report - Security Ticks

AI-based tools designed for criminal activity are in high demand

cybercrime, News, Ransomware, report, survey, Trellix / SecurityTicks

AI-based tools designed for criminal activity are in high demand 2024-11-29 at 06:03 By Help Net Security Multiple regional conflicts, such as Russia’s continued invasion of Ukraine and the Israel-Hamas conflict, have resulted in a surge in cyberattacks and hacktivist activities, according to Trellix. AI-driven ransomware boosts cybercrime tactics The research examines an increasingly complex […]

React to this headline:

AI-based tools designed for criminal activity are in high demand Read More »

VPN vulnerabilities, weak credentials fuel ransomware attacks

Corvus Insurance, cybercrime, cybersecurity, News, Ransomware, report, survey / SecurityTicks

VPN vulnerabilities, weak credentials fuel ransomware attacks 2024-11-28 at 08:12 By Help Net Security Attackers leveraging virtual private network (VPN) vulnerabilities and weak passwords for initial access contributed to nearly 30% of ransomware attacks, according to Corvus Insurance. According to the Q3 report, many of these incidents were traced to outdated software or VPN accounts

React to this headline:

VPN vulnerabilities, weak credentials fuel ransomware attacks Read More »

Crypto companies are losing ground to deepfake attacks

Crypto, cybercrime, fraud, identity verification, News, Regula, report, survey / SecurityTicks

Crypto companies are losing ground to deepfake attacks 2024-11-28 at 06:34 By Help Net Security The crypto sector stands out as the only surveyed industry where deepfake fraud surpasses traditional document fraud in prevalence, according to Regula. Crypto companies suffer significant losses from fraud The study finds that 57% of crypto companies report audio deepfake

React to this headline:

Crypto companies are losing ground to deepfake attacks Read More »

Supply chain managers underestimate cybersecurity risks in warehouses

Artificial Intelligence, cybersecurity, Ivanti, News, report, survey / SecurityTicks

Supply chain managers underestimate cybersecurity risks in warehouses 2024-11-27 at 06:47 By Help Net Security 32% of warehouse respondents report that social engineering is one of the most-used entry points in warehouse cyberattacks – tied with software vulnerabilities (32%) and followed by devices (19%), according to Ivanti. Cyberattacks on warehouses threaten supply chain stability As

React to this headline:

Supply chain managers underestimate cybersecurity risks in warehouses Read More »

Cybercriminals turn to pen testers to test ransomware efficiency

Cato Networks, cybercrime, News, Ransomware, report, survey / SecurityTicks

Cybercriminals turn to pen testers to test ransomware efficiency 2024-11-22 at 07:04 By Help Net Security Ransomware gangs recruit pen testers to improve attack reliability Threat actors employ pen testers to improve ransomware effectiveness Threat actors are recruiting pen testers to test and improve the reliability of their ransomware for affiliate programs, according to Cato

React to this headline:

Cybercriminals turn to pen testers to test ransomware efficiency Read More »

Deepfake attacks occur every five minutes

cybercrime, Entrust, fraud, identity verification, News, report, survey / SecurityTicks

Deepfake attacks occur every five minutes 2024-11-22 at 06:35 By Help Net Security As cybercriminals continue to adapt their techniques to find new ways through defenses, AI-assisted fraud is growing increasingly sophisticated and frequent, according to Entrust. The findings reveal a deepfake attack happened every five minutes in 2024, while digital document forgeries increased 244%

React to this headline:

Deepfake attacks occur every five minutes Read More »

Full recovery from breaches takes longer than expected

cybersecurity, disaster recovery, Fastly, News, report, software, survey / SecurityTicks

Full recovery from breaches takes longer than expected 2024-11-21 at 06:03 By Help Net Security In 2024, businesses reported taking an average of 7.3 months to recover from cybersecurity breaches – 25% longer than expected and over a month past the anticipated timeline of 5.9 months, according to Fastly. Cybersecurity leaders feel unprepared for future

React to this headline:

Full recovery from breaches takes longer than expected Read More »

Overreliance on GenAI to develop software compromises security

automation, generative AI, Legit Security, News, report, software development, survey / SecurityTicks

Overreliance on GenAI to develop software compromises security 2024-11-20 at 06:07 By Help Net Security GenAI is quickly changing the software development process by automating tasks that once took developers hours, if not days, to complete, bolstering efficiency and productivity, according to Legit Security. “As GenAI transforms software development and becomes increasingly embedded in the

React to this headline:

Overreliance on GenAI to develop software compromises security Read More »

Google report shows CISOs must embrace change to stay secure

CISO, cybersecurity, Don't miss, Google, Hot stuff, News, report, survey, tips / SecurityTicks

Google report shows CISOs must embrace change to stay secure 2024-11-19 at 06:03 By Mirko Zorz Google’s latest report, conducted in partnership with Hypothesis Group, reveals a stark reality for organizations: incremental security measures are no longer sufficient. The study, involving over 2,000 decision-makers across the US, UK, India, and Brazil, paints a picture of

React to this headline:

Google report shows CISOs must embrace change to stay secure Read More »

Major security audit of critical FreeBSD components now available

FreeBSD Foundation, News, report / SecurityTicks

Major security audit of critical FreeBSD components now available 2024-11-18 at 17:33 By Mirko Zorz The FreeBSD Foundation, in partnership with the Alpha-Omega Project, has released the results of an extensive security audit of two critical FreeBSD components: the bhyve hypervisor and the Capsicum sandboxing framework. The audit, conducted by the offensive security firm Synacktiv,

