News - Security Ticks

Supply chain executives unaware of growing customer trust issues

cybersecurity, Deloitte, News, report, supply chain / SecurityTicks

Supply chain executives unaware of growing customer trust issues 19/07/2023 at 06:03 By Help Net Security Supply chain executives significantly overestimate stakeholder trust in their supply chain capabilities and intentions, according to Deloitte. Of more than 1,000 executives from large global organizations surveyed, 89% on average who self-identified as leading suppliers said customers trust their […]

React to this headline:

Supply chain executives unaware of growing customer trust issues Read More »

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline

News, Uptycs, Whitepapers and webinars / SecurityTicks

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline 19/07/2023 at 05:47 By Help Net Security Improve your cloud security with these 9 proven strategies. Uptycs, alongside renowned expert Lee Atchison, share their list of comprehensive tactics to mitigate risks facing modern development teams. To address these emerging risks, Uptycs has created an eBook,

React to this headline:

eBook: 9 Ways to Secure Your Cloud App Dev Pipeline Read More »

Kyndryl and Veritas launch two services for data protection and recovery

Kyndryl, News, Veritas Technologies / SecurityTicks

Kyndryl and Veritas launch two services for data protection and recovery 18/07/2023 at 17:38 By Industry News Kyndryl and Veritas Technologies unveiled two new services — Data Protection Risk Assessment with Veritas and Incident Recovery with Veritas. As a key milestone in Kyndryl and Veritas’ strategic alliance, these services help enterprises protect and recover their

React to this headline:

Kyndryl and Veritas launch two services for data protection and recovery Read More »

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports

cybersecurity, Editors' Pick, Innovation, News, premium, Technology / SecurityTicks

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports 18/07/2023 at 17:17 By Thomas Brewster, Forbes Staff Google claimed that it was so overwhelmed with emergency requests from law enforcement last year that it couldn’t help the FBI review livestreams which had allegedly been used to threaten racist murders in St.

React to this headline:

Google Lacked ‘Manpower’ To Help Feds On Emergency Domestic Terror Threat, FBI Reports Read More »

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203)

0-day, Adobe, Adobe ColdFusion, Don't miss, exploit, Hot stuff, News, Project Discovery, Rapid7, security update, vulnerability / SecurityTicks

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) 18/07/2023 at 17:17 By Zeljka Zorz Attackers are exploiting two Adobe ColdFusion vulnerabilities (CVE-2023-29298, CVE-2023-38203) to breach servers and install web shells to enable persistent access and allow remote control of the system, according to Rapid7 researchers. Flaws with incomplete fixes On July 11, 2023,

React to this headline:

Adobe ColdFusion vulnerabilities exploited to deliver web shells (CVE-2023-29298, CVE-2023-38203) Read More »

VirusTotal leaked data of 5,600 registered users

Data leak, Don't miss, enterprise, Google, Government, Hot stuff, News, social engineering, spear-phishing, user data, VirusTotal / SecurityTicks

VirusTotal leaked data of 5,600 registered users 18/07/2023 at 15:47 By Helga Labus VirusTotal has suffered a data leak that exposed the names and email addresses of 5,600 of its registered users. The leaked data reportedly includes information about employees of US and German intelligence agencies (among others). VirusTotal data leak exposed exploitable information Google-owned

React to this headline:

VirusTotal leaked data of 5,600 registered users Read More »

12 open-source penetration testing tools you might not know about

Don't miss, GitHub, Hot stuff, News, open source, penetration testing, Red Siege, software / SecurityTicks

12 open-source penetration testing tools you might not know about 18/07/2023 at 07:34 By Mirko Zorz Red Siege has developed and made available many open-source tools to help with your penetration testing work. The company plans to continue to support the tools listed below, whether in the form of bug fixes or new features. Give

React to this headline:

12 open-source penetration testing tools you might not know about Read More »

Broadband consumers demand security and sustainability

Cisco, cybersecurity, digital transformation, hybrid workforce, News, survey / SecurityTicks

Broadband consumers demand security and sustainability 18/07/2023 at 07:01 By Help Net Security Consumer expectations will reshape the needs and economics of the internet, according to Cisco. People in EMEA are rethinking what they rely on the internet for, balancing classic demands for speed and reliability, with the intensifying needs of rising eco-consciousness, secure cloud

React to this headline:

Broadband consumers demand security and sustainability Read More »

Healthcare organizations in the crosshairs of cyberattackers

cybercrime, cybercriminals, cybersecurity, healthcare, News, Ponemon Institute, report, Trustwave / SecurityTicks

Healthcare organizations in the crosshairs of cyberattackers 18/07/2023 at 06:32 By Help Net Security In an era where cyber threats continue to evolve, healthcare organizations are increasingly targeted by malicious actors employing multiple attack vectors, according to Trustwave. In its new research, Trustwave SpiderLabs has documented the attack flow utilized by threat groups, shedding light

React to this headline:

Healthcare organizations in the crosshairs of cyberattackers Read More »

Data compromises on track to set a new record

cybercrime, data, data breach, Identity Theft Resource Center, News, report / SecurityTicks

Data compromises on track to set a new record 18/07/2023 at 06:02 By Help Net Security The number of data compromises reported in the U.S. in the H1 of 2023 is higher than the total compromises reported every year between 2005 and 2020, except for 2017, according to Identity Theft Resource Center. For the H1

React to this headline:

Data compromises on track to set a new record Read More »

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192)

