Incident Response - Security Ticks

Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server Flaw

Incident Response, MOVEit, Progress Software, Ransomware, Vulnerabilities, WS_FTP / SecurityTicks

Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server Flaw 02/10/2023 at 20:17 By Ryan Naraine Rapid7 says attackers are targeting a critical pre-authentication flaw in Progress Software’s WS_FTP server just days after disclosure. The post Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server Flaw appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

Live Exploitation Underscores Urgency to Patch Critical WS-FTP Server Flaw Read More »

The hidden costs of neglecting cybersecurity for small businesses

Artificial Intelligence, attacks, Compliance, cybersecurity, Don't miss, education, Encryption, Features, Hot stuff, Incident Response, investment, Judy Security, MFA, News, opinion, passwords, phishing, regulation, threat, training, vulnerability / SecurityTicks

The hidden costs of neglecting cybersecurity for small businesses 28/09/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Raffaele Mautone, CEO of Judy Security, talks about the cybersecurity problems that small businesses face and the need for prioritization to save businesses from potential fines and damage to their brand reputation. He also

React to this headline:

The hidden costs of neglecting cybersecurity for small businesses Read More »

Gem Security Lands $23 Million Series A Funding

cloud security, funding, Funding/M&A, Gem Security, GGV Ventures, Incident Response, Team8, venture capital / SecurityTicks

Gem Security Lands $23 Million Series A Funding 27/09/2023 at 17:17 By Ryan Naraine Israeli security startup Gem Security has raised a total of $34 million to tackle cloud threat detection and incident response. The post Gem Security Lands $23 Million Series A Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Gem Security Lands $23 Million Series A Funding Read More »

MITRE ATT&CK project leader on why the framework remains vital for cybersecurity pros

attacks, Cloud, cybersecurity, Don't miss, education, Features, framework, Government, honeypots, Hot stuff, Incident Response, MITRE, MITRE ATT&CK, network, News, opinion, professional, red team, social media, threats / SecurityTicks

MITRE ATT&CK project leader on why the framework remains vital for cybersecurity pros 26/09/2023 at 07:32 By Mirko Zorz MITRE ATT&CK, a common language for cybersecurity professionals to communicate with each other and better understand real-world adversary behaviors, celebrates its 10th anniversary this fall. In this Help Net Security interview, project leader Adam Pennington discusses

React to this headline:

MITRE ATT&CK project leader on why the framework remains vital for cybersecurity pros Read More »

Cybersecurity skills employers are desperate to find in 2023

cybersecurity, Don't miss, Hot stuff, Incident Response, Pluralsight, threat, threat hunting, Video / SecurityTicks

Cybersecurity skills employers are desperate to find in 2023 26/09/2023 at 07:01 By Help Net Security The surge in digital economic growth and our increasing dependence on it make cybersecurity a critical profession. In this Help Net Security video, Aaron Rosenmund, Director of Security Research and Curriculum, Pluralsight, discusses the most sought-after cybersecurity skills in

React to this headline:

Cybersecurity skills employers are desperate to find in 2023 Read More »

DHS Publishes New Recommendations on Cyber Incident Reporting

DHS, Incident Response, Management & Strategy / SecurityTicks

DHS Publishes New Recommendations on Cyber Incident Reporting 20/09/2023 at 16:47 By Ionut Arghire DHS has published a new set of recommendations to help federal agencies better report cyber incidents and protect critical infrastructure. The post DHS Publishes New Recommendations on Cyber Incident Reporting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

DHS Publishes New Recommendations on Cyber Incident Reporting Read More »

Clorox Blames Damaging Cyberattack for Product Shortage

cyberattack, cybercrime, Incident Response / SecurityTicks

Clorox Blames Damaging Cyberattack for Product Shortage 19/09/2023 at 17:32 By Eduard Kovacs Clorox says the recent cyberattack has been contained, but production is still not fully restored and there is a short supply of products. The post Clorox Blames Damaging Cyberattack for Product Shortage appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Clorox Blames Damaging Cyberattack for Product Shortage Read More »

Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database

Caesars, data breach, Data Breaches, data extortion, Incident Response, MGM Resorts, Ransomware / SecurityTicks

Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database 14/09/2023 at 21:06 By Ryan Naraine The hijacked data includes driver’s license numbers and/or social security numbers from a Caesars Entertainment loyalty database. The post Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Caesars Confirms Ransomware Hack, Stolen Loyalty Program Database Read More »

DFIR Company Binalyze Raises $19 Million in Series A Funding

Cybersecurity Funding, funding, Incident Response / SecurityTicks

DFIR Company Binalyze Raises $19 Million in Series A Funding 12/09/2023 at 14:46 By Eduard Kovacs Estonian DFIR company Binalyze has raised $19 million in a Series A funding round to grow and improve its product. The post DFIR Company Binalyze Raises $19 Million in Series A Funding appeared first on SecurityWeek. This article is

React to this headline:

DFIR Company Binalyze Raises $19 Million in Series A Funding Read More »

Best practices for implementing a proper backup strategy

attacks, backup, cybersecurity, Don't miss, Hot stuff, Incident Response, Malware, network, Ransomware, strategy, Video, Wasabi / SecurityTicks

Best practices for implementing a proper backup strategy 08/09/2023 at 07:01 By Help Net Security Implementing a robust backup strategy for safeguarding crucial business data is more essential than ever. Without such a plan, organizations risk paying ransoms and incurring expenses related to investigations and lost productivity. In this Help Net Security video, David Boland,

React to this headline:

Best practices for implementing a proper backup strategy Read More »

