News - Security Ticks

Why cybersecurity leaders trust the MITRE ATT&CK Evaluations

Why cybersecurity leaders trust the MITRE ATT&CK Evaluations 2024-11-28 at 08:12 By Help Net Security In today’s dynamic threat landscape, security leaders are under constant pressure to make informed choices about which solutions and strategies they employ to protect their organizations. The “MITRE Engenuity ATT&CK Evaluations: Enterprise” stand out as an essential resource for cybersecurity decision […]

React to this headline:

Why cybersecurity leaders trust the MITRE ATT&CK Evaluations Read More »

VPN vulnerabilities, weak credentials fuel ransomware attacks

Corvus Insurance, cybercrime, cybersecurity, News, Ransomware, report, survey / SecurityTicks

VPN vulnerabilities, weak credentials fuel ransomware attacks 2024-11-28 at 08:12 By Help Net Security Attackers leveraging virtual private network (VPN) vulnerabilities and weak passwords for initial access contributed to nearly 30% of ransomware attacks, according to Corvus Insurance. According to the Q3 report, many of these incidents were traced to outdated software or VPN accounts

React to this headline:

VPN vulnerabilities, weak credentials fuel ransomware attacks Read More »

Crypto companies are losing ground to deepfake attacks

Crypto, cybercrime, fraud, identity verification, News, Regula, report, survey / SecurityTicks

Crypto companies are losing ground to deepfake attacks 2024-11-28 at 06:34 By Help Net Security The crypto sector stands out as the only surveyed industry where deepfake fraud surpasses traditional document fraud in prevalence, according to Regula. Crypto companies suffer significant losses from fraud The study finds that 57% of crypto companies report audio deepfake

React to this headline:

Crypto companies are losing ground to deepfake attacks Read More »

Ransomware payments are now a critical business decision

At-Bay, Cohesity, cybersecurity, News, Onapsis, Ransomware, Rubrik, Semperis, Sophos, SpyCloud, Veeam Software, Zscaler / SecurityTicks

Ransomware payments are now a critical business decision 2024-11-28 at 06:03 By Help Net Security Despite the efforts of law enforcement agencies to stop and bring to justice those responsible for ransomware attacks, the situation is not improving. While authorities do not recommend making a ransomware payment, some companies are forced to make that choice

React to this headline:

Ransomware payments are now a critical business decision Read More »

Cybercriminals used a gaming engine to create undetectable malware loader

Check Point, Don't miss, GitHub, Hot stuff, Linux, macOS, Malware, malware detection, News, software development, Windows / SecurityTicks

Cybercriminals used a gaming engine to create undetectable malware loader 2024-11-27 at 20:33 By Zeljka Zorz Threat actors are using an ingenious new way for covertly delivering malware to a wide variety of operating systems and platforms: they have created a malware loader that uses Godot Engine, an open-source game engine. The loader – dubbed

React to this headline:

Cybercriminals used a gaming engine to create undetectable malware loader Read More »

CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution

Emerging Threats, News, Security Research, Vulnerabilities / SecurityTicks

CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution 2024-11-27 at 18:50 By Pauline Bolaños On November 20th, 2024, Zero Day Initiative (ZDI) researchers disclosed a critical flaw in 7-Zip. This article is an excerpt from SpiderLabs Blog View Original Source React to this headline:

React to this headline:

CVE-2024-11477: 7-Zip Flaw Allows Remote Code Execution Read More »

ESET researchers analyze first UEFI bootkit for Linux systems

Don't miss, firmware, Hot stuff, Linux, News, research / SecurityTicks

ESET researchers analyze first UEFI bootkit for Linux systems 2024-11-27 at 18:18 By Help Net Security ESET Research has discovered the first UEFI bootkit designed for Linux systems, named Bootkitty by its creators. Researchers believe this bootkit is likely an initial proof of concept, and based on ESET telemetry, it has not been deployed in

React to this headline:

ESET researchers analyze first UEFI bootkit for Linux systems Read More »

