News - Security Ticks

Economic volatility drives businesses to MSPs

cybercriminals, cybersecurity, investment, Kaseya, MSP, News, report / SecurityTicks

Economic volatility drives businesses to MSPs 28/06/2023 at 06:02 By Help Net Security The current economic conditions are leading companies of all sizes to reassess their operations and business strategies to remain competitive and profitable, according to Kaseya. Business growth key driver for it budgets Budgets and resources may be shrinking, but workloads are not. […]

React to this headline:

Economic volatility drives businesses to MSPs Read More »

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized

cybercrime, EU, Europe, Europol, Government, hardware, law enforcement, News / SecurityTicks

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized 27/06/2023 at 14:37 By Help Net Security Worldwide, 6558 arrests follow the dismantling of EncroChat, a tool favored by organized crime groups (OCGs). 197 of those arrested were high-value targets. This result is detailed in the first review of EncroChat, presented today by the French

React to this headline:

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized Read More »

95% fear inadequate cloud security detection and response

Cloud, cloud security, data breach, identity, News, Permiso, report / SecurityTicks

95% fear inadequate cloud security detection and response 27/06/2023 at 06:37 By Help Net Security Although numerous respondents acknowledged employing risky practices and behaviors within their cloud environments, they strongly believe in the effectiveness of their security tools and processes to safeguard their organizations against meticulously planned attacks, according to Permiso. That high confidence level

React to this headline:

95% fear inadequate cloud security detection and response Read More »

Widespread BEC attacks threaten European organizations

Abnormal Security, BEC scams, cybercrime, cybersecurity, Email, News / SecurityTicks

Widespread BEC attacks threaten European organizations 27/06/2023 at 06:06 By Help Net Security European organizations experienced a greater volume and frequency of BEC attacks over the last year, as compared to organizations in the United States, according to Abnormal Security. BEC attacks volume and frequency The data is based on an analysis of email attack

React to this headline:

Widespread BEC attacks threaten European organizations Read More »

MOVEit compromise affects pension systems, insurers

data breach, data theft, Don't miss, file-sharing, Hot stuff, News, third party compromise / SecurityTicks

MOVEit compromise affects pension systems, insurers 26/06/2023 at 14:32 By Helga Labus The compromise of PBI Research and The Berwyn Group’s MOVEit installation has resulted in the theft of data belonging to several pension systems and insurance companies – and millions of their users. PBI + Berwyn Group – a population management provider – was

React to this headline:

MOVEit compromise affects pension systems, insurers Read More »

Exploring the persistent threat of cyberattacks on healthcare

CISO, cyberattack, data, Don't miss, Features, healthcare, Hot stuff, how-to, News, opinion, Siemens, strategy, tips / SecurityTicks

Exploring the persistent threat of cyberattacks on healthcare 26/06/2023 at 07:38 By Mirko Zorz In this Help Net Security interview, Brett Harris, Cybersecurity Officer for the Americas at Siemens Healthineers, discusses the long-term impacts of cyberattacks on healthcare institutions and what healthcare providers can do to protect patients’ personal data and medical devices. Can you

React to this headline:

Exploring the persistent threat of cyberattacks on healthcare Read More »

5 free online cybersecurity courses you should check out

Coursera, Don't miss, Hot stuff, ISC2, News, skill development, strategy, tips / SecurityTicks

5 free online cybersecurity courses you should check out 26/06/2023 at 06:30 By Help Net Security Cryptography In this course, you’ll learn how to protect information to ensure its integrity, confidentiality, authenticity, and non-repudiation. You will develop a basic understanding of cryptographic concepts and how to apply them, implement secure protocols, key management concepts, critical

React to this headline:

5 free online cybersecurity courses you should check out Read More »

Uncovering attacker tactics through cloud honeypots

attacks, Cloud, cloud security, Don't miss, honeypots, News, Orca Security, report / SecurityTicks

Uncovering attacker tactics through cloud honeypots 26/06/2023 at 06:12 By Help Net Security Attackers typically find exposed “secrets” – pieces of sensitive information that allow access to an enterprise cloud environment — in as little as two minutes and, in many cases, begin exploiting them almost instantly, highlighting the urgent need for comprehensive cloud security,

React to this headline:

Uncovering attacker tactics through cloud honeypots Read More »

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023

News, Week in review / SecurityTicks

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023 25/06/2023 at 11:04 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unraveling the multifaceted threats facing telecom companies In this Help Net Security interview, Georgia Bafoutsou, Cybersecurity Officer at

React to this headline:

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023 Read More »

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178)

Cisco, Don't miss, exploit, Hot stuff, News, PoC, security update, vulnerability, Windows / SecurityTicks

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) 23/06/2023 at 17:19 By Helga Labus Proof-of-concept (PoC) exploit code for the high-severity vulnerability (CVE-2023-20178) in Cisco Secure Client Software for Windows and Cisco AnyConnect Secure Mobility Client Software for Windows has been published. About the vulnerability Cisco Secure Client Software – previously known as

React to this headline:

PoC exploit released for Cisco AnyConnect, Secure Client vulnerability (CVE-2023-20178) Read More »

Microsoft Teams vulnerability allows attackers to deliver malware to employees

collaboration, Don't miss, enterprise, Hot stuff, Jumpsec, Malware, Microsoft 365, Microsoft Teams, News, red team, SMBs, vulnerability / SecurityTicks

Microsoft Teams vulnerability allows attackers to deliver malware to employees 23/06/2023 at 15:24 By Zeljka Zorz Security researchers have uncovered a bug that could allow attackers to deliver malware directly into employees’ Microsoft Teams inbox. “Organisations that use Microsoft Teams inherit Microsoft’s default configuration which allows users from outside of their organisation to reach out

