report - Security Ticks

Breaches are up, budgets are too, so why isn’t healthcare safer?

cyber resilience, cyber risk, cybersecurity, healthcare, News, report, resilience, security ROI, supply chain attacks, supply chain compromise / SecurityTicks

Breaches are up, budgets are too, so why isn’t healthcare safer? 2025-08-11 at 07:11 By Sinisa Markovic A new report from Resilience outlines a growing cyber crisis in the U.S. healthcare sector, where ransomware attacks, vendor compromise, and human error continue to cause widespread disruption. In 2023, breaches exposed 168 million records, and the first […]

React to this headline:

Breaches are up, budgets are too, so why isn’t healthcare safer? Read More »

From fake CAPTCHAs to RATs: Inside 2025’s cyber deception threat trends

cybersecurity, LevelBlue, News, report, social engineering, threats / SecurityTicks

From fake CAPTCHAs to RATs: Inside 2025’s cyber deception threat trends 2025-08-08 at 08:07 By Sinisa Markovic Cybercriminals are getting better at lying. That’s the takeaway from a new LevelBlue report, which outlines how attackers are using social engineering and legitimate tools to quietly move through environments before they’re caught. Data showing at what stage

React to this headline:

From fake CAPTCHAs to RATs: Inside 2025’s cyber deception threat trends Read More »

Fraud controls don’t guarantee consumer trust

Artificial Intelligence, Experian, fraud, generative AI, identity verification, News, report / SecurityTicks

Fraud controls don’t guarantee consumer trust 2025-08-08 at 07:31 By Help Net Security Over a third of companies say they are using AI, including generative AI, to fight fraud, according to Experian. As fraud threats become more complex, companies are accelerating their investments with over half adopting new analytics and building AI models to enhance

React to this headline:

Fraud controls don’t guarantee consumer trust Read More »

AI can write your code, but nearly half of it may be insecure

Artificial Intelligence, cybersecurity, Don't miss, generative AI, LLMs, News, programming, report, Risk Management, Veracode / SecurityTicks

AI can write your code, but nearly half of it may be insecure 2025-08-07 at 09:15 By Help Net Security While GenAI excels at producing functional code, it introduces security vulnerabilities in 45 percent of cases, according to Veracode’s 2025 GenAI Code Security Report, which analyzed code produced by over 100 LLMs across 80 real-world

React to this headline:

AI can write your code, but nearly half of it may be insecure Read More »

Energy companies are blind to thousands of exposed services

critical infrastructure, cybersecurity, Don't miss, energy sector, News, report, SixMap, vulnerability management / SecurityTicks

Energy companies are blind to thousands of exposed services 2025-08-07 at 07:02 By Anamarija Pogorelec Many of America’s largest energy providers are exposed to known and exploitable vulnerabilities, and most security teams may not even see them, according to a new report from SixMap. Researchers assessed the external attack surface of 21 major energy companies,

React to this headline:

Energy companies are blind to thousands of exposed services Read More »

Ransomware is up, zero-days are booming, and your IP camera might be next

attacks, cyber resilience, cyber risk, cybercrime, cybersecurity, Don't miss, Forescout, News, Ransomware, report, threats / SecurityTicks

Ransomware is up, zero-days are booming, and your IP camera might be next 2025-08-06 at 08:47 By Help Net Security Cyber attackers are finding new ways in through the overlooked and unconventional network corners. Forescout’s 2025H1 Threat Review reveals a surge in advanced tactics, with zero-day exploits up 46 percent and ransomware attacks averaging 20

React to this headline:

Ransomware is up, zero-days are booming, and your IP camera might be next Read More »

Why 90% of cyber leaders are feeling the heat

BitSight, burnout, cyber risk, cybersecurity, monitoring, News, report, Risk Management, threat detection / SecurityTicks

Why 90% of cyber leaders are feeling the heat 2025-08-06 at 08:02 By Anamarija Pogorelec 90% of cyber leaders find managing cyber risks harder today than five years ago, mainly due to the explosion of AI and expanding attack surfaces, according to BitSight. These threats are also fueling high rates of burnout, with 47% of

React to this headline:

Why 90% of cyber leaders are feeling the heat Read More »

CISOs say they’re prepared, their data says otherwise

Artificial Intelligence, automation, Axonius, cybersecurity, data security, Don't miss, News, report, vulnerability management / SecurityTicks

CISOs say they’re prepared, their data says otherwise 2025-08-06 at 08:02 By Sinisa Markovic Most security teams believe they can act quickly when a threat emerges. But many don’t trust the very data they rely on to do so, and that’s holding them back. A new Axonius report, based on a survey of 500 U.S.-based

React to this headline:

CISOs say they’re prepared, their data says otherwise Read More »

Your employees uploaded over a gig of files to GenAI tools last quarter

cybersecurity, Data leak, generative AI, Harmonic, News, report / SecurityTicks

Your employees uploaded over a gig of files to GenAI tools last quarter 2025-08-05 at 08:17 By Help Net Security In Q2 2025, Harmonic reviewed 1 million GenAI prompts and 20,000 uploaded files across more than 300 GenAI and AI-powered SaaS apps, and the findings confirm that sensitive data is being exposed through GenAI tools,

React to this headline:

Your employees uploaded over a gig of files to GenAI tools last quarter Read More »

Ransomware groups shift to quadruple extortion to maximize pressure

Akamai, attacks, cybercrime, cybersecurity, extortion, Malware, News, Ransomware, report, threats / SecurityTicks

Ransomware groups shift to quadruple extortion to maximize pressure 2025-08-05 at 07:33 By Help Net Security Threat actors are using a new quadruple extortion tactic in ransomware campaigns, while double extortion remains the most common approach, according to Akamai. Ransomware extortion tactics (Source: Akamai) The emerging trend of quadruple extortion includes using DDoS attacks to

