report - Security Ticks

AI can write your code, but nearly half of it may be insecure

Artificial Intelligence, cybersecurity, Don't miss, generative AI, LLMs, News, programming, report, Risk Management, Veracode / SecurityTicks

AI can write your code, but nearly half of it may be insecure 2025-08-07 at 09:15 By Help Net Security While GenAI excels at producing functional code, it introduces security vulnerabilities in 45 percent of cases, according to Veracode’s 2025 GenAI Code Security Report, which analyzed code produced by over 100 LLMs across 80 real-world […]

React to this headline:

AI can write your code, but nearly half of it may be insecure Read More »

Energy companies are blind to thousands of exposed services

critical infrastructure, cybersecurity, Don't miss, energy sector, News, report, SixMap, vulnerability management / SecurityTicks

Energy companies are blind to thousands of exposed services 2025-08-07 at 07:02 By Anamarija Pogorelec Many of America’s largest energy providers are exposed to known and exploitable vulnerabilities, and most security teams may not even see them, according to a new report from SixMap. Researchers assessed the external attack surface of 21 major energy companies,

React to this headline:

Energy companies are blind to thousands of exposed services Read More »

Ransomware is up, zero-days are booming, and your IP camera might be next

attacks, cyber resilience, cyber risk, cybercrime, cybersecurity, Don't miss, Forescout, News, Ransomware, report, threats / SecurityTicks

Ransomware is up, zero-days are booming, and your IP camera might be next 2025-08-06 at 08:47 By Help Net Security Cyber attackers are finding new ways in through the overlooked and unconventional network corners. Forescout’s 2025H1 Threat Review reveals a surge in advanced tactics, with zero-day exploits up 46 percent and ransomware attacks averaging 20

React to this headline:

Ransomware is up, zero-days are booming, and your IP camera might be next Read More »

Why 90% of cyber leaders are feeling the heat

BitSight, burnout, cyber risk, cybersecurity, monitoring, News, report, Risk Management, threat detection / SecurityTicks

Why 90% of cyber leaders are feeling the heat 2025-08-06 at 08:02 By Anamarija Pogorelec 90% of cyber leaders find managing cyber risks harder today than five years ago, mainly due to the explosion of AI and expanding attack surfaces, according to BitSight. These threats are also fueling high rates of burnout, with 47% of

React to this headline:

Why 90% of cyber leaders are feeling the heat Read More »

CISOs say they’re prepared, their data says otherwise

Artificial Intelligence, automation, Axonius, cybersecurity, data security, Don't miss, News, report, vulnerability management / SecurityTicks

CISOs say they’re prepared, their data says otherwise 2025-08-06 at 08:02 By Sinisa Markovic Most security teams believe they can act quickly when a threat emerges. But many don’t trust the very data they rely on to do so, and that’s holding them back. A new Axonius report, based on a survey of 500 U.S.-based

React to this headline:

CISOs say they’re prepared, their data says otherwise Read More »

Your employees uploaded over a gig of files to GenAI tools last quarter

cybersecurity, Data leak, generative AI, Harmonic, News, report / SecurityTicks

Your employees uploaded over a gig of files to GenAI tools last quarter 2025-08-05 at 08:17 By Help Net Security In Q2 2025, Harmonic reviewed 1 million GenAI prompts and 20,000 uploaded files across more than 300 GenAI and AI-powered SaaS apps, and the findings confirm that sensitive data is being exposed through GenAI tools,

React to this headline:

Your employees uploaded over a gig of files to GenAI tools last quarter Read More »

Ransomware groups shift to quadruple extortion to maximize pressure

Akamai, attacks, cybercrime, cybersecurity, extortion, Malware, News, Ransomware, report, threats / SecurityTicks

Ransomware groups shift to quadruple extortion to maximize pressure 2025-08-05 at 07:33 By Help Net Security Threat actors are using a new quadruple extortion tactic in ransomware campaigns, while double extortion remains the most common approach, according to Akamai. Ransomware extortion tactics (Source: Akamai) The emerging trend of quadruple extortion includes using DDoS attacks to

React to this headline:

Ransomware groups shift to quadruple extortion to maximize pressure Read More »

Average global data breach cost now $4.44 million

Artificial Intelligence, CISO, cybersecurity, data breach, Don't miss, Hot stuff, IBM, News, report, survey / SecurityTicks

Average global data breach cost now $4.44 million 2025-08-04 at 08:37 By Anamarija Pogorelec IBM released its Cost of a Data Breach Report, which revealed AI adoption is greatly outpacing AI security and governance. While the overall number of organizations experiencing an AI-related breach is a small representation of the researched population, this is the

React to this headline:

Average global data breach cost now $4.44 million Read More »

The surprising truth about identity security confidence

BeyondID, CISO, identity, News, Non Human Identities, report, security practices, survey / SecurityTicks

The surprising truth about identity security confidence 2025-08-04 at 07:42 By Help Net Security Organizations most confident in their identity security are often the least prepared, according to a new report from BeyondID. The study reveals a troubling gap between what organizations believe about their identity security programs and how they actually behave. Surprisingly, those

React to this headline:

The surprising truth about identity security confidence Read More »

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts

Compliance, CXO, cyber risk, enterprise, Gartner, News, report, Risk Management, supply chain / SecurityTicks

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts 2025-08-04 at 07:10 By Sinisa Markovic Enterprise risk leaders are most concerned about rising tariffs and trade tensions heading into the second half of 2025, according to a new report from Gartner. The firm’s second-quarter Emerging Risk Report, based on a survey of

React to this headline:

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts Read More »

