supply chain - Security Ticks

Finite State Raises $20 Million to Grow Software Supply Chain Security Business

funding, ICS/OT, IoT Security, supply chain / SecurityTicks

Finite State Raises $20 Million to Grow Software Supply Chain Security Business 2024-03-23 at 06:16 By SecurityWeek News Software risk management firm Finite State has raised a $20 million growth round led by Energy Impact Partners (EIP). The post Finite State Raises $20 Million to Grow Software Supply Chain Security Business appeared first on SecurityWeek. […]

React to this headline:

Finite State Raises $20 Million to Grow Software Supply Chain Security Business Read More »

Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024

supply chain, Supply Chain Security / SecurityTicks

Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024 2024-03-20 at 14:01 By SecurityWeek News Join the fully immersive virtual event us as we explore the critical nature of software and vendor supply chain security issues The post Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024 appeared first on SecurityWeek. This article

React to this headline:

Virtual Event Today: Supply Chain & Third-Party Risk Summit 2024 Read More »

Integrating software supply chain security in DevSecOps CI/CD pipelines

cybersecurity, DevSecOps, Don't miss, Endor Labs, framework, guidelines, Hot stuff, NIST, supply chain, Video / SecurityTicks

Integrating software supply chain security in DevSecOps CI/CD pipelines 2024-03-04 at 07:01 By Help Net Security NIST released its final guidelines for integrating software supply chain security in DevSecOps CI/CD pipelines (SP 800-204D). In this Help Net Security video, Henrik Plate, Security Researcher at Endor Labs, talks about this report, which provides actionable measures to

React to this headline:

Integrating software supply chain security in DevSecOps CI/CD pipelines Read More »

98% of businesses linked to breached third parties

cybercrime, cybersecurity, News, report, Risk Management, SecurityScorecard, software, supply chain, third party compromise / SecurityTicks

98% of businesses linked to breached third parties 2024-03-01 at 06:32 By Help Net Security According to the updated SEC regulations on cybersecurity incident disclosure, findings by SecurityScorecard reveal that 98% of companies are associated with a third party that has experienced a breach. It often takes months or longer for breaches to become public

React to this headline:

98% of businesses linked to breached third parties Read More »

Preparing for the NIS2 Directive

Compliance, cyber hygiene, cybersecurity, Don't miss, EU, Hot stuff, strategy, supply chain, Telstra Purple, Video, vulnerability management / SecurityTicks

Preparing for the NIS2 Directive 2024-02-28 at 08:01 By Help Net Security The EU’s NIS Directive (Directive on security of network and information systems) was established to create a higher level of cybersecurity and resilience within organizations across the member states. It was updated in January 2023 to bring more organizations into scope. Companies –

React to this headline:

Preparing for the NIS2 Directive Read More »

Cyber Insights 2024: Supply Chain

Cyber Insights, SBOM, supply chain, Supply Chain Security / SecurityTicks

Cyber Insights 2024: Supply Chain 2024-02-20 at 16:16 By Kevin Townsend Supply chain security insights: A successful attack against a supplier can lead to multiple opportunities against the supplier’s downstream customers. The post Cyber Insights 2024: Supply Chain appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Cyber Insights 2024: Supply Chain Read More »

Integrating cybersecurity into vehicle design and manufacturing

automotive security, connected cars, cyberattacks, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, REE Automotive, risk assessment, software, standards, strategy, supply chain / SecurityTicks

Integrating cybersecurity into vehicle design and manufacturing 2024-02-12 at 08:01 By Mirko Zorz In this Help Net Security interview, Yaron Edan, CISO at REE Automotive, discusses the cybersecurity landscape of the automotive industry, mainly focusing on electric and connected vehicles. Edan highlights the challenges of technological advancements and outlines strategies for automakers to address cyber

React to this headline:

Integrating cybersecurity into vehicle design and manufacturing Read More »

AnyDesk Revokes Passwords, Certificates in Response to Hack

AnyDesk, Featured, supply chain, Supply Chain Security / SecurityTicks

AnyDesk Revokes Passwords, Certificates in Response to Hack 2024-02-05 at 13:01 By Eduard Kovacs AnyDesk is revoking certificates and passwords in response to a recently discovered security breach impacting production systems. The post AnyDesk Revokes Passwords, Certificates in Response to Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

AnyDesk Revokes Passwords, Certificates in Response to Hack Read More »

CISOs’ role in identifying tech components and managing supply chains

Artificial Intelligence, CISO, cybersecurity, Don't miss, Eclypsium, Features, hardware, Hot stuff, News, opinion, regulation, software, strategy, supply chain / SecurityTicks

CISOs’ role in identifying tech components and managing supply chains 2024-01-25 at 07:01 By Mirko Zorz In this Help Net Security interview, Nate Warfield, Director of Threat Research and Intelligence at Eclypsium, outlines the crucial tasks for CISOs in protecting supply chains and achieving comprehensive visibility. Warfield also discusses the vital collaboration between security and

React to this headline:

CISOs’ role in identifying tech components and managing supply chains Read More »

Why resilience leaders must prepare for polycrises

cyber resilience, cybersecurity, Don't miss, Hot stuff, hybrid workforce, Infinite Blue, supply chain, threats, Video / SecurityTicks

Why resilience leaders must prepare for polycrises 2024-01-24 at 07:02 By Help Net Security In this Help Net Security video, Frank Shultz, CEO of Infinite Blue, discusses how more frequent and severe disruptions and our increasingly interconnected world collide to create a new threat for resilience leaders to manage: polycrises. These multiple concurrent or cascading

React to this headline:

Why resilience leaders must prepare for polycrises Read More »