React to this headline:

Ransomware groups shift to quadruple extortion to maximize pressure Read More »

Average global data breach cost now $4.44 million

Artificial Intelligence, CISO, cybersecurity, data breach, Don't miss, Hot stuff, IBM, News, report, survey / SecurityTicks

Average global data breach cost now $4.44 million 2025-08-04 at 08:37 By Anamarija Pogorelec IBM released its Cost of a Data Breach Report, which revealed AI adoption is greatly outpacing AI security and governance. While the overall number of organizations experiencing an AI-related breach is a small representation of the researched population, this is the

React to this headline:

Average global data breach cost now $4.44 million Read More »

The surprising truth about identity security confidence

BeyondID, CISO, identity, News, Non Human Identities, report, security practices, survey / SecurityTicks

The surprising truth about identity security confidence 2025-08-04 at 07:42 By Help Net Security Organizations most confident in their identity security are often the least prepared, according to a new report from BeyondID. The study reveals a troubling gap between what organizations believe about their identity security programs and how they actually behave. Surprisingly, those

React to this headline:

The surprising truth about identity security confidence Read More »

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts

Compliance, CXO, cyber risk, enterprise, Gartner, News, report, Risk Management, supply chain / SecurityTicks

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts 2025-08-04 at 07:10 By Sinisa Markovic Enterprise risk leaders are most concerned about rising tariffs and trade tensions heading into the second half of 2025, according to a new report from Gartner. The firm’s second-quarter Emerging Risk Report, based on a survey of

React to this headline:

What’s keeping risk leaders up at night? AI, tariffs, and cost cuts Read More »

Security gaps still haunt shared mobile device use in healthcare

BYOD, cybersecurity, healthcare, Imprivata, mobile devices, News, Privacy, report, security ROI / SecurityTicks

Security gaps still haunt shared mobile device use in healthcare 2025-08-01 at 07:33 By Sinisa Markovic Shared mobile devices are becoming the standard in hospitals and health systems. While they offer cost savings and workflow improvements, many organizations are still struggling to manage the security risks that come with them, according to Imprivata’s 2025 State

React to this headline:

Security gaps still haunt shared mobile device use in healthcare Read More »

AI is changing the vCISO game

CISO, cybersecurity, Cynomi, Don't miss, News, report, risk assessment, SMBs, strategy, survey / SecurityTicks

AI is changing the vCISO game 2025-07-31 at 08:02 By Anamarija Pogorelec Virtual CISO (vCISO) services have moved from niche to mainstream, with vCISO services adoption 2025 data showing a more than threefold increase in just one year. According to Cynomi’s 2025 State of the Virtual CISO report, 67% of MSPs and MSSPs now offer

React to this headline:

AI is changing the vCISO game Read More »

Secrets are leaking everywhere, and bots are to blame

bot, cybersecurity, Data leak, enterprise, Entro, News, Non Human Identities, report / SecurityTicks

Secrets are leaking everywhere, and bots are to blame 2025-07-31 at 07:30 By Anamarija Pogorelec Secrets like API keys, tokens, and credentials are scattered across messaging apps, spreadsheets, CI/CD logs, and even support tickets. According to Entro Security’s NHI & Secrets Risk Report H1 2025, non-human identities (NHIs), including bots, service accounts, and automation tools,

React to this headline:

Secrets are leaking everywhere, and bots are to blame Read More »

Why rural hospitals are losing the cybersecurity battle

Compliance, cybersecurity, healthcare, HIPAA, legacy technology, News, Paubox, report, survey / SecurityTicks

Why rural hospitals are losing the cybersecurity battle 2025-07-31 at 07:04 By Anamarija Pogorelec Cyber threats are becoming more frequent and sophisticated, and rural hospitals and clinics are feeling the pressure from all sides: tight budgets, small teams, limited training, complex technology, and vendors that do not always offer much help. Often, they are left

React to this headline:

Why rural hospitals are losing the cybersecurity battle Read More »

Why CISOs should rethink identity risk through attack paths

Black Hat USA 2025, CISO, cybersecurity, Don't miss, News, Non Human Identities, report, SpecterOps, strategy, survey, tips / SecurityTicks

Why CISOs should rethink identity risk through attack paths 2025-07-30 at 08:00 By Sinisa Markovic Identity-based attack paths are behind most breaches today, yet many organizations can’t actually see how those paths form. The 2025 State of Attack Path Management report from SpecterOps makes the case that traditional tools like identity governance, PAM, and MFA

React to this headline:

Why CISOs should rethink identity risk through attack paths Read More »

AI is here, security still isn’t

Black Hat USA 2025, News, Non Human Identities, report, SandboxAQ, survey / SecurityTicks

AI is here, security still isn’t 2025-07-30 at 07:30 By Sinisa Markovic Although 79% of organizations are already running AI in production, only 6% have put in place a comprehensive security strategy designed specifically for AI. As a result, most enterprises remain exposed to threats they are not yet prepared to detect or respond to,

React to this headline:

AI is here, security still isn’t Read More »

Boards shift focus to tech and navigate cautious investors

business continuity, CXO, enterprise, generative AI, News, regulation, report, strategy / SecurityTicks

Boards shift focus to tech and navigate cautious investors 2025-07-30 at 07:00 By Anamarija Pogorelec Corporate boards are adjusting to a more uncertain proxy landscape, according to EY’s 2025 Proxy Season Review. The report highlights four key 2025 proxy season trends shaping governance this year: more oversight of technology, fewer shareholder proposals (especially on sustainability),

React to this headline:

Boards shift focus to tech and navigate cautious investors Read More »