report - Security Ticks

Current attacks, targets, and other threat landscape trends

Cisco, cybersecurity, Don't miss, Hot stuff, Incident Response, News, report, threats, Video / SecurityTicks

Current attacks, targets, and other threat landscape trends 2024-08-14 at 06:31 By Help Net Security In this Help Net Security video, Kendall McKay, Strategic Lead, Cyber Threat Intelligence at Cisco Talos, discusses the trends that Cisco Talos incident response observed in incident response engagements from Q2 2024, which covers April to June. While the attacks […]

React to this headline:

Current attacks, targets, and other threat landscape trends Read More »

How CIOs, CTOs, and CISOs view cyber risks differently

Artificial Intelligence, CIO, CISO, cybersecurity, LevelBlue, News, report, strategy / SecurityTicks

How CIOs, CTOs, and CISOs view cyber risks differently 2024-08-13 at 06:31 By Help Net Security C-suite executives face a unique challenge: aligning their priorities between driving technological innovation and ensuring business resilience while managing ever-evolving cyber threats from criminals adept at exploiting the latest technologies, according to LevelBlue. This balancing act highlights the complexity

React to this headline:

How CIOs, CTOs, and CISOs view cyber risks differently Read More »

35% of exposed API keys still active, posing major security risks

API security, cybersecurity, News, Nightfall AI, passwords, report, risk, SaaS / SecurityTicks

35% of exposed API keys still active, posing major security risks 2024-08-13 at 06:01 By Help Net Security Nightfall AI’s research revealed that secrets like passwords and API keys were most often found in GitHub, with nearly 350 total secrets exposed per 100 employees every year. Hidden risks of secret sprawl in cloud and SaaS

React to this headline:

35% of exposed API keys still active, posing major security risks Read More »

74% of ransomware victims were attacked multiple times in a year

attacks, cyber resilience, cybersecurity, identity protection, News, Ransomware, regulation, report, Semperis, strategy / SecurityTicks

74% of ransomware victims were attacked multiple times in a year 2024-08-12 at 07:01 By Help Net Security An alarming trend toward multiple, sometimes simultaneous cyber attacks forces business leaders to re-evaluate their cyber resilience strategies to address common points of failure, including inadequate identity system backup and recovery practices, according to Semperis. Survey of

React to this headline:

74% of ransomware victims were attacked multiple times in a year Read More »

Misconfigurations and IAM weaknesses top cloud security concerns

access management, cloud computing, cloud security, Cloud Security Alliance, CSP, cybersecurity, News, report, supply chain / SecurityTicks

Misconfigurations and IAM weaknesses top cloud security concerns 2024-08-12 at 06:02 By Help Net Security Traditional cloud security issues often associated with cloud service providers (CSPs) are continuing to decrease in importance, according to the Top Threats to Cloud Computing 2024 report by the Cloud Security Alliance. Misconfigurations, IAM weaknesses, and API risks remain critical

React to this headline:

Misconfigurations and IAM weaknesses top cloud security concerns Read More »

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

cybercriminals, cybersecurity, Darktrace, News, phishing, Ransomware, report, threat / SecurityTicks

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals 2024-08-09 at 07:32 By Help Net Security The sophistication of cyber threats has escalated dramatically, with malicious actors’ deploying advanced tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection, according to Darktrace. Subscription-based tools such as Malware-as-a-Service (MaaS) and Ransomware-as-a-Service (RaaS) have also lowered the barrier-to-entry

React to this headline:

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals Read More »

Shorter TLS certificate lifespans expected to complicate management efforts

certificate authority, certificates, cybersecurity, News, quantum computing, report, Venafi / SecurityTicks

Shorter TLS certificate lifespans expected to complicate management efforts 2024-08-09 at 07:01 By Help Net Security 76% of security leaders recognize the pressing need to move to shorter certificate lifespans to improve security, according to Venafi. However, many feel unprepared to take action, with 77% saying the shift to 90-day certificates will mean more outages

React to this headline:

Shorter TLS certificate lifespans expected to complicate management efforts Read More »

Where internal audit teams are spending most of their time

AuditBoard, auditing, Compliance, News, report, Risk Management, strategy / SecurityTicks

Where internal audit teams are spending most of their time 2024-08-09 at 06:30 By Help Net Security Over half of key stakeholders including audit committees, company boards, and chief financial officers are looking to internal audit teams to take on more risk-related work, according to AuditBoard. The study revealed that these expanding expectations are coming

React to this headline:

Where internal audit teams are spending most of their time Read More »

Ransomware operators continue to innovate

News, Ransomware, Rapid7, report / SecurityTicks

Ransomware operators continue to innovate 2024-08-08 at 06:01 By Help Net Security Ransomware groups continue to refine their craft, building and scaling business models that resemble legitimate corporate enterprises, according to Rapid7. They market their services to prospective buyers, offer company insiders commissions in exchange for access, and run formal bug bounty programs. In addition,

React to this headline:

Ransomware operators continue to innovate Read More »

Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication

Ransomware, report, Threat Intelligence / SecurityTicks

Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication 2024-08-07 at 16:01 By Kevin Townsend The ransomware scourge is still growing and still successful for attackers, Rapid7’s Ransomware Radar Report 2024 shows. The post Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Ransomware in 2024: More Attacks, More Leaks, and Increased Sophistication Read More »