The reality of hacking threats in connected car systems

automotive security, car hacking, Compliance, connected cars, cyber risk, cybersecurity, data theft, Don't miss, Features, Hot stuff, IOActive, News, opinion, regulation, standards, supply chain / SecurityTicks

The reality of hacking threats in connected car systems 2024-01-22 at 07:31 By Mirko Zorz With the integration of sophisticated technologies like over-the-air updates and increased data connectivity, cars are no longer just modes of transportation but also hubs of personal and operational data. This shift brings forth unique cybersecurity challenges, ranging from hacking and

React to this headline:

The reality of hacking threats in connected car systems Read More »

Software Supply Chain Security Startup Kusari Raises $8 Million

Cybersecurity Funding, seed funding, supply chain, Supply Chain Security / SecurityTicks

Software Supply Chain Security Startup Kusari Raises $8 Million 2024-01-18 at 17:03 By Ionut Arghire Kusari has raised $8 million to help organizations gain visibility into and secure their software supply chain. The post Software Supply Chain Security Startup Kusari Raises $8 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Software Supply Chain Security Startup Kusari Raises $8 Million Read More »

New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise

Application Security, Featured, PyTorch, supply chain, Supply Chain Security / SecurityTicks

New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise 2024-01-12 at 14:31 By Ionut Arghire Researchers detail a CI/CD attack leading to PyTorch releases compromise via GitHub Actions self-hosted runners. The post New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise appeared first on SecurityWeek. This article

React to this headline:

New Class of CI/CD Attacks Could Have Led to PyTorch Supply Chain Compromise Read More »

Major IT, Crypto Firms Exposed to Supply Chain Compromise via New Class of CI/CD Attack

CI/CD, supply chain, Supply Chain Security / SecurityTicks

Major IT, Crypto Firms Exposed to Supply Chain Compromise via New Class of CI/CD Attack 2024-01-08 at 15:46 By Ionut Arghire Self-hosted GitHub Actions runners could allow attackers to inject malicious code into repositories, leading to supply chain attacks. The post Major IT, Crypto Firms Exposed to Supply Chain Compromise via New Class of CI/CD

React to this headline:

Major IT, Crypto Firms Exposed to Supply Chain Compromise via New Class of CI/CD Attack Read More »

Supply chain emerges as major vector in escalating automotive cyberattacks

attacks, automotive security, cybersecurity, Don't miss, Hot stuff, supply chain, VicOne, Video / SecurityTicks

Supply chain emerges as major vector in escalating automotive cyberattacks 20/12/2023 at 08:05 By Help Net Security In this Help Net Security video, Jay Yaneza, Cybersecurity Architect at VicOne, discusses how, in the first half of the year, cyberattacks on the automotive sector caused losses exceeding $11 billion. These attacks mainly targeted automotive suppliers, not

React to this headline:

Supply chain emerges as major vector in escalating automotive cyberattacks Read More »

Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies

APT29, espionage, Malware & Threats, Russia, supply chain, Supply Chain Security / SecurityTicks

Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies 14/12/2023 at 14:35 By Ionut Arghire US, UK, and Poland warn of Russia-linked cyberespionage group’s broad exploitation of recent TeamCity vulnerability. The post Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Russian Cyberspies Exploiting TeamCity Vulnerability at Scale: Government Agencies Read More »

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain

BlueVoyant, data breach, News, report, supply chain, supply chain compromise, survey / SecurityTicks

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain 14/12/2023 at 07:02 By Help Net Security The number of cyber breaches targeting organizations’ supply chains continues to rise, with an average 4.16 breaches reported to be negatively impacting operations this year — a 26% increase from the mean number

React to this headline:

Organizations prefer a combination of AI and human analysts to monitor their digital supply chain Read More »

SCS 9001 2.0 reveals enhanced controls for global supply chains

critical infrastructure, cybersecurity, Don't miss, Features, Government, Hot stuff, legislation, News, opinion, regulation, software, standards, supply chain, TIA / SecurityTicks

SCS 9001 2.0 reveals enhanced controls for global supply chains 11/12/2023 at 08:31 By Mirko Zorz In this Help Net Security interview, Mike Regan, VP of Business Performance at TIA, discusses SCS 9001 Release 2.0, a certifiable standard crafted to assist organizations in operationalizing the NIST and other government guidelines and frameworks. Enhancing its predecessor,

React to this headline:

SCS 9001 2.0 reveals enhanced controls for global supply chains Read More »

Alert fatigue puts pressure on security and development teams

Application Security, CISO, cybersecurity, Cycode, News, report, supply chain, survey / SecurityTicks

Alert fatigue puts pressure on security and development teams 08/12/2023 at 08:02 By Help Net Security Security practitioners are under a tremendous amount of pressure to secure today’s applications, according to Cycode. The research found that AppSec chaos reigns, with 78% of CISOs responding that today’s AppSec attack surfaces are unmanageable and 90% of responders

React to this headline:

Alert fatigue puts pressure on security and development teams Read More »

UAE researchers launch blockchain carbon trading platform at COP28

Abu Dhabi, Abu Dhabi Advanced Technology Research Council, Carbon Trading, Net Zero, Peer-To-Peer Energy Trading, supply chain, Technology Innovation Institute, UAE Vision 2021 / SecurityTicks

UAE researchers launch blockchain carbon trading platform at COP28 07/12/2023 at 04:04 By Cointelegraph by Brayden Lindrea The institute said it adopted a lightweight and efficient blockchain not intended to be computationally wasteful, where trading can be facilitated at little to no cost. This article is an excerpt from Cointelegraph.com News View Original Source React

React to this headline:

UAE researchers launch blockchain carbon trading platform at COP28 Read More »