Incident Response - Security Ticks

Vulnerabilities in CISA KEV Are Not Equally Critical: Report

CISA, CISA KEV, Incident Response, Ox Security, Vulnerabilities, Zero-Day / SecurityTicks

Vulnerabilities in CISA KEV Are Not Equally Critical: Report 2025-05-28 at 13:13 By Ionut Arghire New report says organizations should always consider environmental context when assessing the impact of vulnerabilities in CISA KEV catalog. The post Vulnerabilities in CISA KEV Are Not Equally Critical: Report appeared first on SecurityWeek. This article is an excerpt from […]

React to this headline:

Vulnerabilities in CISA KEV Are Not Equally Critical: Report Read More »

Zscaler to Acquire MDR Specialist Red Canary

Incident Response, Management & Strategy, MDR, Red Canary, security operations, SOC, Zscaler / SecurityTicks

Zscaler to Acquire MDR Specialist Red Canary 2025-05-28 at 00:32 By SecurityWeek News Zscaler signals a big push into the security-operations market with the announcement of plans to buy Denver-based Red Canary. The post Zscaler to Acquire MDR Specialist Red Canary appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React to this headline:

Zscaler to Acquire MDR Specialist Red Canary Read More »

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack

Baltimore, Data Breaches, Incident Response, Iran, Justice Department, Ransomware, robbinhood / SecurityTicks

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack 2025-05-27 at 21:28 By SecurityWeek News Sina Gholinejad pleaded guilty to computer-fraud and wire-fraud-conspiracy charges linked to the Robbinhood ransomware hit on Baltimore. The post Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack Read More »

Marks & Spencer Expects Ransomware Attack to Cost $400 Million

cost, cyberattack, Featured, Incident Response, M&S, Marks&Spencer, Ransomware / SecurityTicks

Marks & Spencer Expects Ransomware Attack to Cost $400 Million 2025-05-22 at 14:32 By Eduard Kovacs UK retailer Marks & Spencer expects the disruptions caused by the recent cyberattack to continue through July. The post Marks & Spencer Expects Ransomware Attack to Cost $400 Million appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Marks & Spencer Expects Ransomware Attack to Cost $400 Million Read More »

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users

Coinbase, Cryptocurrency, Data Breaches, data extortion, Incident Response, Insider Threat, Maine, phishing / SecurityTicks

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users 2025-05-21 at 16:54 By Ryan Naraine A mandatory filing to the Maine Attorney General says 69,461 customers nationwide were affected and dates the breach back to last December. The post Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users appeared first on SecurityWeek. This article is

React to this headline:

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users Read More »

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software

Ballistic Ventures, BreachRx, Data Breaches, Funding/M&A, Incident Response, Series A, SYN Ventures / SecurityTicks

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software 2025-05-19 at 22:33 By SecurityWeek News San Francisco incident response coordination startup banks $15 million in a Series A funding round led by Ballistic Ventures. The post BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software appeared first on SecurityWeek. This article is an

React to this headline:

BreachRx Lands $15 Million as Investors Bet on Breach-Workflow Software Read More »

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth

Featured, Incident Response, Locked Shields, NATO / SecurityTicks

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth 2025-05-16 at 14:02 By Eduard Kovacs The 15th edition of NATO’s Locked Shields cyber defense exercise brought together 4,000 experts from 41 countries. The post From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth appeared first on SecurityWeek. This article is an

React to this headline:

From 60 to 4,000: NATO’s Locked Shields Reflects Cyber Defense Growth Read More »

Deepfake attacks could cost you more than money

Artificial Intelligence, cybersecurity, deepfakes, Don't miss, Features, Hot stuff, Incident Response, News, policy, X-PHY / SecurityTicks

Deepfake attacks could cost you more than money 2025-05-16 at 09:04 By Mirko Zorz In this Help Net Security interview, Camellia Chan, CEO at X-PHY, discusses the dangers of deepfakes in real-world incidents, including their use in financial fraud and political disinformation. She explains AI-driven defense strategies and recommends updating incident response plans and internal

React to this headline:

Deepfake attacks could cost you more than money Read More »

Production at Steelmaker Nucor Disrupted by Cyberattack

cyberattack, disruption, Incident Response, Nucor, steel / SecurityTicks

Production at Steelmaker Nucor Disrupted by Cyberattack 2025-05-15 at 15:47 By Eduard Kovacs American steel giant Nucor on Wednesday disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack. The post Production at Steelmaker Nucor Disrupted by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React

React to this headline:

Production at Steelmaker Nucor Disrupted by Cyberattack Read More »

Adobe Patches Big Batch of Critical-Severity Software Flaws

Adobe, ColdFusion, Illustrator, Incident Response, Patch Tuesday, Photoshop, Vulnerabilities / SecurityTicks

Adobe Patches Big Batch of Critical-Severity Software Flaws 2025-05-13 at 22:47 By Ryan Naraine Adobe Patch Tuesday headlined by a major Adobe ColdFusion update patching a wide swatch of code execution and privilege escalation attacks. The post Adobe Patches Big Batch of Critical-Severity Software Flaws appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Adobe Patches Big Batch of Critical-Severity Software Flaws Read More »