Shifting left and right, innovating product security

CISO, collaboration, Compliance, Cybellum, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, News, opinion, policy, regulation, software, standards, strategy / SecurityTicks

Shifting left and right, innovating product security 07/09/2023 at 07:03 By Mirko Zorz In this Help Net Security interview, Slava Bronfman, CEO at Cybellum, discusses approaches for achieving product security throughout a device’s entire lifecycle, fostering collaboration across business units and product lines, ensuring transparency and security in the supply chain, and meeting regulatory requirements

React to this headline:

Shifting left and right, innovating product security Read More »

United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue

Incident Response / SecurityTicks

United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue 06/09/2023 at 07:16 By Associated Press United Airlines flights were halted nationwide on Sept. 5, because of an “equipment outage,” according to the FAA. The post United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity

React to this headline:

United Airlines Says the Outage That Held Up Departing Flights Was Not a Cybersecurity Issue Read More »

Velociraptor: Open-source digital forensics and incident response

cybersecurity, digital forensics, GitHub, Incident Response, News, open source / SecurityTicks

Velociraptor: Open-source digital forensics and incident response 30/08/2023 at 06:32 By Help Net Security Velociraptor is a sophisticated digital forensics and incident response tool designed to improve your insight into endpoint activities. Velociraptor enables you to conduct precise and rapid collection of digital forensic data across multiple endpoints simultaneously. Persistently gather events from endpoints, including

React to this headline:

Velociraptor: Open-source digital forensics and incident response Read More »

Experts demand clarity as they struggle with cloud security prioritization

Cloud, Cloud Security Alliance, cybersecurity, DevOps, DevSecOps, Incident Response, misconfiguration, News, report, zero trust / SecurityTicks

Experts demand clarity as they struggle with cloud security prioritization 28/08/2023 at 06:32 By Help Net Security Cloud Native Application Protection Platforms (CNAPPs) have emerged as a critical category of security tooling in recent years due to the complexity of comprehensively securing multi-cloud environments, according to Cloud Security Alliance. Secure cloud computing environment Much of

React to this headline:

Experts demand clarity as they struggle with cloud security prioritization Read More »

Ransomware dwell time hits new low

Active Directory, attack, cybercrime, cybersecurity, Incident Response, Malware, News, Ransomware, report, Sophos, threats / SecurityTicks

Ransomware dwell time hits new low 25/08/2023 at 06:34 By Help Net Security Median attacker dwell time—the time from when an attack starts to when it’s detected—shrunk from 10 to eight days for all attacks, and to five days for ransomware attacks during the first half of 2023, according to Sophos. In 2022, the median

React to this headline:

Ransomware dwell time hits new low Read More »

UAC: Live response collection script for incident response

DFIR, GitHub, Incident Response, Linux, News, open source, software, Unix / SecurityTicks

UAC: Live response collection script for incident response 27/07/2023 at 05:33 By Help Net Security Unix-like Artifacts Collector (UAC) is a live response collection script for incident response that makes use of native binaries and tools to automate the collection of AIX, Android, ESXi, FreeBSD, Linux, macOS, NetBSD, NetScaler, OpenBSD, and Solaris systems artifacts. It

React to this headline:

UAC: Live response collection script for incident response Read More »

Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519)

0-day, CISA, Citrix, critical infrastructure, Don't miss, GreyNoise, Hot stuff, Incident Response, News / SecurityTicks

Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519) 21/07/2023 at 14:19 By Zeljka Zorz The exploitation of the Citrix NetScaler ADC zero-day vulnerability (CVE-2023-3519) was first spotted by a critical infrastructure organization, who reported it to the Cybersecurity and Infrastructure Security Agency (CISA). “In June 2023, threat actors exploited this

React to this headline:

Citrix ADC zero-day exploitatation: CISA releases details about attack on CI organization (CVE-2023-3519) Read More »

Apple Ships Urgent iOS Patch for WebKit Zero-Day

apple, CVE-2023-37450, Incident Response, iOS, iPadOS, Mobile & Wireless, Vulnerabilities, WebKit, Zero-Day / SecurityTicks

Apple Ships Urgent iOS Patch for WebKit Zero-Day 11/07/2023 at 02:02 By Ryan Naraine Apple rolls out urgent iOS and iPadOS software updates and warned that zero-day exploitation has already been detected. The post Apple Ships Urgent iOS Patch for WebKit Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Apple Ships Urgent iOS Patch for WebKit Zero-Day Read More »

Cyware Snags $30M for Threat Intel Infrastructure Tech

Cyware, Funding/M&A, Incident Response, Series C, SOAR, Threat Intelligence, threat-intel, venture capital / SecurityTicks

Cyware Snags $30M for Threat Intel Infrastructure Tech 29/06/2023 at 20:38 By Ryan Naraine New York startup $30 million in new financing to fuel plans to take advantage of the demand for AI-powered threat-intel security tools. The post Cyware Snags $30M for Threat Intel Infrastructure Tech appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cyware Snags $30M for Threat Intel Infrastructure Tech Read More »

CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws

and CVE-2021-44026, CISA, CVE-2020-12641, CVE-2020-35730, Government, Incident Response, KEV catalog, Vulnerabilities / SecurityTicks

CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws 23/06/2023 at 18:43 By Ionut Arghire The US government’s cybersecurity agency adds VMware and Roundcube server flaws to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws appeared first on SecurityWeek. This article is an excerpt

React to this headline:

CISA Tells US Agencies to Patch Exploited Roundcube, VMware Flaws Read More »