React to this headline:

Microsoft Teams vulnerability allows attackers to deliver malware to employees Read More »

New infosec products of the week: June 23, 2023

Cymulate, Edgescan, ESET, iStorage, Netskope, News / SecurityTicks

New infosec products of the week: June 23, 2023 23/06/2023 at 07:39 By Industry News Here’s a look at the most interesting products from the past week, featuring releases from Cymulate, Edgescan, ESET, iStorage, and Netskope. iStorage launches datAshur PRO+C with Type-C USB interface iStorage’s new datAshur PRO+C is a user-friendly USB 3.2 (Gen 1)

React to this headline:

New infosec products of the week: June 23, 2023 Read More »

Insurance companies neglect basic email security

EasyDMARC, Email, email security, News, survey / SecurityTicks

Insurance companies neglect basic email security 23/06/2023 at 06:00 By Help Net Security Only 3.54% of of insurance companies have correctly implemented basic phishing and spoofing protection, according to EasyDMARC. DMARC standard adoption Insurers operate using highly sensitive, private information that they’ve been trusted by clients and customers to protect. They function in a highly

React to this headline:

Insurance companies neglect basic email security Read More »

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435)

0-day, apple, Don't miss, Hot stuff, iOS, Kaspersky, macOS, News, security update, spyware / SecurityTicks

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435) 22/06/2023 at 13:36 By Zeljka Zorz Apple has released patches for three zero-day vulnerabilities (CVE-2023-32434, CVE-2023-32435, CVE-2023-32439) exploited in the wild. The first two have been reported by Kaspersky researchers Georgy Kucherin, Leonid Bezvershenko and Boris Larin following their discovery of the iOS spyware implant

React to this headline:

Apple fixes zero-day vulnerabilities used to covertly deliver spyware (CVE-2023-32435) Read More »

ChatGPT shows promise in detecting phishing sites

Artificial Intelligence, ChatGPT, Don't miss, Hot stuff, Kaspersky, News, NTT Security, phishing, research / SecurityTicks

ChatGPT shows promise in detecting phishing sites 22/06/2023 at 08:24 By Helga Labus ChatGPT can be used to generate phishing sites, but could it also be used to reliably detect them? Security researchers have tried to answer that question. Can ChatGPT detect phishing sites based on URLs? Kaspersky researchers tested 5,265 (2322 phishing and 2943

React to this headline:

ChatGPT shows promise in detecting phishing sites Read More »

Photos: Infosecurity Europe 2023, part 3

Adaptiva, conferences, Edgescan, FireTail, HackerOne, Infosecurity Europe 2023, News, Silverfort, Swimlane, Vulcan Cyber, Yubico / SecurityTicks

Photos: Infosecurity Europe 2023, part 3 22/06/2023 at 08:06 By Help Net Security Infosecurity Europe is taking place at ExCeL London from 20-22 June 2023 and Help Net Security is on site. The first gallery is available here, and the second gallery is here. Here’s a closer look at the conference featuring: Swimlane, Adaptiva, Vulcan

React to this headline:

Photos: Infosecurity Europe 2023, part 3 Read More »

Unraveling the multifaceted threats facing telecom companies

cyberattack, cybersecurity, Don't miss, ENISA, EU, Features, Hot stuff, Malware, News, opinion, telecommunications / SecurityTicks

Unraveling the multifaceted threats facing telecom companies 22/06/2023 at 07:09 By Mirko Zorz In today’s interconnected world, telecom companies serve as gateways, connecting individuals, businesses, and governments. However, this role also makes them prime targets for cyberattacks. From DDoS attacks to sophisticated spyware infiltration, telecom providers face a wide range of threats that can disrupt

React to this headline:

Unraveling the multifaceted threats facing telecom companies Read More »

Increased spending doesn’t translate to improved cybersecurity posture

CISO, cybersecurity, Gartner, investment, News, Panaseer, strategy, survey, tips / SecurityTicks

Increased spending doesn’t translate to improved cybersecurity posture 22/06/2023 at 06:21 By Help Net Security Security teams are stretched, with not enough people, skills or budget to cope with all their priorities, according to Panaseer. Average cybersecurity budgets increase in 2023 The survey of over 400 cybersecurity decision makers and practitioners across the US and

React to this headline:

Increased spending doesn’t translate to improved cybersecurity posture Read More »

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

Don't miss, enterprise, GreyNoise, Hot stuff, News, patch, VMWare, vulnerability / SecurityTicks

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887) 21/06/2023 at 11:42 By Zeljka Zorz CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being exploited in the wild. There are no workarounds to mitigate the risk of exploitation – enterprise admins are

React to this headline:

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887) Read More »

Infosecurity Europe 2023 video walkthrough

Absolute, Akamai, alphaMountain, Apricorn, Arctic Wolf Networks, Armis, Axonius, BitSight, conferences, CrowdStrike, Cybervadis, CYE, Darktrace, Devo Technology, Don't miss, EfficientIP, Egress, FireMon, HackTheBox, Hornetsecurity, Hoxhunt, Infosecurity Europe 2023, ISC2, Island, ManageEngine, Microsoft, NetSPI, News, One Identity, OpenText, Panorays, Pentera, Pentest People, Progress, Proofpoint, Rapid7, Senseon, Video, Vulcan Cyber, WatchGuard / SecurityTicks

Infosecurity Europe 2023 video walkthrough 21/06/2023 at 11:24 By Help Net Security Infosecurity Europe 2023 is taking place in London this week, and this video provides a closer look at this year’s event. The post Infosecurity Europe 2023 video walkthrough appeared first on Help Net Security. This article is an excerpt from Help Net Security

React to this headline:

Infosecurity Europe 2023 video walkthrough Read More »