report - Security Ticks

More destructive cyberattacks target financial institutions

0-day, Contrast Security, cybercrime, cybersecurity, financial industry, News, report, survey / SecurityTicks

More destructive cyberattacks target financial institutions 2025-02-05 at 06:06 By Help Net Security Financial institutions will continue to be the ultimate targets for criminals and threat actors, as a successful attack offers a significant payoff, according to Contrast Security. Contrast Security has surveyed 35 of the world’s leading financial institutions to better understand their cyber […]

React to this headline:

More destructive cyberattacks target financial institutions Read More »

8 steps to secure GenAI integration in financial services

cybersecurity, FS-ISAC, generative AI, News, Privacy, report, strategy, survey / SecurityTicks

8 steps to secure GenAI integration in financial services 2025-02-04 at 07:00 By Help Net Security GenAI offers financial services institutions enormous opportunities, particularly in unstructured dataset analysis and management, but may also increase security risks, according to FS-ISAC. GenAI can organize oceans of information and retrieve insights from it that you can use to

React to this headline:

8 steps to secure GenAI integration in financial services Read More »

Only 3% of organizations have a dedicated budget for SaaS security

Cloud Security Alliance, cybersecurity, News, report, SaaS, strategy, survey, Wing Security / SecurityTicks

Only 3% of organizations have a dedicated budget for SaaS security 2025-02-03 at 06:48 By Help Net Security Mid-market organizations are grappling with managing the large volume of SaaS applications, both sanctioned and unsanctioned, with actual numbers often exceeding expectations, according to Cloud Security Alliance. Security teams are struggling with a growing attack surface Disconcertingly,

React to this headline:

Only 3% of organizations have a dedicated budget for SaaS security Read More »

Platformization is key to reduce cybersecurity complexity

Artificial Intelligence, cybersecurity, IBM, News, Palo Alto Networks, report, survey / SecurityTicks

Platformization is key to reduce cybersecurity complexity 2025-01-31 at 07:03 By Help Net Security Organizations are facing security complexity challenges as they juggle an average of 83 different security solutions from 29 vendors, according to a report by IBM and Palo Alto Networks. It also shows 7 out of 10 surveyed companies with a high

React to this headline:

Platformization is key to reduce cybersecurity complexity Read More »

Nine out of ten emails are spam

cybercrime, Email, email security, News, report, spam, survey, VIPRE Security / SecurityTicks

Nine out of ten emails are spam 2025-01-31 at 06:33 By Help Net Security Now, more than ever, users can fall prey to word-perfect AI-created phishing campaigns, subtle BEC messages that sound remarkably like the sender, and highly convincing ploys from trusted vendors with legitimate-looking websites and clean domains, according to VIPRE Security Group. Spam

React to this headline:

Nine out of ten emails are spam Read More »

89% of AI-powered APIs rely on insecure authentication mechanisms

API security, Artificial Intelligence, cybersecurity, News, report, survey, vulnerability, Wallarm / SecurityTicks

89% of AI-powered APIs rely on insecure authentication mechanisms 2025-01-30 at 06:33 By Help Net Security APIs have emerged as the predominant attack surface over the past year, with AI being the biggest driver of API security risks, according to Wallarm. “Based on our findings, what is clear is that API security is no longer

React to this headline:

89% of AI-powered APIs rely on insecure authentication mechanisms Read More »

How Lazarus Group built a cyber espionage empire

cyber attribution, cybersecurity, Don't miss, News, North Korea, report, SecurityScorecard, supply chain compromise / SecurityTicks

How Lazarus Group built a cyber espionage empire 2025-01-29 at 11:04 By Help Net Security Since September 2024, SecurityScorecard’s STRIKE team has been investigating Lazarus Group’s activity, uncovering key details about their infrastructure. Despite variations in payload delivery and obfuscation techniques, the campaign relied on a consistent C2 framework. Hidden control panel Through deep analysis,

