report - Security Ticks

Overreliance on GenAI to develop software compromises security

automation, generative AI, Legit Security, News, report, software development, survey / SecurityTicks

Overreliance on GenAI to develop software compromises security 2024-11-20 at 06:07 By Help Net Security GenAI is quickly changing the software development process by automating tasks that once took developers hours, if not days, to complete, bolstering efficiency and productivity, according to Legit Security. “As GenAI transforms software development and becomes increasingly embedded in the […]

React to this headline:

Overreliance on GenAI to develop software compromises security Read More »

Google report shows CISOs must embrace change to stay secure

CISO, cybersecurity, Don't miss, Google, Hot stuff, News, report, survey, tips / SecurityTicks

Google report shows CISOs must embrace change to stay secure 2024-11-19 at 06:03 By Mirko Zorz Google’s latest report, conducted in partnership with Hypothesis Group, reveals a stark reality for organizations: incremental security measures are no longer sufficient. The study, involving over 2,000 decision-makers across the US, UK, India, and Brazil, paints a picture of

React to this headline:

Google report shows CISOs must embrace change to stay secure Read More »

Major security audit of critical FreeBSD components now available

FreeBSD Foundation, News, report / SecurityTicks

Major security audit of critical FreeBSD components now available 2024-11-18 at 17:33 By Mirko Zorz The FreeBSD Foundation, in partnership with the Alpha-Omega Project, has released the results of an extensive security audit of two critical FreeBSD components: the bhyve hypervisor and the Capsicum sandboxing framework. The audit, conducted by the offensive security firm Synacktiv,

React to this headline:

Major security audit of critical FreeBSD components now available Read More »

Cybercriminals hijack DNS to build stealth attack networks

attacks, cybercrime, DNS, hijacking, Infoblox, News, report / SecurityTicks

Cybercriminals hijack DNS to build stealth attack networks 2024-11-15 at 16:05 By Help Net Security Hijacking domains using a ‘Sitting Ducks attack’ remains an underrecognized topic in the cybersecurity community. Few threat researchers are familiar with this attack vector, and knowledge is scarce. However, the prevalence of these attacks and the risk to organizations are

React to this headline:

Cybercriminals hijack DNS to build stealth attack networks Read More »

Critical vulnerabilities persist in high-risk sectors

Application Security, Black Duck, News, report, software, survey, vulnerability assessment / SecurityTicks

Critical vulnerabilities persist in high-risk sectors 2024-11-15 at 06:38 By Help Net Security Finance and insurance sectors found to have the highest number of critical vulnerabilities, according to Black Duck. Finance and insurance industry faces highest vulnerabilities The report, which analyzes data from over 200,000 dynamic application security testing (DAST) scans conducted by Black Duck

React to this headline:

Critical vulnerabilities persist in high-risk sectors Read More »

NIST report on hardware security risks reveals 98 failure scenarios

News, NIST, report / SecurityTicks

NIST report on hardware security risks reveals 98 failure scenarios 2024-11-15 at 05:33 By Mirko Zorz NIST’s latest report, “Hardware Security Failure Scenarios: Potential Hardware Weaknesses” (NIST IR 8517), explores the hidden vulnerabilities in computer hardware, a domain often considered more secure than software. The report highlights how hardware flaws embedded in chip designs can

React to this headline:

NIST report on hardware security risks reveals 98 failure scenarios Read More »

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage

Artificial Intelligence, cloud security, cybersecurity, Google, Google Cloud, News, predictions, report / SecurityTicks

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage 2024-11-14 at 08:04 By Anamarija Pogorelec Google Cloud unveiled its Cybersecurity Forecast for 2025, offering a detailed analysis of the emerging threat landscape and key security trends that organizations worldwide should prepare for. The report delivers insights into the tactics of cyber adversaries,

React to this headline:

Google Cloud Cybersecurity Forecast 2025: AI, geopolitics, and cybercrime take centre stage Read More »

Zero-days dominate top frequently exploited vulnerabilities

0-day, CISA, Don't miss, FBI, Hot stuff, NCSC, News, NSA, report, Tenable, vulnerability / SecurityTicks

Zero-days dominate top frequently exploited vulnerabilities 2024-11-14 at 07:03 By Mirko Zorz A joint report by leading cybersecurity agencies from the U.S., UK, Canada, Australia, and New Zealand has identified the most commonly exploited vulnerabilities of 2023. Zero-day vulnerabilities on the rise The advisory highlights that malicious cyber actors increasingly targeted zero-day vulnerabilities, posing significant

React to this headline:

Zero-days dominate top frequently exploited vulnerabilities Read More »

How cybersecurity failures are draining business budgets

CISO, cybersecurity, Insurance, News, Panaseer, report, survey / SecurityTicks

How cybersecurity failures are draining business budgets 2024-11-14 at 06:10 By Help Net Security Security leaders feel under increasing pressure to provide assurances around cybersecurity, exposing them to greater personal risk – yet many lack the data and resources to accurately report and close cybersecurity gaps, according to Panaseer. The report analyses the findings of

React to this headline:

How cybersecurity failures are draining business budgets Read More »

Social engineering scams sweep through financial institutions

BioCatch, cybercrime, financial industry, fraud, News, report, social engineering, survey / SecurityTicks

Social engineering scams sweep through financial institutions 2024-11-13 at 06:04 By Help Net Security North American financial institutions fielded 10 times more reports of social engineering scams in 2024 than they did a year ago, according to BioCatch. The data shows scams now represent 23% of all digital banking fraud. Growing danger of deepfake and

