report - Security Ticks

Phishing campaigns thrive as evasive tactics outsmart conventional detection

cybercrime, cybercriminals, data, Email, Group-IB, News, phishing, report, scams / SecurityTicks

Phishing campaigns thrive as evasive tactics outsmart conventional detection 01/06/2023 at 06:21 By Help Net Security A 25% increase in the use of phishing kits has been recorded in 2022, according to Group-IB. The key phishing trends observed are the increasing use of access control and advanced detection evasion techniques. The rise in evasive tactics, […]

React to this headline:

Phishing campaigns thrive as evasive tactics outsmart conventional detection Read More »

Organizations are placing OT cybersecurity responsibility on CISOs

CISO, critical infrastructure, cybersecurity, Fortinet, News, report / SecurityTicks

Organizations are placing OT cybersecurity responsibility on CISOs 31/05/2023 at 06:35 By Help Net Security Protecting operational technology (OT) systems is now more critical than ever as more organizations connect their OT environments to the internet, according to Fortinet. Although IT/OT convergence has many benefits, it is being hampered and handicapped by advanced and destructive

React to this headline:

Organizations are placing OT cybersecurity responsibility on CISOs Read More »

Generative AI: The new attack vector for trust and safety

ActiveFence, Artificial Intelligence, dark web, deepfake, exploit, News, report / SecurityTicks

Generative AI: The new attack vector for trust and safety 30/05/2023 at 06:46 By Help Net Security Threat actors are abusing generative AI to carry out child sex abuse material (CSAM), disinformation, fraud and extremism, according to ActiveFence. “The explosion of generative AI has far-reaching implications for all corners of the internet,” said Noam Schwartz,

React to this headline:

Generative AI: The new attack vector for trust and safety Read More »

Threat actors exploit new channels for advanced phishing attacks

Artificial Intelligence, attacks, BEC scams, browser, Cloud, cloud storage, cybercriminals, Email, Employees, machine learning, News, Perception Point, phishing, report, scams, social engineering / SecurityTicks

Threat actors exploit new channels for advanced phishing attacks 26/05/2023 at 07:36 By Help Net Security Perception Point’s team has identified a 356% increase in the number of advanced phishing attacks attempted by threat actors in 2022. Overall, the total number of attacks increased by 87%, highlighting the growing threat that cyber attacks now pose

React to this headline:

Threat actors exploit new channels for advanced phishing attacks Read More »

Fresh perspectives needed to manage growing vulnerabilities

Cloud, NetSPI, News, NIST, penetration testing, remediation, report, vulnerability / SecurityTicks

Fresh perspectives needed to manage growing vulnerabilities 26/05/2023 at 06:03 By Help Net Security In its inaugural 2023 Offensive Security Vision Report, NetSPI unveils findings that highlight vulnerability trends across applications, cloud, and networks. Vulnerability patterns The report offers a look back — and forward — at some of the most significant vulnerability patterns of

React to this headline:

Fresh perspectives needed to manage growing vulnerabilities Read More »

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

ICS/OT, OT, report / SecurityTicks

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations 25/05/2023 at 14:05 By Eduard Kovacs Fortinet’s 2023 State of Operational Technology and Cybersecurity Report shows a drop in the number of breaches and CISOs being increasingly responsible for OT cybersecurity. The post Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations

React to this headline:

Drop in Insider Breaches Drives Decline in Intrusions at OT Organizations Read More »

Realistic simulations are transforming cybersecurity training

cybersecurity, Industry news, Ponemon Institute, report, Security Innovation, skill development, training / SecurityTicks

Realistic simulations are transforming cybersecurity training 25/05/2023 at 07:15 By Help Net Security To achieve a diverse and well-trained cybersecurity workforce, organizations recognize the value of a quality training program supported by the pursuit of cybersecurity certifications, according to Security Innovation and Ponemon Institute. The report revealed a growing embrace of realistic simulations in training

React to this headline:

Realistic simulations are transforming cybersecurity training Read More »

12 vulnerabilities newly associated with ransomware

Cyware, dark web, exploit, Ivanti, News, Ransomware, report, Securin, vulnerability / SecurityTicks

12 vulnerabilities newly associated with ransomware 25/05/2023 at 06:04 By Help Net Security In March 2023, the total number of breaches reported was higher than those reported in the previous three years combined, according to Ivanti. Ransomware groups are continuously weaponizing vulnerabilities and adding them to their arsenal to mount crippling and disruptive attacks on

React to this headline:

12 vulnerabilities newly associated with ransomware Read More »

Inadequate tools leave AppSec fighting an uphill battle for cloud security

Application Security, Backslash Security, cloud security, cybersecurity, News, report, vulnerability management / SecurityTicks

Inadequate tools leave AppSec fighting an uphill battle for cloud security 19/05/2023 at 06:32 By Help Net Security AppSec teams are stuck in a catch-up cycle, unable to keep up with the increasingly rapid, agile dev pace, and playing security defense via an endless and unproductive vulnerability chase, according to Backslash Security. Costly ‘defensive tax’

React to this headline:

Inadequate tools leave AppSec fighting an uphill battle for cloud security Read More »

Europe: The DDoS battlefield

Arelion, attacks, cybercriminals, DDoS, News, report / SecurityTicks

Europe: The DDoS battlefield 19/05/2023 at 06:07 By Help Net Security DDoS attacks appear to reflect major geo-political challenges and social tensions and have become an increasingly significant part in the hybrid warfare arsenal, according to Arelion. As the Ukrainian authorities sought a safe harbour for digital state registries and databases, Arelion saw the distribution

