strategy - Security Ticks

Employees are using AI where they know they shouldn’t

Artificial Intelligence, GoTo, News, report, strategy, survey / SecurityTicks

Employees are using AI where they know they shouldn’t 2025-06-18 at 07:06 By Help Net Security Despite widespread anticipation about AI’s positive impact on workforce productivity, most employees feel they were overpromised on its potential, according to GoTo. In fact, 62% believe AI has been significantly overhyped. However, this is likely because employees aren’t making […]

React to this headline:

Employees are using AI where they know they shouldn’t Read More »

Hackers love events. Why aren’t more CISOs paying attention?

BforeAI, CISO, conferences, CXO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Span, strategy, tips / SecurityTicks

Hackers love events. Why aren’t more CISOs paying attention? 2025-06-17 at 09:04 By Mirko Zorz When CISOs think about risk, they usually think about cloud platforms, laptops, and data centers. But live events like conferences, trade shows, product launches, and shareholder meetings bring a different kind of cybersecurity exposure. These events gather people, devices, and

React to this headline:

Hackers love events. Why aren’t more CISOs paying attention? Read More »

CISOs brace for a surge in domain-based cyber threats

CISO, CSC, cybersecurity, News, report, strategy, tips / SecurityTicks

CISOs brace for a surge in domain-based cyber threats 2025-06-17 at 07:32 By Mirko Zorz Cybersecurity threats are growing more complex, and domain-based attacks are at the center of this shift. CSC’s CISO Outlook 2025 report, based on a survey of 300 security leaders, reveals a rising sense of urgency as organizations confront both established

React to this headline:

CISOs brace for a surge in domain-based cyber threats Read More »

Why banks’ tech-first approach leaves governance gaps

Banks, CIO, CISO, Compliance, CXO, cybersecurity, Don't miss, Features, financial industry, Hot stuff, Live Oak Bank, News, opinion, regulation, Risk Management, security metrics, strategy / SecurityTicks

Why banks’ tech-first approach leaves governance gaps 2025-06-16 at 09:06 By Mirko Zorz In this Help Net Security interview, Rich Friedberg, CISO at Live Oak Bank, discusses how banks can better align cybersecurity efforts with broader cyber governance and risk priorities. Banking institutions often falter when cybersecurity is siloed as purely a technical or compliance

React to this headline:

Why banks’ tech-first approach leaves governance gaps Read More »

Why CISOs need to understand the AI tech stack

Artificial Intelligence, CISO, Data Protection, Don't miss, News, regulation, report, strategy, tips / SecurityTicks

Why CISOs need to understand the AI tech stack 2025-06-16 at 07:01 By Mirko Zorz As AI spreads, so do the risks. Security leaders are being asked to protect systems they don’t fully understand yet, and that’s a problem. A new report from the Paladin Global Institute, The AI Tech Stack: A Primer for Tech

React to this headline:

Why CISOs need to understand the AI tech stack Read More »

19 ways to build zero trust: NIST offers practical implementation guide

AppOmni, cybersecurity, News, NIST, strategy, tips, zero trust / SecurityTicks

19 ways to build zero trust: NIST offers practical implementation guide 2025-06-13 at 07:32 By Sinisa Markovic The National Institute of Standards and Technology (NIST) has released a new guide that offers practical help for building zero trust architectures (ZTA). The guidance, titled Implementing a Zero Trust Architecture (SP 1800‑35), includes 19 example setups using

React to this headline:

19 ways to build zero trust: NIST offers practical implementation guide Read More »

Want fewer security fires to fight? Start with threat modeling

CISO, cyber resilience, cybersecurity, Cymulate, Don't miss, Features, Hot stuff, News, Risk Management, security ROI, Silent Push, SpecterOps, strategy, threat modeling, tips / SecurityTicks