React to this headline:

Social engineering scams sweep through financial institutions Read More »

How human ingenuity continues to outpace automated security tools

Artificial Intelligence, cyber risk, cybersecurity, HackerOne, News, report, survey / SecurityTicks

How human ingenuity continues to outpace automated security tools 2024-11-11 at 06:04 By Industry News 10% of security researchers now specialize in AI technology as 48% of security leaders consider AI to be one of the greatest risks to their organizations, according to HackerOne. HackerOne’s report combines perspectives from the researcher community, customers, and security

React to this headline:

How human ingenuity continues to outpace automated security tools Read More »

Identity-related data breaches cost more than average incidents

cybersecurity, data breach, identity, News, report, RSA, survey / SecurityTicks

Identity-related data breaches cost more than average incidents 2024-11-06 at 06:01 By Help Net Security Identity-related data breaches are more severe and costly than run-of-the-mill incidents, according to RSA. 40% of respondents reported an identity-related security breach. Of those, 66% reported it as a severe event that affected their organization. 44% estimated that the total

React to this headline:

AI learning mechanisms may lead to increase in codebase leaks

Application Security, code, CyberArk, cybersecurity, digital transformation, GitGuardian, News, report, survey / SecurityTicks

AI learning mechanisms may lead to increase in codebase leaks 2024-11-05 at 06:03 By Help Net Security The proliferation of non-human identities and the complexity of modern application architectures has created significant security challenges, particularly in managing sensitive credentials, according to GitGuardian. Based on a survey of 1,000 IT decision-makers in organizations with over 500

React to this headline:

AI learning mechanisms may lead to increase in codebase leaks Read More »

Strong privacy laws boost confidence in sharing information with AI

Cisco, cybersecurity, Data Protection, News, Privacy, report, survey / SecurityTicks

Strong privacy laws boost confidence in sharing information with AI 2024-11-04 at 06:03 By Help Net Security 53% of consumers report being aware of their national privacy laws, a 17-percentage point increase compared to 2019, according to Cisco. Informed consumers are also much more likely to feel their data is protected (81%) compared to those

React to this headline:

Strong privacy laws boost confidence in sharing information with AI Read More »

50% of financial orgs have high-severity security flaws in their apps

Application Security, code, cybersecurity, News, report, software, survey, Veracode / SecurityTicks

50% of financial orgs have high-severity security flaws in their apps 2024-11-01 at 08:03 By Help Net Security Security debt, defined for this report as flaws that remain unfixed for longer than a year, exists in 76% of organizations in the financial services sector, with 50% of organizations carrying critical security debt, according to Veracode.

React to this headline:

50% of financial orgs have high-severity security flaws in their apps Read More »

Sophos mounted counter-offensive operation to foil Chinese attackers

cyber espionage, cybercrime, Malware, News, report, Sophos, survey / SecurityTicks

Sophos mounted counter-offensive operation to foil Chinese attackers 2024-10-31 at 16:04 By Help Net Security Sophos conducted defensive and counter-offensive operation over the last five years with multiple interlinked nation-state adversaries based in China targeting perimeter devices, including Sophos Firewalls. Espionage campaigns tied to Chinese hacking groups The attackers used a series of campaigns with

React to this headline:

Sophos mounted counter-offensive operation to foil Chinese attackers Read More »

99% of CISOs work extra hours every week

CISO, cybercrime, cybersecurity, DirectDefense, News, report, survey / SecurityTicks

99% of CISOs work extra hours every week 2024-10-31 at 06:06 By Help Net Security The most common challenge for CISOs is resource constraints: not enough staff, budget or technology to support the security program needed or meet compliance requirements, according to DirectDefense. Cybersecurity industry faces ongoing talent shortage The World Economic Forum claims there’s

React to this headline:

99% of CISOs work extra hours every week Read More »

6 key elements for building a healthcare cybersecurity response plan

cyber risk, healthcare, Incident Response, News, Ransomware, report, risk assessment, Software Advice, strategy, survey / SecurityTicks

6 key elements for building a healthcare cybersecurity response plan 2024-10-30 at 06:33 By Help Net Security Medical practices remain vulnerable to cyberattacks, with over a third unable to cite a cybersecurity incident response plan, according to Software Advice. This gap exposes healthcare providers to risks of patient data breaches, HIPAA violations, financial penalties, and

React to this headline:

6 key elements for building a healthcare cybersecurity response plan Read More »

Trust and risk in the AI era

Artificial Intelligence, automation, cybersecurity, News, report, survey, Vanta / SecurityTicks

Trust and risk in the AI era 2024-10-29 at 06:07 By Help Net Security 55% of organizations say the security risks for their business have never been higher, according to Vanta. Yet the average company only dedicates 11% of its IT budget to security — far from the ideal allocation of 17%, according to business

React to this headline:

Trust and risk in the AI era Read More »

Fraudsters revive old tactics mixed with modern technology

cybercrime, cybersecurity, fraud, News, report, scams, survey, Visa / SecurityTicks

Fraudsters revive old tactics mixed with modern technology 2024-10-28 at 07:04 By Help Net Security Threat actors continue to probe the payments ecosystem for vulnerabilities and were successful in conducting fraud schemes affecting multiple financial institutions, technologies, and processes, according to Visa. The resurgence of physical theft Scammers are going back to basics with an

React to this headline:

Fraudsters revive old tactics mixed with modern technology Read More »