QScanner: Linux command-line utility for scanning container images, conducting SCA

containers, Don't miss, Hot stuff, Linux, News, Qualys, scanning / SecurityTicks

QScanner: Linux command-line utility for scanning container images, conducting SCA 2024-11-27 at 08:02 By Help Net Security QScanner is a Linux command-line utility tailored for scanning container images and performing Software Composition Analysis (SCA). It is compatible with diverse container orchestration systems, container runtimes, and operating systems. QScanner features Instant console results: Scan for vulnerabilities

React to this headline:

QScanner: Linux command-line utility for scanning container images, conducting SCA Read More »

Choosing the right secure messaging app for your organization

Application Security, Artificial Intelligence, attacks, automation, cybersecurity, Don't miss, Encryption, Features, Hot stuff, messaging, News, opinion, Rakuten Viber / SecurityTicks

Choosing the right secure messaging app for your organization 2024-11-27 at 07:18 By Mirko Zorz In this Help Net Security interview, Liad Shnell, CTO at Rakuten Viber, discusses what organizations should look for in secure messaging apps, including encryption, privacy standards, and ease of integration. Shnell also covers the need for a multi-layered approach to

React to this headline:

Choosing the right secure messaging app for your organization Read More »

Supply chain managers underestimate cybersecurity risks in warehouses

Artificial Intelligence, cybersecurity, Ivanti, News, report, survey / SecurityTicks

Supply chain managers underestimate cybersecurity risks in warehouses 2024-11-27 at 06:47 By Help Net Security 32% of warehouse respondents report that social engineering is one of the most-used entry points in warehouse cyberattacks – tied with software vulnerabilities (32%) and followed by devices (19%), according to Ivanti. Cyberattacks on warehouses threaten supply chain stability As

React to this headline:

Supply chain managers underestimate cybersecurity risks in warehouses Read More »

Hottest cybersecurity open-source tools of the month: November 2024

cybersecurity, Don't miss, GitHub, News, open source, software / SecurityTicks

Hottest cybersecurity open-source tools of the month: November 2024 2024-11-27 at 06:03 By Help Net Security This month’s roundup features exceptional open-source cybersecurity tools that are gaining attention for strengthening security across various environments. ScubaGear ScubaGear is an open-source tool the Cybersecurity and Infrastructure Security Agency (CISA) created to automatically evaluate Microsoft 365 (M365) configurations

React to this headline:

Hottest cybersecurity open-source tools of the month: November 2024 Read More »

Researchers reveal exploitable flaws in corporate VPN clients

AmberWolf, CVE, Don't miss, Hot stuff, macOS, News, Palo Alto Networks, SonicWall, VPN, vulnerability, Windows / SecurityTicks

Researchers reveal exploitable flaws in corporate VPN clients 2024-11-26 at 17:33 By Zeljka Zorz Researchers have discovered vulnerabilities in the update process of Palo Alto Networks (CVE-2024-5921) and SonicWall (CVE-2024-29014) corporate VPN clients that could be exploited to remotely execute code on users’ devices. CVE-2024-5921 CVE-2024-5921 affects various versions of Palo Alto’s GlobalProtect App on

React to this headline:

Researchers reveal exploitable flaws in corporate VPN clients Read More »

Authorities disrupt major cybercrime operation, 1000+ suspects arrested

arrest, cybercrime, Interpol, law enforcement, News / SecurityTicks

Authorities disrupt major cybercrime operation, 1000+ suspects arrested 2024-11-26 at 17:03 By Help Net Security Authorities across 19 African countries have arrested 1,006 suspects and dismantled 134,089 malicious infrastructures and networks thanks to a joint operation by INTERPOL and AFRIPOL against cybercrime. Results of the operation (Source: INTERPOL) Operation Serengeti Operation Serengeti (2 September –

React to this headline:

Authorities disrupt major cybercrime operation, 1000+ suspects arrested Read More »