Want fewer security fires to fight? Start with threat modeling 2025-06-12 at 09:01 By Mirko Zorz CISOs understand that threat modeling helps teams identify risks early and build safer systems. But outside the security org, the value isn’t always clear. When competing for budget or board attention, threat modeling often loses out to more visible

React to this headline:

Want fewer security fires to fight? Start with threat modeling Read More »

CISOs call for operational threat intelligence integration

CISO, cybersecurity, News, report, strategy, Threat Intelligence, Trellix / SecurityTicks

CISOs call for operational threat intelligence integration 2025-06-12 at 08:05 By Help Net Security 98% of CISOs face challenges when using threat intelligence, according to Trellix. The biggest problems are keeping up with changing threats, integration difficulties, and regulatory rules. As a result, threat intelligence defaults to a reactive function within a workstream, rather than

React to this headline:

CISOs call for operational threat intelligence integration Read More »

The path to better cybersecurity isn’t more data, it’s less noise

Artificial Intelligence, cybersecurity, data, Don't miss, News, SOC, strategy, tips / SecurityTicks

The path to better cybersecurity isn’t more data, it’s less noise 2025-06-11 at 08:31 By Sinisa Markovic In cybersecurity, there’s an urge to collect as much data as possible. Logs, alerts, metrics, everything. But more data doesn’t necessarily translate to better security. SOCs deal with tens of thousands of alerts every day. It’s more than

React to this headline:

The path to better cybersecurity isn’t more data, it’s less noise Read More »

How to build AI into your business without breaking compliance

Artificial Intelligence, automation, CISO, Cloud Security Alliance, cybersecurity, Don't miss, News, strategy, tips / SecurityTicks

How to build AI into your business without breaking compliance 2025-06-11 at 08:02 By Mirko Zorz AI is supposed to make businesses faster, smarter, and more competitive, but most projects fall short. The Cloud Security Alliance (CSA) says the real issue is companies cramming AI into old, rigid processes that just can’t keep up. “AI

React to this headline:

How to build AI into your business without breaking compliance Read More »

The legal questions to ask when your systems go dark

CISO, conferences, cybersecurity, Don't miss, Features, Hot stuff, Incident Response, law, law firms, News, regulation, Span, strategy / SecurityTicks

The legal questions to ask when your systems go dark 2025-06-10 at 09:16 By Mirko Zorz At Span Cyber Security Arena, I sat down with Iva Mišković, Partner at the ISO-certified Mišković & Mišković law firm, to discuss the role of legal teams during cyber incidents. She shared why lawyers should assume the worst, coordinate

React to this headline:

The legal questions to ask when your systems go dark Read More »

Securing agentic AI systems before they go rogue

Artificial Intelligence, CISO, cybersecurity, Don't miss, HiddenLayer, Hot stuff, LLM, News, strategy, tips, Video / SecurityTicks

Securing agentic AI systems before they go rogue 2025-06-10 at 08:24 By Help Net Security In this Help Net Security video, Eoin Wickens, Director of Threat Intelligence at HiddenLayer, explores the security risks posed by agentic AI. He breaks down how agentic AI functions, its potential to revolutionize business operations, and the vulnerabilities it introduces,

React to this headline:

Securing agentic AI systems before they go rogue Read More »

CISOs, are you ready for cyber threats in biotech?

CISO, cybersecurity, Don't miss, Features, Hot stuff, how-to, News, strategy, tips / SecurityTicks

CISOs, are you ready for cyber threats in biotech? 2025-06-09 at 08:35 By Mirko Zorz The threat landscape in the bioeconomy is different from what most CISOs are used to. It includes traditional risks like data breaches, but the consequences are more complex. A compromise of genomic databases, for example, does not just expose personal

React to this headline:

CISOs, are you ready for cyber threats in biotech? Read More »

Why SAP security updates are a struggle for large enterprises

CISO, cybersecurity, Don't miss, how-to, News, Pathlock, SAP, security update, strategy, tips, Video / SecurityTicks

