survey - Security Ticks

Investing in security? It’s not helping you fix what matters faster

cybersecurity, News, report, Seemplicity, survey, vulnerability management / SecurityTicks

Investing in security? It’s not helping you fix what matters faster 2025-04-29 at 07:30 By Help Net Security Automation and structured collaboration have a strong, positive influence on the efficiency of vulnerability management, according to Seemplicity. However, manual processes, unstructured workflows, and excessive noise from vulnerability scanning tools continue to slow remediation efforts, leading to […]

React to this headline:

Investing in security? It’s not helping you fix what matters faster Read More »

Most critical vulnerabilities aren’t worth your attention

cyber risk, cybersecurity, Datadog, News, report, survey, vulnerability / SecurityTicks

Most critical vulnerabilities aren’t worth your attention 2025-04-28 at 07:03 By Help Net Security Web applications face a wide range of risks, including known-exploitable vulnerabilities, supply chain attacks, and insecure identity configurations in CI/CD, according to the Datadog State of DevSecOps 2025 report. 14% of Java services still contain at least one vulnerability By analyzing

React to this headline:

Most critical vulnerabilities aren’t worth your attention Read More »

Flexible working models fuel surge in device theft

data breach, IBM, Kensington, News, report, survey / SecurityTicks

Flexible working models fuel surge in device theft 2025-04-25 at 08:34 By Help Net Security 76% of respondents have been impacted by incidents of device theft in the past two years, with incidents more common in organizations with more flexible working models, according to Kensington. For instance, research revealed that 85% of organizations with flexible

React to this headline:

Flexible working models fuel surge in device theft Read More »

A new era of cyber threats is approaching for the energy sector

cybersecurity, Darktrace, energy sector, News, report, survey / SecurityTicks

A new era of cyber threats is approaching for the energy sector 2025-04-24 at 08:17 By Sinisa Markovic Cyber threats targeting the energy sector come in many forms, including state-sponsored actors seeking to disrupt national infrastructure, cybercriminals motivated by profit, and insiders intentionally causing damage. The consequences of a successful attack can be severe, potentially

React to this headline:

A new era of cyber threats is approaching for the energy sector Read More »

One in three security teams trust AI to act autonomously

Artificial Intelligence, CISO, cybersecurity, Exabeam, News, report, survey / SecurityTicks

One in three security teams trust AI to act autonomously 2025-04-24 at 07:39 By Help Net Security While AI adoption is widespread, its impact on productivity, trust, and team structure varies sharply by role and region, according to Exabeam. The findings confirm a critical divide: 71% of executives believe AI has significantly improved productivity across

React to this headline:

One in three security teams trust AI to act autonomously Read More »

2025 Data Breach Investigations Report: Third-party breaches double

CISO, cybersecurity, data breach, IDC, News, Ransomware, report, survey, Tenable, Verizon / SecurityTicks

2025 Data Breach Investigations Report: Third-party breaches double 2025-04-23 at 14:55 By Sinisa Markovic The exploitation of vulnerabilities has seen another year of growth as an initial access vector for breaches, reaching 20%, according to Verizon’s 2025 Data Breach Investigations Report. Researchers analyzed 22,052 real-world security incidents, of which 12,195 were confirmed data breaches. This

React to this headline:

2025 Data Breach Investigations Report: Third-party breaches double Read More »

Phishing emails delivering infostealers surge 84%

cybercrime, cybersecurity, IBM, News, report, survey / SecurityTicks

Phishing emails delivering infostealers surge 84% 2025-04-23 at 07:31 By Help Net Security Cybercriminals continued to shift to stealthier tactics, with lower-profile credential theft spiking, while ransomware attacks on enterprises declined, according to IBM. Researchers observed an 84% increase in emails delivering infostealers in 2024 compared to the prior year, a method threat actors relied

React to this headline:

Phishing emails delivering infostealers surge 84% Read More »

54% of tech hiring managers expect layoffs in 2025

Artificial Intelligence, automation, News, report, survey / SecurityTicks

54% of tech hiring managers expect layoffs in 2025 2025-04-22 at 18:22 By Help Net Security 54% of tech hiring managers say their companies are likely to conduct layoffs within the next year, and 45% say employees whose roles can be replaced by AI are most likely to be let go, according to a new

React to this headline:

54% of tech hiring managers expect layoffs in 2025 Read More »

The C-suite gap that’s putting your company at risk

CISO, cybersecurity, News, report, survey / SecurityTicks

The C-suite gap that’s putting your company at risk 2025-04-22 at 08:03 By Help Net Security New research from EY US shows that cyber attacks are creating serious financial risks. C-suite leaders don’t always agree on how exposed their companies are or where the biggest threats come from. CISOs more concerned about cybersecurity (Source: EY

React to this headline:

The C-suite gap that’s putting your company at risk Read More »

Compliance weighs heavily on security and GRC teams

auditing, Compliance, cybersecurity, GRC, News, regulation, report, survey, Swimlane / SecurityTicks

Compliance weighs heavily on security and GRC teams 2025-04-22 at 07:24 By Help Net Security Only 29% of all organizations say their compliance programs consistently meet internal and external standards, according to Swimlane. Their report reveals that fragmented workflows, manual evidence gathering and poor collaboration between security and governance, risk and compliance (GRC) teams are

React to this headline:

Compliance weighs heavily on security and GRC teams Read More »

