report - Security Ticks

Shadow AI is breaking corporate security from within

Artificial Intelligence, Compliance, cybersecurity, IO, News, report, supply chain attacks, third party compromise / SecurityTicks

Shadow AI is breaking corporate security from within 2025-09-18 at 08:26 By Anamarija Pogorelec Cybersecurity leaders know the attack surface has been growing for years, but the latest State of Information Security Report 2025 from IO shows how fast new risks are converging. Drawing on responses from more than 3,000 security professionals in the UK […]

React to this headline:

Shadow AI is breaking corporate security from within Read More »

Global hiring risks: What you need to know about identity fraud and screening trends

fraud, HireRight, identity verification, News, report, Risk Management, survey / SecurityTicks

Global hiring risks: What you need to know about identity fraud and screening trends 2025-09-18 at 07:10 By Anamarija Pogorelec Hiring new employees has always carried some risk, but that risk is growing in new ways, and identity fraud is becoming more common in the hiring process. HireRight’s 2025 Global Benchmark Report takes a close

React to this headline:

Global hiring risks: What you need to know about identity fraud and screening trends Read More »

Old file types, new tricks: Attackers turn everyday files into weapons

cybersecurity, HP, Malware, News, phishing, report, threats / SecurityTicks

Old file types, new tricks: Attackers turn everyday files into weapons 2025-09-17 at 07:44 By Anamarija Pogorelec Attackers are finding new ways to blend in with everyday business tools, hiding their activity inside formats and processes that workers and IT teams often trust. The latest quarterly Threat Insights Report from HP Wolf Security shows how

React to this headline:

Old file types, new tricks: Attackers turn everyday files into weapons Read More »

OT security needs continuous operations, not one-time fixes

critical infrastructure, cybersecurity, Forrester Consulting, ICS/SCADA, News, report, Schneider Electric, survey / SecurityTicks

OT security needs continuous operations, not one-time fixes 2025-09-16 at 08:40 By Anamarija Pogorelec Cyberattacks keep hitting the OT systems that critical infrastructure operators run, according to new research from Forrester. In a survey of 262 OT security decision-makers, 91% reported at least one breach or system failure caused by a cyberattack in the past

React to this headline:

OT security needs continuous operations, not one-time fixes Read More »

Static feeds leave intelligence teams reacting to irrelevant or late data

cybersecurity, data security, Flashpoint, monitoring, News, report, Threat Intelligence / SecurityTicks

Static feeds leave intelligence teams reacting to irrelevant or late data 2025-09-15 at 07:12 By Anamarija Pogorelec Boards and executives are not asking for another feed of indicators. They want to know whether their organization is being targeted, how exposed they are, and what steps need to be taken. A new report from Flashpoint argues

React to this headline:

Static feeds leave intelligence teams reacting to irrelevant or late data Read More »

CISOs brace for a new kind of AI chaos

Artificial Intelligence, automation, cybersecurity, machine learning, News, report, SANS, security operations, SOC / SecurityTicks

CISOs brace for a new kind of AI chaos 2025-09-12 at 08:47 By Anamarija Pogorelec AI is being added to business processes faster than it is being secured, creating a wide gap that attackers are already exploiting, according to the SANS Institute. The scale of the problem Attackers are using AI to work at speeds

React to this headline:

CISOs brace for a new kind of AI chaos Read More »

Ransomware, vendor outages, and AI attacks are hitting harder in 2025

CISO, cyber insurance, cyber risk, fraud, News, report, resilience, strategy, threats / SecurityTicks

Ransomware, vendor outages, and AI attacks are hitting harder in 2025 2025-09-12 at 07:57 By Mirko Zorz Ransomware, third-party disruptions, and the rise of AI-powered attacks are reshaping the cyber risk landscape in 2025. A new midyear analysis from Resilience shows how these forces are playing out in real-world incidents and how they are changing

React to this headline:

Ransomware, vendor outages, and AI attacks are hitting harder in 2025 Read More »

AI is everywhere, but scaling it is another story

Artificial Intelligence, CISO, Compliance, data security, News, report, Tines / SecurityTicks

AI is everywhere, but scaling it is another story 2025-09-11 at 08:02 By Anamarija Pogorelec AI is being adopted across industries, but many organizations are hitting the same obstacles, according to Tines. IT leaders say orchestration is the key to scaling AI. They point to governance, visibility, and collaboration as the critical areas executives need

React to this headline:

AI is everywhere, but scaling it is another story Read More »

Fixing silent failures in security controls with adversarial exposure validation

Don't miss, Expert analysis, Expert corner, Hot stuff, News, Picus Security, report, security controls, Whitepapers and webinars / SecurityTicks

Fixing silent failures in security controls with adversarial exposure validation 2025-09-10 at 08:16 By Help Net Security Organizations often operate as if their security controls are fully effective simply because they’re deployed, configured, and monitored. Firewalls are in place, endpoints are protected, and SIEM rules are running. All good, right? Not so fast. Appearances can

React to this headline:

Fixing silent failures in security controls with adversarial exposure validation Read More »

AI agents are here, now comes the hard part for CISOs

agentic AI, Artificial Intelligence, generative AI, Google, Google Cloud, monitoring, News, report, survey / SecurityTicks

AI agents are here, now comes the hard part for CISOs 2025-09-10 at 07:40 By Mirko Zorz AI agents are being deployed inside enterprises today to handle tasks across security operations. This shift creates new opportunities for security teams but also introduces new risks. Google Cloud’s new report, The ROI of AI 2025, shows that

React to this headline:

AI agents are here, now comes the hard part for CISOs Read More »