0-day, Don't miss, Hot stuff, News, open source, security update, Synacor, vulnerability / SecurityTicks

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) 17/07/2023 at 14:47 By Helga Labus A critical cross site scripting (XSS) vulnerability (CVE-2023-34192) in popular open source email collaboration suite Zimbra is being exploited by attackers. About the vulnerability (CVE-2023-34192) CVE-2023-34192 could allow a remote authenticated threat actor to execute arbitrary code through a

React to this headline:

Critical XSS vulnerability in Zimbra exploited in the wild (CVE-2023-34192) Read More »

CISOs under pressure: Protecting sensitive information in the age of high employee turnover

access management, Artificial Intelligence, burnout, CISO, cybersecurity, Don't miss, Features, Gartner, Hot stuff, how-to, identity management, machine learning, News, NIST, opinion, remote working, security ROI, strategy, supply chain attacks, threats, tips, zero trust / SecurityTicks

CISOs under pressure: Protecting sensitive information in the age of high employee turnover 17/07/2023 at 07:31 By Mirko Zorz In this Help Net Security interview, Charles Brooks, Adjunct Professor at Georgetown University’s Applied Intelligence Program and graduate Cybersecurity Programs, talks about how zero trust principles, identity access management, and managed security services are crucial for

React to this headline:

CISOs under pressure: Protecting sensitive information in the age of high employee turnover Read More »

Growing scam activity linked to social media and automation

cybercrime, cybercriminals, Group-IB, News, phishing, report, scams / SecurityTicks

Growing scam activity linked to social media and automation 17/07/2023 at 06:02 By Help Net Security The average number of scam resources created per brand across all regions and industries more than doubled year-on-year in 2022, up 162%, according to Group-IB. Additionally, the total number of scam pages detected by Group-IB in 2022 was more

React to this headline:

Growing scam activity linked to social media and automation Read More »

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out

News, Week in review / SecurityTicks

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out 16/07/2023 at 11:31 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: CISO perspective on why boards don’t fully grasp cyber attack risks In this Help Net Security interview,

React to this headline:

Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is out Read More »

Meta’s Threads app used as a lure

Don't miss, EU, Hot stuff, Meta, mobile apps, Mysk, News, Threads, Veriti / SecurityTicks

Meta’s Threads app used as a lure 14/07/2023 at 14:16 By Zeljka Zorz It was to be expected: As the buzz around Meta’s new microblogging platform Threads gained momentum, some individuals have stepped in to take advantage of the fact that the app still can’t formally serve users in the European Union (or China, or

React to this headline:

Meta’s Threads app used as a lure Read More »

Generative AI outperforms hackers but not their creativity

Artificial Intelligence, Bugcrowd, cybersecurity, generative AI, hacker, hacking, News, report, vulnerability, vulnerability management / SecurityTicks

Generative AI outperforms hackers but not their creativity 14/07/2023 at 08:02 By Help Net Security 72% of hackers are confident that AI cannot replace human creativity in security research and vulnerability management, according to Bugcrowd. Generative AI hacking Generative AI was a major theme in the 2023 report, with 55% of respondents saying that it

React to this headline:

Generative AI outperforms hackers but not their creativity Read More »

Satellites lack standard security mechanisms found in mobile phones and laptops

attacks, authentication, communication, cybersecurity, News, report, reverse engineering, vulnerability / SecurityTicks

Satellites lack standard security mechanisms found in mobile phones and laptops 14/07/2023 at 07:34 By Help Net Security Researchers from Ruhr University Bochum and the CISPA Helmholtz Center for Information Security in Saarbrücken have assessed the security mechanisms of satellites currently orbiting the Earth from an IT perspective. Moritz Schloegel (left) and Johannes Willbold analyzed

React to this headline:

Satellites lack standard security mechanisms found in mobile phones and laptops Read More »

New infosec products of the week: July 14, 2023

Fidelis Cybersecurity, Hubble, Netscout, News, Regula, WatchGuard / SecurityTicks

New infosec products of the week: July 14, 2023 14/07/2023 at 07:09 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Fidelis Cybersecurity, Hubble, NETSCOUT, Regula, and WatchGuard. WatchGuard expands identity protection capabilities with AuthPoint Total Identity Security AuthPoint Total Identity Security enables MSPs to

React to this headline:

New infosec products of the week: July 14, 2023 Read More »

Facebook and Microsoft remain prime targets for spoofing

cybercrime, Email, Malware, News, phishing, report, spoofing, Vade Secure / SecurityTicks

Facebook and Microsoft remain prime targets for spoofing 14/07/2023 at 06:36 By Help Net Security While trends in phishing frequently evolve, Facebook and Microsoft’s collective dominance as the most spoofed brands continues, according to Vade. Facebook and Microsoft’s collective dominance as the most spoofed brands continued into H1 2023, with the former accounting for 18%

React to this headline:

Facebook and Microsoft remain prime targets for spoofing Read More »

Top priorities for chief audit executives in 2023

auditing, cybersecurity, digital transformation, Gartner, News, survey / SecurityTicks

Top priorities for chief audit executives in 2023 14/07/2023 at 06:10 By Help Net Security The top focus areas for chief audit executives (CAEs) in 2023 are advancing data analytics, assuring proliferating digital risks, and talent management, according to Gartner. “In 2023 most CAEs are focusing on organizational and departmental digital transformation initiatives and improving

React to this headline:

Top priorities for chief audit executives in 2023 Read More »