News - Security Ticks

New infosec products of the week: June 30, 2023

Cequence Security, Delinea, Index Engines, NetApp, News / SecurityTicks

New infosec products of the week: June 30, 2023 30/06/2023 at 05:18 By Help Net Security Here’s a look at the most interesting products from the past week, featuring releases from Cequence Security, Delinea, Index Engines, and NetApp. Delinea Privilege Manager enhancements reduce phishing effectiveness Based on Delinea’s deep expertise and customer feedback, the new […]

React to this headline:

New infosec products of the week: June 30, 2023 Read More »

Unlocking internet’s secrets via monitoring, data collection, and analysis

CDNetworks, CISO, cybercrime, cybersecurity, data collection, Don't miss, exploit, Features, Hot stuff, monitoring, Netcraft, News, opinion, SSL/TLS, threats / SecurityTicks

Unlocking internet’s secrets via monitoring, data collection, and analysis 30/06/2023 at 05:05 By Mirko Zorz In this Help Net Security interview, Ryan Woodley, CEO of Netcraft, discusses the importance of monitoring, collecting, and analyzing internet data to gain a profound understanding of the internet. This insight plays a vital role in protecting and empowering customers.

React to this headline:

Unlocking internet’s secrets via monitoring, data collection, and analysis Read More »

Businesses are ignoring third-party security risks

cybersecurity, News, Panorays, report, threats / SecurityTicks

Businesses are ignoring third-party security risks 30/06/2023 at 05:05 By Help Net Security In the dynamic business landscape where third-party relationships assume a critical role, organizations confront various risks that can profoundly affect their security and compliance requirements, according to Panorays. Even amidst tough economic times, the crucial nature of these risks necessitates proactive management.

React to this headline:

Businesses are ignoring third-party security risks Read More »

Employees worry less about cybersecurity best practices in the summer

API security, Application Security, BYOD, cybersecurity, News, remote working, report, survey, ThreatX / SecurityTicks

Employees worry less about cybersecurity best practices in the summer 30/06/2023 at 04:17 By Help Net Security IT teams are struggling to monitor and enforce BYOD (Bring Your Own Device) policies during summer months when more employees are often traveling or working remotely, according to ThreatX. With more endpoints and applications in use, and often

React to this headline:

Employees worry less about cybersecurity best practices in the summer Read More »

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258)

Arcserve, backup, Data Protection, Don't miss, enterprise, Hot stuff, MDSec, News, PoC, vulnerability / SecurityTicks

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258) 29/06/2023 at 14:17 By Zeljka Zorz An authentication bypass vulnerability (CVE-2023-26258) in the Arcserve Unified Data Protection (UDP) enterprise data protection solution can be exploited to compromise admin accounts and take over vulnerable instances, MDSec researchers Juan Manuel Fernández and Sean Doherty have found – and

React to this headline:

PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258) Read More »

Popular generative AI projects pose serious security threat

Artificial Intelligence, cybersecurity, generative AI, GitHub, News, OpenSSF, report, Rezilion / SecurityTicks

Popular generative AI projects pose serious security threat 29/06/2023 at 07:48 By Help Net Security Many popular generative AI projects are an increased security threat and open-source projects that utilize insecure generative AI and LLMs also have poor security posture, resulting in an environment with substantial risk for organizations, according to Rezilion. Advancements in LLMs

React to this headline:

Global rise in DDoS attacks threatens digital infrastructure

ChatGPT, cybercrime, DDoS, News, Nexusguard / SecurityTicks

Global rise in DDoS attacks threatens digital infrastructure 29/06/2023 at 06:35 By Help Net Security In 2022, the total number of DDoS attacks worldwide increased by 115.1% over the amount observed in 2021, according to Nexusguard. The data also showed that cyber attackers continued to alter their threat vectors by targeting the application platforms, online

React to this headline:

Global rise in DDoS attacks threatens digital infrastructure Read More »

Businesses count the cost of network downtime

Artificial Intelligence, automation, CIO, investment, network, News, Opengear, report / SecurityTicks

Businesses count the cost of network downtime 29/06/2023 at 06:06 By Help Net Security Fewer than one in ten CIOs can claim that they have avoided a network outage, according to Opengear. This finding is among new research by Opengear of both CIOs and network engineers globally. The scale and frequency of network outages is

React to this headline:

Businesses count the cost of network downtime Read More »

Guide: Attack Surface Management (ASM)

Don't miss, NetSPI, News, Whitepapers and webinars / SecurityTicks

Guide: Attack Surface Management (ASM) 29/06/2023 at 05:50 By Help Net Security Attack surface expansion is a byproduct of doing business today, especially for enterprises that rely on the cloud. As businesses adapt and scale, the assets and platforms they use inevitably grow and change. This can result in attack surface exposures, both known and

React to this headline:

Guide: Attack Surface Management (ASM) Read More »

8Base ransomware group leaks data of 67 victim organizations

Don't miss, extortion, Hot stuff, News, Ransomware, SMBs, ThreatMon, trends, VMWare / SecurityTicks

8Base ransomware group leaks data of 67 victim organizations 28/06/2023 at 16:47 By Helga Labus Lockbit 3.0 is currently the most active ransomware group, NCC Group says in its most recent Threat Pulse report, but new ransomware groups like 8Base and Akira are rising in prominence. Collectively, the various ransomware groups revealed 436 victim organizations

React to this headline:

8Base ransomware group leaks data of 67 victim organizations Read More »