CISOs, stop chasing vulnerabilities and start managing human risk

CISO, cybersecurity, Dune Security, human error, News, report, survey / SecurityTicks

CISOs, stop chasing vulnerabilities and start managing human risk 2025-09-10 at 07:25 By Anamarija Pogorelec Breaches continue to grow in scale and speed, yet the weakest point remains unchanged: people. According to Dune Security’s 2025 CISO Risk Intelligence Survey, over 90 percent of incidents still originate from user behavior rather than technical flaws. The survey

React to this headline:

CISOs, stop chasing vulnerabilities and start managing human risk Read More »

Identity management was hard, AI made it harder

Artificial Intelligence, automation, CISO, data security, identity management, News, report, SailPoint, survey / SecurityTicks

Identity management was hard, AI made it harder 2025-09-08 at 07:33 By Anamarija Pogorelec Identity security is becoming a core part of cybersecurity operations, but many organizations are falling behind. A new report from SailPoint shows that as AI-driven identities and machine accounts grow, most security teams are not prepared to manage them at scale.

React to this headline:

Identity management was hard, AI made it harder Read More »

AI moves fast, but data security must move faster

Artificial Intelligence, data security, generative AI, News, report, survey, Thales / SecurityTicks

AI moves fast, but data security must move faster 2025-09-08 at 07:03 By Anamarija Pogorelec Generative AI is showing up everywhere in the enterprise, from customer service chatbots to marketing campaigns. It promises speed and innovation, but it also brings new and unfamiliar security risks. As companies rush to adopt these tools, many are discovering

React to this headline:

AI moves fast, but data security must move faster Read More »

File security risks rise as insiders, malware, and AI challenges converge

cyber risk, cybersecurity, Data leak, data security, News, OPSWAT, Ponemon Institute, report, survey / SecurityTicks

File security risks rise as insiders, malware, and AI challenges converge 2025-09-05 at 08:42 By Anamarija Pogorelec Breaches tied to file access are happening often, and the costs add up quickly. Many organizations have faced multiple file-related incidents over the last two years, with financial losses stretching into the millions. The fallout often includes stolen

React to this headline:

File security risks rise as insiders, malware, and AI challenges converge Read More »

Connected cars are smart, convenient, and open to cyberattacks

connected cars, cybersecurity, hardware, Internet of Things, News, report, RunSafe Security, survey / SecurityTicks

Connected cars are smart, convenient, and open to cyberattacks 2025-09-05 at 07:32 By Sinisa Markovic Consumers are concerned about vulnerabilities in their vehicles, which directly impacts purchasing behavior and brand loyalty, according to RunSafe Security. Vehicles now run on over 100 million lines of code, which is more than most fighter jets, but they often

React to this headline:

Connected cars are smart, convenient, and open to cyberattacks Read More »

Attackers are turning Salesforce trust into their biggest weapon

cybersecurity, Don't miss, News, OAuth, report, Salesforce, survey, threats, WithSecure / SecurityTicks

Attackers are turning Salesforce trust into their biggest weapon 2025-09-04 at 09:02 By Sinisa Markovic Salesforce has become a major target for attackers in 2025, according to new WithSecure research into threats affecting customer relationship management (CRM) platforms. The report shows that malicious activity inside Salesforce environments rose sharply in the first quarter of this

React to this headline:

Attackers are turning Salesforce trust into their biggest weapon Read More »

DDoS attacks serve as instruments of political influence and disruption

cybercrime, cybersecurity, DDoS, Netscout, News, report, survey / SecurityTicks

DDoS attacks serve as instruments of political influence and disruption 2025-09-04 at 07:02 By Sinisa Markovic In the first half of 2025, there were 8,062,971 DDoS attacks worldwide, with EMEA taking the brunt at 3.2 million attacks, according to Netscout. Peak attacks reached speeds of 3.12 Tbps and 1.5 Gpps. These attacks have moved beyond

React to this headline:

DDoS attacks serve as instruments of political influence and disruption Read More »

AI will drive purchases this year, but not without questions

Arctic Wolf Networks, Artificial Intelligence, cybersecurity, News, report, security operations, SOC, survey / SecurityTicks

AI will drive purchases this year, but not without questions 2025-09-03 at 07:04 By Sinisa Markovic AI is moving into security operations, but CISOs are approaching it with a mix of optimism and realism. A new report from Arctic Wolf shows that most organizations are exploring or adopting AI-driven tools, yet many still see risks

React to this headline:

AI will drive purchases this year, but not without questions Read More »

Complexity and AI put identity protection to the test

Cisco, cyber risk, cybersecurity, Duo Security, News, report, survey / SecurityTicks

Complexity and AI put identity protection to the test 2025-09-02 at 08:06 By Anamarija Pogorelec Identity has become a core pillar of cybersecurity strategy. Remote work, cloud-first adoption, and distributed supply chains have moved identity from “a tactical IT consideration to a strategic pillar of cybersecurity,” according to Cisco Duo’s 2025 State of Identity Security

React to this headline:

Complexity and AI put identity protection to the test Read More »

What the GitGuardian secrets sprawl report reveals about leaked credentials

Don't miss, GitGuardian, News, report, Video / SecurityTicks

What the GitGuardian secrets sprawl report reveals about leaked credentials 2025-09-02 at 07:47 By Help Net Security In this Help Net Security video, Dwayne McDaniel, Senior Developer Advocate at GitGuardian, presents findings from The State of Secrets Sprawl 2025. McDaniel explains why generic secrets are especially difficult to detect, why private repositories pose an even

React to this headline:

What the GitGuardian secrets sprawl report reveals about leaked credentials Read More »