React to this headline:

How Lazarus Group built a cyber espionage empire Read More »

Cybersecurity crisis in numbers

cybercrime, cybersecurity, data breach, Identity Theft Resource Center, News, report, survey / SecurityTicks

Cybersecurity crisis in numbers 2025-01-29 at 07:03 By Help Net Security The number of US data compromises in 2024 (3,158) decreased 1% compared to 2023 (3,202), 44 events away from tying a record for the number of compromises tracked in a year, according to the Identity Theft Resource Center. Data breach notices surge The number

React to this headline:

Cybersecurity crisis in numbers Read More »

Only 13% of organizations fully recover data after a ransomware attack

Artificial Intelligence, cybercrime, cybersecurity, data breach, Illumio, News, Ransomware, report, survey / SecurityTicks

Only 13% of organizations fully recover data after a ransomware attack 2025-01-29 at 06:04 By Help Net Security Ransomware attacks are disrupting and undermining business operations and draining revenue streams, according to Illumio. Findings from the study reveal that 58% of organizations had to shut down operations following a ransomware attack, up from 45% in

React to this headline:

Only 13% of organizations fully recover data after a ransomware attack Read More »

74% of CISOs are increasing crisis simulation budgets

CISO, cybersecurity, Hack The Box, Incident Response, investment, News, report, strategy, survey / SecurityTicks

74% of CISOs are increasing crisis simulation budgets 2025-01-28 at 06:46 By Help Net Security In the aftermath of 2024’s high-profile cybersecurity incidents, including NHS, CrowdStrike, 23andMe, Transport for London, and Cencora, CISOs are reassessing their organisation’s readiness to manage a potential “chaos” of a full-scale cyber crisis, according to Hack The Box. Many CISOs

React to this headline:

74% of CISOs are increasing crisis simulation budgets Read More »

Nearly half of CISOs now report to CEOs, showing their rising influence

boardroom, CISO, Hot stuff, News, report, Splunk, strategy, survey / SecurityTicks

Nearly half of CISOs now report to CEOs, showing their rising influence 2025-01-24 at 07:33 By Industry News The CISO’s rise to the C-suite comes with more engagement with the boardroom, an audience with the CEO, and the power to make strategic decisions for the business, according to Splunk. CISOs report to the C-suite (Source:

React to this headline:

Nearly half of CISOs now report to CEOs, showing their rising influence Read More »

Deepfakes force a new era in fraud detection, identity verification

cybersecurity, deepfakes, fraud, identity, identity verification, News, Regula, report, survey / SecurityTicks

Deepfakes force a new era in fraud detection, identity verification 2025-01-24 at 06:32 By Help Net Security The rise in identity fraud over the past two years has significantly impacted all industries, especially finance, banking, fintech, and crypto, according to Regula. With deepfakes threatening every second company around the world, businesses won’t be able to

React to this headline:

Deepfakes force a new era in fraud detection, identity verification Read More »

CISOs are juggling security, responsibility, and burnout

BlackFog, CISO, cybersecurity, Cycode, DirectDefense, Gigamon, Google, Ivanti, LevelBlue, News, Onyxia, report, strategy, survey / SecurityTicks

CISOs are juggling security, responsibility, and burnout 2025-01-23 at 06:34 By Help Net Security This article gathers excerpts from multiple reports, presenting statistics and insights that may be valuable for CISOs, helping them with informed decision-making, risk management, and developing strategies to enhance their organization’s cybersecurity posture. CISOs don’t invest enough in code security 72%

React to this headline:

CISOs are juggling security, responsibility, and burnout Read More »

China-aligned PlushDaemon APT compromises supply chain of Korean VPN

APT, backdoor, China, cyber espionage, cybercrime, ESET, Malware, News, report, VPN / SecurityTicks

