilities in CISA KEV Are Not Equally Critical: Report Read More »

Zscaler to Acquire MDR Specialist Red Canary

Incident Response, Management & Strategy, MDR, Red Canary, security operations, SOC, Zscaler / SecurityTicks

Zscaler to Acquire MDR Specialist Red Canary 2025-05-28 at 00:32 By SecurityWeek News Zscaler signals a big push into the security-operations market with the announcement of plans to buy Denver-based Red Canary. The post Zscaler to Acquire MDR Specialist Red Canary appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Zscaler to Acquire MDR Specialist Red Canary Read More »

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack

Baltimore, Data Breaches, Incident Response, Iran, Justice Department, Ransomware, robbinhood / SecurityTicks

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack 2025-05-27 at 21:28 By SecurityWeek News Sina Gholinejad pleaded guilty to computer-fraud and wire-fraud-conspiracy charges linked to the Robbinhood ransomware hit on Baltimore. The post Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack Read More »

Marks & Spencer Expects Ransomware Attack to Cost $400 Million

cost, cyberattack, Featured, Incident Response, M&S, Marks&Spencer, Ransomware / SecurityTicks

Marks & Spencer Expects Ransomware Attack to Cost $400 Million 2025-05-22 at 14:32 By Eduard Kovacs UK retailer Marks & Spencer expects the disruptions caused by the recent cyberattack to continue through July. The post Marks & Spencer Expects Ransomware Attack to Cost $400 Million appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Marks & Spencer Expects Ransomware Attack to Cost $400 Million Read More »

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users

Coinbase, Cryptocurrency, Data Breaches, data extortion, Incident Response, Insider Threat, Maine, phishing / SecurityTicks

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users 2025-05-21 at 16:54 By Ryan Naraine A mandatory filing to the Maine Attorney General says 69,461 customers nationwide were affected and dates the breach back to last December. The post Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users appeared first on SecurityWeek. This article is

React to this headline:

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users Read More »

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software

Ballistic Ventures, BreachRx, Data Breaches, Funding/M&A, Incident Response, Series A, SYN Ventures / SecurityTicks

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software 2025-05-19 at 22:33 By SecurityWeek News San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures. The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek. This article is an

React to this headline:

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software Read More »

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth

Featured, Incident Response, Locked Shields, NATO / SecurityTicks

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth 2025-05-16 at 14:02 By Eduard Kovacs The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries. The post From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth appeared first on SecurityWeek. This article is an

React to this headline:

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth Read More »

Deepfake attacks could cost you more than money

Artificial Intelligence, cybersecurity, deepfakes, Don't miss, Features, Hot stuff, Incident Response, News, policy, X-PHY / SecurityTicks

Deepfake attacks could cost you more than money 2025-05-16 at 09:04 By Mirko Zorz In this Help Net Security interview, Camellia Chan, CEO at X-PHY, discusses the dangers of deepfakes in real-world incidents, including their use in financial fraud and political disinformation. She explains AI-driven defense strategies and recommends updating incident response plans and internal

React to this headline:

Deepfake attacks could cost you more than money Read More »