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware

Don't miss, Finite State, Forescout, hardware, Hot stuff, Internet of Things, News, patching, report, router, survey, vulnerability assessment / SecurityTicks

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware 2024-08-07 at 09:16 By Help Net Security Forescout has published a new report examining the current state of the software supply chain in OT/IoT routers. The study uncovered that OT and IoT cellular routers and those used in small offices and homes contain outdated software components

React to this headline:

OpenWrt dominates, but vulnerabilities persist in OT/IoT router firmware Read More »

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise

cybersecurity, DevOps, DevSecOps, GitHub, GitLab, GitProtect.io, monitoring, News, penetration testing, Ransomware, report, social engineering, vulnerability management / SecurityTicks

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise 2024-08-07 at 06:01 By Help Net Security Outages, human errors, cyberattacks, data breaches, ransomware, security vulnerabilities, and, as a result, data loss are the reality that DevSecOps teams have to face every few days, according to GitProtect.io. DevSecOps The possibility to integrate security

React to this headline:

Number of incidents affecting GitHub, Bitbucket, GitLab, and Jira continues to rise Read More »

Email attacks skyrocket 293%

Acronis, Artificial Intelligence, attacks, cybersecurity, email security, MSP, News, Ransomware, report, social engineering / SecurityTicks

Email attacks skyrocket 293% 2024-08-06 at 06:31 By Help Net Security Email attacks have surged by 293% in the first half of 2024 compared to the same period in 2023, according to Acronis. The number of ransomware detections was also on the rise, increasing 32% from Q4 2023 to Q1 2024. Ransomware remains a top

React to this headline:

Email attacks skyrocket 293% Read More »

AI-fueled phishing scams raise alarm ahead of U.S. presidential election

Bolster, election security, Government, News, phishing, report, scams, spam, threats / SecurityTicks

AI-fueled phishing scams raise alarm ahead of U.S. presidential election 2024-08-06 at 06:01 By Help Net Security Highlighting growth of phishing and digital scams targeting United States citizens, Bolster released a research that identified 24 separate nation-state threat actor groups attempting to exploit rising political tensions across the US to interfere with the 2024 presidential

React to this headline:

AI-fueled phishing scams raise alarm ahead of U.S. presidential election Read More »

AI expected to improve IT/OT network management

Artificial Intelligence, attacks, automation, Cisco, Compliance, cybersecurity, network, News, report / SecurityTicks

AI expected to improve IT/OT network management 2024-08-05 at 06:01 By Help Net Security Once a peripheral concern, OT security has become a mandatory focus for organizations worldwide, according to Cisco’s report. The report provides a comprehensive look at the challenges and opportunities as organizations strive to build a secure and efficient industrial networking foundation.

React to this headline:

AI expected to improve IT/OT network management Read More »

Organizations fail to log 44% of cyber attacks, major exposure gaps remain

access control, cybersecurity, network, News, Picus Security, report, threat / SecurityTicks

Organizations fail to log 44% of cyber attacks, major exposure gaps remain 2024-08-02 at 07:31 By Help Net Security 40% of tested environments allowed attack paths that lead to domain admin access, according to Picus Security. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT

React to this headline:

Organizations fail to log 44% of cyber attacks, major exposure gaps remain Read More »

Record-breaking $75 million ransom paid to cybercrime group

attacks, Barrier Networks, extortion, law enforcement, News, Ransomware, report, zero trust, Zscaler / SecurityTicks

Record-breaking $75 million ransom paid to cybercrime group 2024-08-02 at 07:01 By Help Net Security Ransomware attacks have reached new heights of ambition and audacity over the past year, marked by a notable surge in extortion attacks, according to a Zscaler. The findings from the report uncovered a record-breaking ransom payment of $75 million to

React to this headline:

Record-breaking $75 million ransom paid to cybercrime group Read More »

Airlines are flying blind on third-party risks

cyber risk, cybersecurity, News, report, SecurityScorecard, survey, transportation / SecurityTicks

Airlines are flying blind on third-party risks 2024-08-01 at 06:01 By Help Net Security The aviation industry has traditionally focused on physical security threats, but recent revelations about risks on Boeing‘s supply chain have spotlighted the critical need to measure and mitigate supply chain risk, according to SecurityScorecard. The report comes as regulatory bodies worldwide

React to this headline:

Airlines are flying blind on third-party risks Read More »

Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study

data breach, Data Breaches, Featured, Ransomware, report, Uncategorized / SecurityTicks

Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study 2024-07-31 at 20:16 By Kevin Townsend The average cost of a data breach jumped to $4.88 million from $4.45 million in 2023, a 10% spike. The post Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study appeared first on SecurityWeek.

React to this headline:

Cost of Data Breach in 2024: $4.88 Million, Says Latest IBM Study Read More »

AI, Cybersecurity Top Investment Areas for Industrial Organizations: Cisco

Cisco, ICS, ICS/OT, OT, report / SecurityTicks

AI, Cybersecurity Top Investment Areas for Industrial Organizations: Cisco 2024-07-30 at 17:01 By Eduard Kovacs Cisco has published its inaugural State of Industrial Networking report, based on a survey of 1,000 individuals. The post AI, Cybersecurity Top Investment Areas for Industrial Organizations: Cisco appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

AI, Cybersecurity Top Investment Areas for Industrial Organizations: Cisco Read More »