China-aligned PlushDaemon APT compromises supply chain of Korean VPN 2025-01-22 at 08:04 By Help Net Security ESET researchers have uncovered a supply chain attack targeting a South Korean VPN provider, carried out by PlushDaemon, a newly identified China-aligned APT group. In this cyberespionage campaign, the attackers compromised the legitimate installer, replacing it with a malicious

React to this headline:

China-aligned PlushDaemon APT compromises supply chain of Korean VPN Read More »

Privacy professionals feel more stressed than ever

Compliance, ISACA, News, Privacy, report, survey / SecurityTicks

Privacy professionals feel more stressed than ever 2025-01-22 at 06:38 By Help Net Security Despite progress made in privacy staffing and strategy alignment, privacy professionals are feeling increasingly stressed on the job within a complex compliance and risk landscape, according to new research from ISACA. Top three obstacles facing privacy programs ISACA’s State of Privacy

React to this headline:

Privacy professionals feel more stressed than ever Read More »

One in ten GenAI prompts puts sensitive data at risk

ChatGPT, cybersecurity, data security, generative AI, Harmonic, News, report, survey / SecurityTicks

One in ten GenAI prompts puts sensitive data at risk 2025-01-20 at 06:03 By Help Net Security Despite their potential, many organizations hesitate to fully adopt GenAI tools due to concerns about sensitive data being inadvertently shared and possibly used to train these systems, according to Harmonic. Sensitive data exposure in GenAI prompts A new

React to this headline:

One in ten GenAI prompts puts sensitive data at risk Read More »

Homeowners are clueless about how smart devices collect their data

Copeland, data security, Internet of Things, News, Privacy, report, smart home, survey / SecurityTicks

Homeowners are clueless about how smart devices collect their data 2025-01-17 at 07:00 By Help Net Security Homeowners are increasingly concerned about data privacy in smart home products, according to Copeland. Homeowners see smart devices as boosting home security Homeowners are still generally comfortable in using new technology, but this year smart thermostat non-owners are

React to this headline:

Homeowners are clueless about how smart devices collect their data Read More »

Critical vulnerabilities remain unresolved due to prioritization gaps

cybersecurity, News, report, survey, Swimlane, vulnerability management / SecurityTicks

Critical vulnerabilities remain unresolved due to prioritization gaps 2025-01-16 at 06:19 By Help Net Security Fragmented data from multiple scanners, siloed risk scoring and poor cross-team collaboration are leaving organizations increasingly exposed to breaches, compliance failures and costly penalties, according to Swimlane. The relentless surge of vulnerabilities is pushing security teams to their limits, forcing

React to this headline:

Critical vulnerabilities remain unresolved due to prioritization gaps Read More »

Cybersecurity is stepping into a new era of complexity

Artificial Intelligence, cybersecurity, News, report, survey, threats, World Economic Forum / SecurityTicks

Cybersecurity is stepping into a new era of complexity 2025-01-15 at 06:01 By Help Net Security Cybersecurity is entering a new era of complexity, according to the World Economic Forum’s Global Cybersecurity Outlook 2025 report. Growing complexity intensifies cyber inequity This complexity arises from the rapid growth of emerging technologies, prevailing geopolitical uncertainty, the evolution

React to this headline:

Cybersecurity is stepping into a new era of complexity Read More »

Malicious actors’ GenAI use has yet to match the hype

Artificial Intelligence, bot, Cyber Threat Alliance, deepfakes, disinformation, Don't miss, Hot stuff, News, phishing, report, scams, social engineering, threat response, tips / SecurityTicks

Malicious actors’ GenAI use has yet to match the hype 2025-01-14 at 17:08 By Zeljka Zorz Generative AI has helped lower the barrier for entry for malicious actors and has made them more efficient, i.e., quicker at creating convincing deepfakes, mounting phishing campaigns and investment scams, the most recent report by the Cyber Threat Alliance

React to this headline:

Malicious actors’ GenAI use has yet to match the hype Read More »