React to this headline:

Europe: The DDoS battlefield Read More »

Identity crimes: Too many victims, limited resources

data, identity, identity theft, Identity Theft Resource Center, News, report, social engineering / SecurityTicks

Identity crimes: Too many victims, limited resources 18/05/2023 at 08:00 By Help Net Security The Identity Theft Resource Center (ITRC) has documented incidents of identity theft reported during 2022 and the first quarter of 2023, highlighting the use of strategies by criminals to convince people to willingly share protected information. The number of reported identity

React to this headline:

Identity crimes: Too many victims, limited resources Read More »

Organizations’ cyber resilience efforts fail to keep up with evolving threats

CISO, cyber resilience, cyber risk, cyberattacks, cybersecurity, Immersive Labs, News, report, Risk Management / SecurityTicks

Organizations’ cyber resilience efforts fail to keep up with evolving threats 18/05/2023 at 08:00 By Help Net Security A steady increase in cyberattacks and evolving threat landscape are resulting in more organizations turning their attention to building long-term cyber resilience; however, many of these programs are falling short and fail to prove teams’ real-world cyber

React to this headline:

Organizations’ cyber resilience efforts fail to keep up with evolving threats Read More »

Attack automation becomes a prevalent threat against APIs

API security, attacks, Cequence Security, CISO, News, report / SecurityTicks

Attack automation becomes a prevalent threat against APIs 16/05/2023 at 16:09 By Help Net Security The second half of 2022 marked a significant turning point in the security landscape. In several high-profile incidents, application programming interfaces (APIs) emerged as a primary attack vector, posing a new and significant threat to organizations’ security posture, according to

React to this headline:

Attack automation becomes a prevalent threat against APIs Read More »

Bad bots are coming for APIs

Artificial Intelligence, attacks, automation, bot, credentials, cybercriminals, data theft, Imperva, News, report, spam / SecurityTicks

Bad bots are coming for APIs 15/05/2023 at 06:16 By Help Net Security In 2022, 47.4% of all internet traffic came from bots, a 5.1% increase over the previous year, according to Imperva. The proportion of human traffic (52.6%) decreased to its lowest level in eight years. Bad bot traffic For the fourth consecutive year,

React to this headline:

Bad bots are coming for APIs Read More »

Fraud victims risk more than money

cybercrime, fraud, News, Privacy, report, scams, social media, TeleSign / SecurityTicks

Fraud victims risk more than money 12/05/2023 at 06:30 By Help Net Security Digital fraud has significant financial and psychological repercussions on victims, according to Telesign. Businesses may find a new reason to fear digital fraud as the negative impacts of digital fraud on companies’ brand perception and the bottom line. Trust in digital world

React to this headline:

Fraud victims risk more than money Read More »

CISOs’ confidence in post-pandemic security landscape fades

CISO, cybersecurity, data, News, Proofpoint, report / SecurityTicks

CISOs’ confidence in post-pandemic security landscape fades 12/05/2023 at 06:00 By Help Net Security Most CISOs have returned to the elevated concerns they experienced early in the pandemic, according to Proofpoint. Elevated concerns among CISOs Globally, 68% of surveyed CISOs feel at risk of a material cyber attack, compared to 48% the year before, when

React to this headline:

CISOs’ confidence in post-pandemic security landscape fades Read More »

Refined methodologies of ransomware attacks

attacks, credentials, data, Encryption, News, Ransomware, report, Sophos / SecurityTicks

Refined methodologies of ransomware attacks 11/05/2023 at 06:34 By Help Net Security Adversaries were able to encrypt data in 76% of the ransomware attacks that were conducted against surveyed organizations, according to Sophos. The survey also shows that when organizations paid a ransom to get their data decrypted, they ended up additionally doubling their recovery

React to this headline:

Refined methodologies of ransomware attacks Read More »

Company executives can’t afford to ignore cybersecurity anymore

CISO, cybersecurity, Delinea, News, report, security metrics / SecurityTicks

Company executives can’t afford to ignore cybersecurity anymore 10/05/2023 at 06:00 By Help Net Security Asked about the Board and C-Suite‘s understanding of cybersecurity across the organisation, only 39% of respondents think their company’s leadership has a sound understanding of cybersecurity’s role as a business enabler, according to Delinea. The high cost of ignoring security

React to this headline:

Company executives can’t afford to ignore cybersecurity anymore Read More »

Digital trust can make or break an organization

digital transformation, ISACA, News, report / SecurityTicks

Digital trust can make or break an organization 09/05/2023 at 12:12 By Help Net Security With increased data breaches, errors, ransomware and hacks, digital trust can be the difference between retaining reputations and customer loyalty after a major incident and suffering serious, time-consuming, and expensive losses, according to ISACA. From digital trust to business success

React to this headline:

Digital trust can make or break an organization Read More »

Consumer skepticism is the biggest barrier to AI-driven personalization

Artificial Intelligence, data, News, report, Twilio / SecurityTicks

Consumer skepticism is the biggest barrier to AI-driven personalization 08/05/2023 at 08:09 By Help Net Security Businesses worldwide are eagerly embracing the potential for AI to provide personalized customer experiences, but customers remain cynical, according to Twilio. This year’s report underscores the value of an AI-driven personalization strategy for brands looking to both retain existing

React to this headline:

Consumer skepticism is the biggest barrier to AI-driven personalization Read More »