Why SAP security updates are a struggle for large enterprises 2025-06-05 at 07:33 By Help Net Security In this Help Net Security video, Jonathan Stross, SAP Security Analyst at Pathlock, examines why managing SAP security updates is so complex for enterprises. From highly customized, interconnected environments to the pressure of real-time patching, Strauss highlights why

React to this headline:

Why SAP security updates are a struggle for large enterprises Read More »

Rethinking governance in a decentralized identity world

Allegro Solutions, CISO, cybersecurity, Don't miss, Features, Hot stuff, LogicGate, News, SSO, strategy, tips / SecurityTicks

Rethinking governance in a decentralized identity world 2025-06-04 at 07:36 By Mirko Zorz Decentralized identity (DID) is gaining traction, and for CISOs, it’s becoming a part of long-term planning around data protection, privacy, and control. As more organizations experiment with verifiable credentials and self-sovereign identity models, a question emerges: Who governs the system when no

React to this headline:

Rethinking governance in a decentralized identity world Read More »

Development vs. security: The friction threatening your code

Application Security, cybersecurity, DevSecOps, Endor Labs, GitLab, News, software, Sonatype, strategy / SecurityTicks

Development vs. security: The friction threatening your code 2025-06-03 at 07:32 By Sinisa Markovic Developers are driven to deliver new features quickly, while security teams prioritize risk mitigation, which often puts the two at odds. 61% of developers said that it’s critical that security doesn’t block or decelerate the development process or become a barrier

React to this headline:

Development vs. security: The friction threatening your code Read More »

CISO 3.0: Leading AI governance and security in the boardroom

Artificial Intelligence, boardroom, CDW, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, Risk Management, strategy, tips, training / SecurityTicks

CISO 3.0: Leading AI governance and security in the boardroom 2025-06-02 at 08:50 By Mirko Zorz In this Help Net Security interview, Aaron McCray, Field CISO at CDW, discusses how AI is transforming the CISO role from a tactical cybersecurity guardian into a strategic enterprise risk advisor. With AI now embedded across business functions, CISOs

React to this headline:

CISO 3.0: Leading AI governance and security in the boardroom Read More »

Security awareness training isn’t stopping breaches. Can AI help?

Abnormal AI, Don't miss, how-to, human error, News, security awareness, skill development, strategy, tips, training, Video / SecurityTicks

Security awareness training isn’t stopping breaches. Can AI help? 2025-06-02 at 07:31 By Help Net Security In this Help Net Security video, Mick Leach, Field CISO at Abnormal AI, explores why security awareness training (SAT) is failing to reduce human error, the top cause of cybersecurity incidents. He discusses how AI can transform SAT into

React to this headline:

Security awareness training isn’t stopping breaches. Can AI help? Read More »

Using AI to outsmart AI-driven phishing scams

Artificial Intelligence, CISO, cybercrime, News, phishing, strategy / SecurityTicks

Using AI to outsmart AI-driven phishing scams 2025-05-30 at 08:32 By Sinisa Markovic Phishing scams used to be filled with awkward wording and obvious grammar mistakes. Not anymore. AI is now making it harder to distinguish what is real. According to Cofense, email-based scams surged 70% year over year, driven by AI’s ability to automate

React to this headline:

Using AI to outsmart AI-driven phishing scams Read More »

Exchange 2016, 2019 support ends soon: What IT should do to stay secure

Compliance, Exchange, Microsoft, News, software, strategy, tips / SecurityTicks

Exchange 2016, 2019 support ends soon: What IT should do to stay secure 2025-05-30 at 07:33 By Help Net Security Microsoft is ending support for Exchange Server 2016, Exchange Server 2019, and Outlook 2016 on October 14, 2025. That date might seem far off, but if you’re managing email systems or Office deployments, it’s worth

React to this headline:

Exchange 2016, 2019 support ends soon: What IT should do to stay secure Read More »