Compromised SAP NetWeaver instances are ushering in opportunistic threat actors

Don't miss, enterprise, Forescout, Government, Hot stuff, Incident Response, Mandiant, News, Onapsis, SAP, web shell / SecurityTicks

Compromised SAP NetWeaver instances are ushering in opportunistic threat actors 2025-05-12 at 16:07 By Zeljka Zorz A second wave of attacks against the hundreds of SAP NetWeaver platforms compromised via CVE-2025-31324 is underway. “[The] attacks [are] staged by follow-on, opportunistic threat actors who are leveraging previously established webshells (from the first zero-day attack) on vulnerable

React to this headline:

Compromised SAP NetWeaver instances are ushering in opportunistic threat actors Read More »

41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise

cyber exercise, cyber range, Incident Response, Locked Shields, NATO / SecurityTicks

41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise 2025-05-07 at 10:17 By Eduard Kovacs The NATO Cooperative Cyber Defence Centre of Excellence in Estonia is hosting the Locked Shields 2025 cyber defense exercise. The post 41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise appeared first on SecurityWeek.

React to this headline:

41 Countries Taking Part in NATO’s Locked Shields 2025 Cyber Defense Exercise Read More »

White House Proposal Slashes Half-Billion from CISA Budget

budget, CISA, CVE, DHS, Government, Incident Response, Nation-State, RSA Conference / SecurityTicks

White House Proposal Slashes Half-Billion from CISA Budget 2025-05-05 at 18:31 By Ryan Naraine The proposed $491 million cut is being positioned as a “refocusing”of CISA on its core mission “while eliminating weaponization and waste.” The post White House Proposal Slashes Half-Billion from CISA Budget appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

White House Proposal Slashes Half-Billion from CISA Budget Read More »

Canadian Electric Utility Hit by Cyberattack

Canada, cyberattack, electric, Emera, Featured, Incident Response, Nova Scotia Power, utility / SecurityTicks

Canadian Electric Utility Hit by Cyberattack 2025-05-01 at 17:15 By Eduard Kovacs Nova Scotia Power and Emera are responding to a cybersecurity incident that impacted IT systems and networks. The post Canadian Electric Utility Hit by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source React to this headline:

React to this headline:

Canadian Electric Utility Hit by Cyberattack Read More »

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers

China, cyberespionage, fake IT workers, Incident Response, North Korea, SentinelOne / SecurityTicks

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers 2025-05-01 at 11:32 By Eduard Kovacs SentinelOne has shared some information on the types of threat actors that have targeted the security firm recently. The post SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers appeared first on SecurityWeek. This article is

React to this headline:

SentinelOne Targeted by North Korean IT Workers, Ransomware Groups, Chinese Hackers Read More »

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC

agentic AI, AI, Artificial Intelligence, Incident Response, SentinelOne, SOC / SecurityTicks

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC 2025-04-29 at 19:01 By Kevin Townsend Athena marks a major leap in SOC automation, enabling real-time detection, triage, and remediation with minimal human oversight. The post SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC appeared first on SecurityWeek. This article is an excerpt

React to this headline:

SentinelOne’s Purple AI Athena Brings Autonomous Decision-Making to the SOC Read More »

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances

Data Breaches, DBIR, Fortinet, Incident Response, Ivanti, Malware & Threats, Ransomware, SonicWall, Verizon / SecurityTicks

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances 2025-04-24 at 18:12 By Ryan Naraine The latest Verizon DBIR landed this week with a startling statistic about the security posture of VPNs and network edge devices. The post Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances appeared first on SecurityWeek. This article

React to this headline:

Verizon DBIR Flags Major Patch Delays on VPNs, Edge Appliances Read More »

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs

attack lifecycle, attack tools, Don't miss, ESXi, Hot stuff, Incident Response, MITRE, MITRE ATT&CK, News, threat modeling / SecurityTicks

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs 2025-04-23 at 16:13 By Zeljka Zorz MITRE has released the latest version of its ATT&CK framework, which now also includes a new section (“matrix”) to cover the tactics, techniques and procedures (TTPs) used to target VMware ESXi hypervisors. About MITRE ATT&CK MITRE ATT&CK is a regularly

React to this headline:

Released: MITRE ATT&CK v17.0, now with ESXi attack TTPs Read More »

Conduent Says Names, Social Security Numbers Stolen in Cyberattack

conduent, Incident Response, Malware & Threats, Ransomware, Safepay, SEC / SecurityTicks

Conduent Says Names, Social Security Numbers Stolen in Cyberattack 2025-04-15 at 17:34 By Ionut Arghire The business services provider confirms personal information such as names and Social Security numbers was stolen in a January cyberattack. The post Conduent Says Names, Social Security Numbers Stolen in Cyberattack appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Conduent Says Names, Social Security Numbers Stolen in Cyberattack Read More »

Kidney Dialysis Services Provider DaVita Hit by Ransomware

DaVita, Incident Response, medical, Ransomware, SEC / SecurityTicks

Kidney Dialysis Services Provider DaVita Hit by Ransomware 2025-04-15 at 17:34 By Ionut Arghire DaVita has not named the ransomware group behind the incident or share details on the attacker’s ransom demands. The post Kidney Dialysis Services Provider DaVita Hit by Ransomware appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

React to this headline:

Kidney Dialysis Services Provider DaVita Hit by Ransomware Read More »