Security gaps still haunt shared mobile device use in healthcare

BYOD, cybersecurity, healthcare, Imprivata, mobile devices, News, Privacy, report, security ROI / SecurityTicks

Security gaps still haunt shared mobile device use in healthcare 2025-08-01 at 07:33 By Sinisa Markovic Shared mobile devices are becoming the standard in hospitals and health systems. While they offer cost savings and workflow improvements, many organizations are still struggling to manage the security risks that come with them, according to Imprivata’s 2025 State

React to this headline:

Security gaps still haunt shared mobile device use in healthcare Read More »

AI is changing the vCISO game

CISO, cybersecurity, Cynomi, Don't miss, News, report, risk assessment, SMBs, strategy, survey / SecurityTicks

AI is changing the vCISO game 2025-07-31 at 08:02 By Anamarija Pogorelec Virtual CISO (vCISO) services have moved from niche to mainstream, with vCISO services adoption 2025 data showing a more than threefold increase in just one year. According to Cynomi’s 2025 State of the Virtual CISO report, 67% of MSPs and MSSPs now offer

React to this headline:

AI is changing the vCISO game Read More »

Secrets are leaking everywhere, and bots are to blame

bot, cybersecurity, Data leak, enterprise, Entro, News, Non Human Identities, report / SecurityTicks

Secrets are leaking everywhere, and bots are to blame 2025-07-31 at 07:30 By Anamarija Pogorelec Secrets like API keys, tokens, and credentials are scattered across messaging apps, spreadsheets, CI/CD logs, and even support tickets. According to Entro Security’s NHI & Secrets Risk Report H1 2025, non-human identities (NHIs), including bots, service accounts, and automation tools,

React to this headline:

Secrets are leaking everywhere, and bots are to blame Read More »

Why rural hospitals are losing the cybersecurity battle

Compliance, cybersecurity, healthcare, HIPAA, legacy technology, News, Paubox, report, survey / SecurityTicks

Why rural hospitals are losing the cybersecurity battle 2025-07-31 at 07:04 By Anamarija Pogorelec Cyber threats are becoming more frequent and sophisticated, and rural hospitals and clinics are feeling the pressure from all sides: tight budgets, small teams, limited training, complex technology, and vendors that do not always offer much help. Often, they are left

React to this headline:

Why rural hospitals are losing the cybersecurity battle Read More »

Why CISOs should rethink identity risk through attack paths

Black Hat USA 2025, CISO, cybersecurity, Don't miss, News, Non Human Identities, report, SpecterOps, strategy, survey, tips / SecurityTicks

Why CISOs should rethink identity risk through attack paths 2025-07-30 at 08:00 By Sinisa Markovic Identity-based attack paths are behind most breaches today, yet many organizations can’t actually see how those paths form. The 2025 State of Attack Path Management report from SpecterOps makes the case that traditional tools like identity governance, PAM, and MFA

React to this headline:

Why CISOs should rethink identity risk through attack paths Read More »

AI is here, security still isn’t

Black Hat USA 2025, News, Non Human Identities, report, SandboxAQ, survey / SecurityTicks

AI is here, security still isn’t 2025-07-30 at 07:30 By Sinisa Markovic Although 79% of organizations are already running AI in production, only 6% have put in place a comprehensive security strategy designed specifically for AI. As a result, most enterprises remain exposed to threats they are not yet prepared to detect or respond to,

React to this headline:

AI is here, security still isn’t Read More »

Boards shift focus to tech and navigate cautious investors

business continuity, CXO, enterprise, generative AI, News, regulation, report, strategy / SecurityTicks

Boards shift focus to tech and navigate cautious investors 2025-07-30 at 07:00 By Anamarija Pogorelec Corporate boards are adjusting to a more uncertain proxy landscape, according to EY’s 2025 Proxy Season Review. The report highlights four key 2025 proxy season trends shaping governance this year: more oversight of technology, fewer shareholder proposals (especially on sustainability),

React to this headline:

Boards shift focus to tech and navigate cautious investors Read More »

Inside the application security crisis no one wants to talk about

Application Security, Cypress Data Defense, News, report, survey / SecurityTicks

Inside the application security crisis no one wants to talk about 2025-07-29 at 07:50 By Anamarija Pogorelec Despite knowing the risks, most organizations are still shipping insecure software. That’s one of the stark findings from Cypress Data Defense’s 2025 State of Application Security report, which reveals a worsening crisis in software security. According to the

React to this headline:

Inside the application security crisis no one wants to talk about Read More »

What 50 companies got wrong about cloud identity security

cloud security, Compliance, cybersecurity, identity, News, report, Unosecur / SecurityTicks

What 50 companies got wrong about cloud identity security 2025-07-25 at 08:07 By Anamarija Pogorelec Most organizations still miss basic identity security controls in the cloud, leaving them exposed to breaches, audit failures, and compliance violations. A new midyear benchmark from Unosecur found that nearly every company scanned had at least one high-risk issue, with

React to this headline:

What 50 companies got wrong about cloud identity security Read More »

Most data breaches have unknown causes as transparency continues to fall

cybersecurity, data breach, identity protection, Identity Theft Resource Center, News, report / SecurityTicks

Most data breaches have unknown causes as transparency continues to fall 2025-07-24 at 11:57 By Help Net Security The Identity Theft Resource Center (ITRC) reports 1,732 publicly disclosed data breaches in H1 2025, marking a 5% increase over the same period in 2024. The ITRC could track a record number of compromises in 2025 if

React to this headline:

Most data breaches have unknown causes as transparency continues to fall Read More »