React to this headline:

Major security audit of critical FreeBSD components now available Read More »

Cybercriminals hijack DNS to build stealth attack networks

attacks, cybercrime, DNS, hijacking, Infoblox, News, report / SecurityTicks

Cybercriminals hijack DNS to build stealth attack networks 2024-11-15 at 16:05 By Help Net Security Hijacking domains using a ‘Sitting Ducks attack’ remains an underrecognized topic in the cybersecurity community. Few threat researchers are familiar with this attack vector, and knowledge is scarce. However, the prevalence of these attacks and the risk to organizations are

React to this headline:

Cybercriminals hijack DNS to build stealth attack networks Read More »

Critical vulnerabilities persist in high-risk sectors

Application Security, Black Duck, News, report, software, survey, vulnerability assessment / SecurityTicks

Critical vulnerabilities persist in high-risk sectors 2024-11-15 at 06:38 By Help Net Security Finance and insurance sectors found to have the highest number of critical vulnerabilities, according to Black Duck. Finance and insurance industry faces highest vulnerabilities The report, which analyzes data from over 200,000 dynamic application security testing (DAST) scans conducted by Black Duck

React to this headline:

Critical vulnerabilities persist in high-risk sectors Read More »

NIST report on hardware security risks reveals 98 failure scenarios

News, NIST, report / SecurityTicks

NIST report on hardware security risks reveals 98 failure scenarios 2024-11-15 at 05:33 By Mirko Zorz NIST’s latest report, “Hardware Security Failure Scenarios: Potential Hardware Weaknesses” (NIST IR 8517), explores the hidden vulnerabilities in computer hardware, a domain often considered more secure than software. The report highlights how hardware flaws embedded in chip designs can

React to this headline:

NIST report on hardware security risks reveals 98 failure scenarios Read More »

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage

Artificial Intelligence, cloud security, cybersecurity, Google, Google Cloud, News, predictions, report / SecurityTicks

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage 2024-11-14 at 08:04 By Anamarija Pogorelec Google Cloud unveiled its Cybersecurity Forecast for 2025, offering a detailed analysis of the emerging threat landscape and key security trends that organizations worldwide should prepare for. The report delivers insights into the tactics of cyber adversaries,

React to this headline:

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage Read More »

Zero-days dominate top frequently exploited vulnerabilities

0-day, CISA, Don't miss, FBI, Hot stuff, NCSC, News, NSA, report, Tenable, vulnerability / SecurityTicks

Zero-days dominate top frequently exploited vulnerabilities 2024-11-14 at 07:03 By Mirko Zorz A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. Zero-day vulnerabilities on the rise The advisory highlights that malicious cyber actors increasingly targeted zero-day vulnerabilities, posing significant

React to this headline:

Zero-days dominate top frequently exploited vulnerabilities Read More »

How cybersecurity failures are draining business budgets

CISO, cybersecurity, Insurance, News, Panaseer, report, survey / SecurityTicks

How cybersecurity failures are draining business budgets 2024-11-14 at 06:10 By Help Net Security Security leaders feel under increasing pressure to provide assurances around cybersecurity, exposing them to greater personal risk – yet many lack the data and resources to accurately report and close cybersecurity gaps, according to Panaseer. The report analyses the findings of

React to this headline:

How cybersecurity failures are draining business budgets Read More »

Social engineering scams sweep through financial institutions

BioCatch, cybercrime, financial industry, fraud, News, report, social engineering, survey / SecurityTicks

Social engineering scams sweep through financial institutions 2024-11-13 at 06:04 By Help Net Security North American financial institutions fielded 10 times more reports of social engineering scams in 2024 than they did a year ago, according to BioCatch. The data shows scams now represent 23% of all digital banking fraud. Growing danger of deepfake and

React to this headline:

Social engineering scams sweep through financial institutions Read More »

How human ingenuity continues to outpace automated security tools

Artificial Intelligence, cyber risk, cybersecurity, HackerOne, News, report, survey / SecurityTicks

How human ingenuity continues to outpace automated security tools 2024-11-11 at 06:04 By Industry News 10% of security researchers now specialize in AI technology as 48% of security leaders consider AI to be one of the greatest risks to their organizations, according to HackerOne. HackerOne’s report combines perspectives from the researcher community, customers, and security

React to this headline:

How human ingenuity continues to outpace automated security tools Read More »

Identity-related data breaches cost more than average incidents

cybersecurity, data breach, identity, News, report, RSA, survey / SecurityTicks

Identity-related data breaches cost more than average incidents 2024-11-06 at 06:01 By Help Net Security Identity-related data breaches are more severe and costly than run-of-the-mill incidents, according to RSA. 40% of respondents reported an identity-related security breach. Of those, 66% reported it as a severe event that affected their organization. 44% estimated that the total

React to this headline:

AI learning mechanisms may lead to increase in codebase leaks

Application Security, code, CyberArk, cybersecurity, digital transformation, GitGuardian, News, report, survey / SecurityTicks

AI learning mechanisms may lead to increase in codebase leaks 2024-11-05 at 06:03 By Help Net Security The proliferation of non-human identities and the complexity of modern application architectures has created significant security challenges, particularly in managing sensitive credentials, according to GitGuardian. Based on a survey of 1,000 IT decision-makers in organizations with over 500

React to this headline:

AI learning mechanisms may lead to increase in codebase leaks Read More »