Starbucks, grocery stores impacted by Blue Yonder ransomware attack

attack, cybercrime, News, Ransomware / SecurityTicks

Starbucks, grocery stores impacted by Blue Yonder ransomware attack 2024-11-26 at 16:15 By Mirko Zorz Supply chain management SaaS vendor Blue Yonder announced on November 21 that it experienced a ransomware attack that impacted its managed services hosted environment. “Since learning of the incident, the Blue Yonder team has been working diligently together with external

React to this headline:

Starbucks, grocery stores impacted by Blue Yonder ransomware attack Read More »

Black Friday shoppers targeted with thousands of fraudulent online stores

consumer, Don't miss, fraud, holidays, Hot stuff, Netcraft, News, online shopping, Retail / SecurityTicks

Black Friday shoppers targeted with thousands of fraudulent online stores 2024-11-26 at 13:33 By Zeljka Zorz Building fake, fraudulent online stores has never been easier: fraudsters are registering domain names for a pittance, using the SHOPYY e-commerce platform to build the websites, and leveraging large language models (LLMs) to rewrite existing product listings to perfect

React to this headline:

Black Friday shoppers targeted with thousands of fraudulent online stores Read More »

RomCom hackers chained Firefox and Windows zero-days to deliver backdoor

0-day, APT, backdoor, Don't miss, ESET, exploit, Firefox, Hot stuff, News, Russian Federation, Windows / SecurityTicks

RomCom hackers chained Firefox and Windows zero-days to deliver backdoor 2024-11-26 at 12:18 By Zeljka Zorz Russia-aligned APT group RomCom was behind attacks that leveraged CVE-2024-9680, a remote code execution flaw in Firefox, and CVE-2024-49039, an elevation of privilege vulnerability in Windows Task Scheduler, as zero-days earlier this year. “Chaining together two zero-day vulnerabilities armed

React to this headline:

RomCom hackers chained Firefox and Windows zero-days to deliver backdoor Read More »

How to recognize employment fraud before it becomes a security issue

cybercrime, cybersecurity, Don't miss, Expert analysis, Expert corner, fraud, Hot stuff, News, Nisos, opinion / SecurityTicks

How to recognize employment fraud before it becomes a security issue 2024-11-26 at 07:39 By Help Net Security The combination of remote work, the latest technologies, and never physically meeting your employees has made it very easy for job applicants to mask their true identities from their employer and commit employment fraud. Motivations for this

React to this headline:

How to recognize employment fraud before it becomes a security issue Read More »

Practical strategies to build an inclusive culture in cybersecurity

Acronis, awareness, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, remote working, strategy, tips / SecurityTicks

Practical strategies to build an inclusive culture in cybersecurity 2024-11-26 at 07:03 By Mirko Zorz In this Help Net Security interview, Alona Geckler, Chief of Staff, SVP of Business Operations at Acronis, shares her insights on the diversity environment in the cybersecurity and IT industries. She discusses the progress made over the past two decades,

React to this headline:

Practical strategies to build an inclusive culture in cybersecurity Read More »

Cybersecurity jobs available right now: November 26, 2024

cybersecurity jobs, News / SecurityTicks

Cybersecurity jobs available right now: November 26, 2024 2024-11-26 at 06:03 By Anamarija Pogorelec Application Security Engineer Agoda | UAE | Hybrid – View job details As an Application Security Engineer, you will develop and design application-level security controls and standards. Perform application security design reviews against new products and services. Track and prioritize all

React to this headline:

Cybersecurity jobs available right now: November 26, 2024 Read More »

Faraway Russian hackers breached US organization via Wi-Fi

APT, brute-force, credentials, Don't miss, enterprise, government-backed attacks, Hot stuff, MFA, News, Russian Federation, wireless / SecurityTicks

Faraway Russian hackers breached US organization via Wi-Fi 2024-11-25 at 19:03 By Zeljka Zorz Forest Blizzard, a threat group associated with Russia’s GRU military intelligence service, repeatedly breached a US-based organization via compromised computer systems of nearby firms, which they leveraged to authenticate to the target’s enterprise Wi-Fi network. The repeated attacks Volexity, a company

React to this headline:

Faraway Russian hackers breached US organization via Wi-Fi Read More »