Preparing health systems for cyber risks and insurance coverage

CISO, cyber insurance, cyber risk, cyberattack, cybersecurity, Don't miss, Features, healthcare, Hot stuff, how-to, News, opinion, Risk Management, strategy, TRIMEDX / SecurityTicks

Preparing health systems for cyber risks and insurance coverage 28/06/2023 at 07:32 By Mirko Zorz Our healthcare systems are at risk of infiltration by threat actors, potentially disrupting services, compromising sensitive data, and even jeopardizing patient outcomes. Among the people addressing these challenges is Dennis Fridrich, VP of Cybersecurity at TRIMEDX, who not only understands

React to this headline:

Preparing health systems for cyber risks and insurance coverage Read More »

Economic volatility drives businesses to MSPs

cybercriminals, cybersecurity, investment, Kaseya, MSP, News, report / SecurityTicks

Economic volatility drives businesses to MSPs 28/06/2023 at 06:02 By Help Net Security The current economic conditions are leading companies of all sizes to reassess their operations and business strategies to remain competitive and profitable, according to Kaseya. Business growth key driver for it budgets Budgets and resources may be shrinking, but workloads are not.

React to this headline:

Economic volatility drives businesses to MSPs Read More »

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized

cybercrime, EU, Europe, Europol, Government, hardware, law enforcement, News / SecurityTicks

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized 27/06/2023 at 14:37 By Help Net Security Worldwide, 6558 arrests follow the dismantling of EncroChat, a tool favored by organized crime groups (OCGs). 197 of those arrested were high-value targets. This result is detailed in the first review of EncroChat, presented today by the French

React to this headline:

EncroChat dismantling lead to 6500 arrests, EUR 900 million seized Read More »

95% fear inadequate cloud security detection and response

Cloud, cloud security, data breach, identity, News, Permiso, report / SecurityTicks

95% fear inadequate cloud security detection and response 27/06/2023 at 06:37 By Help Net Security Although numerous respondents acknowledged employing risky practices and behaviors within their cloud environments, they strongly believe in the effectiveness of their security tools and processes to safeguard their organizations against meticulously planned attacks, according to Permiso. That high confidence level

React to this headline:

95% fear inadequate cloud security detection and response Read More »

Widespread BEC attacks threaten European organizations

Abnormal Security, BEC scams, cybercrime, cybersecurity, Email, News / SecurityTicks

Widespread BEC attacks threaten European organizations 27/06/2023 at 06:06 By Help Net Security European organizations experienced a greater volume and frequency of BEC attacks over the last year, as compared to organizations in the United States, according to Abnormal Security. BEC attacks volume and frequency The data is based on an analysis of email attack

React to this headline:

Widespread BEC attacks threaten European organizations Read More »

MOVEit compromise affects pension systems, insurers

data breach, data theft, Don't miss, file-sharing, Hot stuff, News, third party compromise / SecurityTicks

MOVEit compromise affects pension systems, insurers 26/06/2023 at 14:32 By Helga Labus The compromise of PBI Research and The Berwyn Group’s MOVEit installation has resulted in the theft of data belonging to several pension systems and insurance companies – and millions of their users. PBI + Berwyn Group – a population management provider – was

React to this headline:

MOVEit compromise affects pension systems, insurers Read More »

Exploring the persistent threat of cyberattacks on healthcare

CISO, cyberattack, data, Don't miss, Features, healthcare, Hot stuff, how-to, News, opinion, Siemens, strategy, tips / SecurityTicks

Exploring the persistent threat of cyberattacks on healthcare 26/06/2023 at 07:38 By Mirko Zorz In this Help Net Security interview, Brett Harris, Cybersecurity Officer for the Americas at Siemens Healthineers, discusses the long-term impacts of cyberattacks on healthcare institutions and what healthcare providers can do to protect patients’ personal data and medical devices. Can you

React to this headline:

Exploring the persistent threat of cyberattacks on healthcare Read More »

5 free online cybersecurity courses you should check out

Coursera, Don't miss, Hot stuff, ISC2, News, skill development, strategy, tips / SecurityTicks

5 free online cybersecurity courses you should check out 26/06/2023 at 06:30 By Help Net Security Cryptography In this course, you’ll learn how to protect information to ensure its integrity, confidentiality, authenticity, and non-repudiation. You will develop a basic understanding of cryptographic concepts and how to apply them, implement secure protocols, key management concepts, critical

React to this headline:

5 free online cybersecurity courses you should check out Read More »

Uncovering attacker tactics through cloud honeypots

attacks, Cloud, cloud security, Don't miss, honeypots, News, Orca Security, report / SecurityTicks

Uncovering attacker tactics through cloud honeypots 26/06/2023 at 06:12 By Help Net Security Attackers typically find exposed “secrets” – pieces of sensitive information that allow access to an enterprise cloud environment — in as little as two minutes and, in many cases, begin exploiting them almost instantly, highlighting the urgent need for comprehensive cloud security,

React to this headline:

Uncovering attacker tactics through cloud honeypots Read More »

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023

News, Week in review / SecurityTicks

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023 25/06/2023 at 11:04 By Help Net Security Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unraveling the multifaceted threats facing telecom companies In this Help Net Security interview, Georgia Bafoutsou, Cybersecurity Officer at

React to this headline:

Week in review: Microsoft confirms DDoS attacks on M365 and Azure Portal, Infosecurity Europe 2023 Read More »