Cybercriminals blend AI and social engineering to bypass detection

cybercrime, cybersecurity, DirectDefense, News, report, survey, threat / SecurityTicks

Cybercriminals blend AI and social engineering to bypass detection 2025-04-21 at 08:04 By Help Net Security Attackers are focusing more on stealing identities. Because of this, companies need to use zero trust principles. They should also verify user identities more carefully, says DirectDefense. Researchers analyzed thousands of alerts, mapping them to the MITRE ATT&CK framework,

React to this headline:

Cybercriminals blend AI and social engineering to bypass detection Read More »

Cyber threats now a daily reality for one in three businesses

cyber risk, cybersecurity, FIS, News, Oxford Economics, report, survey / SecurityTicks

Cyber threats now a daily reality for one in three businesses 2025-04-21 at 07:40 By Help Net Security Businesses are losing out on an average of $98.5 million a year as a consequence of cyber threats, fraud, regulatory hurdles and operational inefficiencies, according to research from FIS and Oxford Economics. The cost of disharmony is

React to this headline:

Cyber threats now a daily reality for one in three businesses Read More »

Widely available AI tools signal new era of malicious bot activity

bot, cybercrime, Imperva, News, report, survey, Thales / SecurityTicks

Widely available AI tools signal new era of malicious bot activity 2025-04-18 at 07:34 By Help Net Security Rise in accessible AI tools significantly lowered the barrier to entry for cyber attackers, enabling them to create and deploy malicious bots at scale, according to Thales. Automated bot traffic surpassed human-generated traffic for the first time

React to this headline:

Widely available AI tools signal new era of malicious bot activity Read More »

Browser extensions make nearly every employee a potential attack vector

browser, Chrome, cyber risk, Edge, Firefox, LayerX, News, report, survey / SecurityTicks

Browser extensions make nearly every employee a potential attack vector 2025-04-16 at 07:12 By Help Net Security Despite being present on virtually every employee’s browser, extensions are rarely monitored by security teams or controlled by IT, according to LayerX. Most extensions have access to sensitive data 99% of enterprise users have at least one extension

React to this headline:

Browser extensions make nearly every employee a potential attack vector Read More »

94% of firms say pentesting is essential, but few are doing it right

Cobalt, cybersecurity, generative AI, News, report, survey, vulnerability management / SecurityTicks

94% of firms say pentesting is essential, but few are doing it right 2025-04-15 at 08:05 By Help Net Security Organizations are fixing less than half of all exploitable vulnerabilities, with just 21% of GenAI app flaws being resolved, according to Cobalt. Big firms take longer to fix pentest issues 94% of firms view pentesting

React to this headline:

94% of firms say pentesting is essential, but few are doing it right Read More »

Organizations can’t afford to be non-compliant

Compliance, cybersecurity, Data Protection, enterprise, News, regulation, report, Secureframe, survey / SecurityTicks

Organizations can’t afford to be non-compliant 2025-04-14 at 07:01 By Help Net Security Non-compliance can cost organizations 2.71 times more than maintaining compliance programs, according to Secureframe. That’s because non-compliance can result in business disruption, productivity losses, fines, penalties, and settlement costs, among other factors that come with a hefty price tag. Even data breaches

React to this headline:

Organizations can’t afford to be non-compliant Read More »

Ransomware groups push negotiations to new levels of uncertainty

At-Bay, cyber insurance, cybercrime, cybersecurity, News, Ransomware, report, survey / SecurityTicks

Ransomware groups push negotiations to new levels of uncertainty 2025-04-11 at 08:18 By Help Net Security Ransomware attacks increased by nearly 20% in 2024, and the severity rose by 13%, according to At-Bay. The blast radius of ransomware continues to grow as businesses impacted by attacks on vendors and partners increased 43%, while the average

React to this headline:

Ransomware groups push negotiations to new levels of uncertainty Read More »

iOS devices face twice the phishing attacks of Android

Android, cybersecurity, iOS, Lookout, mobile security, News, report, survey / SecurityTicks

iOS devices face twice the phishing attacks of Android 2025-04-11 at 07:06 By Help Net Security 2024 brought about countless new cybersecurity challenges including significant growth of the mobile threat landscape, according to Lookout. Threat actors, ranging from nation-states to individuals, are increasingly targeting mobile devices for the onset of their attacks to steal credentials

React to this headline:

iOS devices face twice the phishing attacks of Android Read More »

Cybercriminals exfiltrate data in just three days

cybercrime, cybersecurity, News, Ransomware, report, Sophos, survey / SecurityTicks

Cybercriminals exfiltrate data in just three days 2025-04-03 at 08:14 By Industry News In 56% of Sophos managed detection and response (MDR) and incident response (IR) cases, attackers gained initial access to networks by exploiting external remote services, including edge devices such as firewalls and VPNs, and by leveraging valid accounts. Compromised credentials remain the

React to this headline:

Cybercriminals exfiltrate data in just three days Read More »

Only 1% of malicious emails that reach inboxes deliver malware

cybersecurity, Email, email security, Fortra, News, phishing, report, survey / SecurityTicks

Only 1% of malicious emails that reach inboxes deliver malware 2025-04-02 at 07:04 By Help Net Security 99% of email threats reaching corporate user inboxes in 2024 were response-based social engineering attacks or contained phishing links, according to Fortra. Only 1% of malicious emails that reached user inboxes delivered malware. This shows that while common

React to this headline:

Only 1% of malicious emails that reach inboxes deliver malware Read More »