threat - Security Ticks

Cybercriminals blend AI and social engineering to bypass detection

cybercrime, cybersecurity, DirectDefense, News, report, survey, threat / SecurityTicks

Cybercriminals blend AI and social engineering to bypass detection 2025-04-21 at 08:04 By Help Net Security Attackers are focusing more on stealing identities. Because of this, companies need to use zero trust principles. They should also verify user identities more carefully, says DirectDefense. Researchers analyzed thousands of alerts, mapping them to the MITRE ATT&CK framework, […]

React to this headline:

Cybercriminals blend AI and social engineering to bypass detection Read More »

The human side of insider threats: People, pressure, and payback

crime, cybersecurity, data security, Insider Threat, News, threat / SecurityTicks

The human side of insider threats: People, pressure, and payback 2025-04-01 at 08:02 By Help Net Security While cybercriminals are often in the spotlight, one of the most dangerous threats to your company might be hiding in plain sight, within your own team. Employees, contractors, or business partners who have access to sensitive information can

React to this headline:

The human side of insider threats: People, pressure, and payback Read More »

Healthcare’s alarming cybersecurity reality

Claroty, cybercrime, cybersecurity, healthcare, News, Ransomware, report, survey, threat / SecurityTicks

Healthcare’s alarming cybersecurity reality 2025-03-28 at 07:35 By Help Net Security 89% of healthcare organizations have the top 1% of riskiest Internet of Medical Things (IoMT) devices – which contain known exploitable vulnerabilities (KEVs) linked to active ransomware campaigns as well as an insecure connection to the internet – on their networks, according to Claroty.

React to this headline:

Healthcare’s alarming cybersecurity reality Read More »

Chinese military-linked companies dominate US digital supply chain

BitSight, cybersecurity, News, report, supply chain, survey, threat / SecurityTicks

Chinese military-linked companies dominate US digital supply chain 2025-03-20 at 07:35 By Help Net Security Despite growing national security concerns and government restrictions, Chinese military-linked companies remain deeply embedded in the US digital supply chain, according to Bitsight. These organizations, many of which have been designated by the US Department of Defense as “Chinese Military

React to this headline:

Chinese military-linked companies dominate US digital supply chain Read More »

Defending against EDR bypass attacks

attacks, Binary Defense, cybersecurity, Don't miss, threat, tips, Video / SecurityTicks

Defending against EDR bypass attacks 2025-03-12 at 07:06 By Help Net Security EDR bypass and killer attacks are surging, yet many organizations continue to overlook this threat while they have become over-reliant on this security tool – particularly when preventing ransomware. In this Help Net Security video, John Dwyer, Director of Security Research at Binary

React to this headline:

Defending against EDR bypass attacks Read More »

300% increase in endpoint malware detections

cybercrime, Malware, News, report, survey, threat, WatchGuard / SecurityTicks

300% increase in endpoint malware detections 2025-02-20 at 07:04 By Help Net Security The third quarter of 2024 saw a dramatic shift in the types of malware detected at network perimeters, according to a new WatchGuard report. The report’s key findings include a 300% increase quarter over quarter of endpoint malware detections, highlighted by growing

React to this headline:

300% increase in endpoint malware detections Read More »

Inconsistent security strategies fuel third-party threats

cybersecurity, data breach, Imprivata, News, Ponemon Institute, report, survey, third party compromise, threat / SecurityTicks

Inconsistent security strategies fuel third-party threats 2025-02-14 at 06:36 By Help Net Security 47% of organizations have experienced a data breach or cyberattack over the past 12 months that involved a third-party accessing their network, according to Imprivata and the Ponemon Institute. Third-party security incidents persist Notably, 64% of respondents say these types of third-party

React to this headline:

Inconsistent security strategies fuel third-party threats Read More »

CISOs and boards see things differently

Artificial Intelligence, boardroom, CISO, Compliance, cybersecurity, Don't miss, Hot stuff, Splunk, threat, Video / SecurityTicks

CISOs and boards see things differently 2025-02-13 at 06:35 By Help Net Security Splunk’s latest CISO Report reveals critical insights into cybersecurity priorities, threat trends, and strategies for resilience. In this Help Net Security video, Kirsty Paine, Field CTO & Strategic Advisor at Splunk, discusses the key findings and what they mean for security teams.

React to this headline:

CISOs and boards see things differently Read More »

DeepSeek’s popularity exploited by malware peddlers, scammers

Artificial Intelligence, China, consumer, data security, DeepSeek, Don't miss, enterprise, Hot stuff, KELA, LLMs, Malware, News, Privacy, threat / SecurityTicks

DeepSeek’s popularity exploited by malware peddlers, scammers 2025-01-29 at 15:18 By Zeljka Zorz As US-based AI companies struggle with the news that the recently released Chinese-made open source DeepSeek-R1 reasoning model performs as well as theirs for a fraction of the cost, users are rushing to try out DeepSeek’s AI tool. In the process, they

React to this headline:

eBay CISO on managing long-term cybersecurity planning and ROI

CISO, Compliance, cybersecurity, Don't miss, eBay, Features, Hot stuff, News, opinion, security ROI, standards, strategy, threat / SecurityTicks

eBay CISO on managing long-term cybersecurity planning and ROI 2025-01-07 at 07:33 By Mirko Zorz In this Help Net Security interview, Sean Embry, CISO at eBay, discusses key aspects of cybersecurity leadership. He shares insights on balancing long-term strategic planning with immediate threat response, evaluating the ROI of new technologies, and addressing employee cybersecurity fatigue.

React to this headline:

eBay CISO on managing long-term cybersecurity planning and ROI Read More »

Researchers unearth two previously unknown Linux backdoors

APT, backdoor, cybersecurity, Don't miss, ESET, Hot stuff, Linux, Malware, News, threat, VirusTotal / SecurityTicks

Researchers unearth two previously unknown Linux backdoors 2024-11-21 at 12:12 By Help Net Security ESET researchers have identified multiple samples of two previously unknown Linux backdoors: WolfsBane and FireWood. The goal of the backdoors and tools discovered is cyberespionage that targets sensitive data such as system information, user credentials, and specific files and directories. These

React to this headline:

Researchers unearth two previously unknown Linux backdoors Read More »

Evolving cloud threats: Insights and recommendations

access control, cloud security, cybersecurity, Don't miss, Hot stuff, IBM X-Force, threat, Video / SecurityTicks

Evolving cloud threats: Insights and recommendations 2024-10-23 at 07:03 By Help Net Security Recently, IBM X-Force released its 2024 Cloud Threat Landscape Report. This uses incident data and insights to reveal how attackers successfully compromise organizations by leveraging adversary-in-the-middle (AITM) attacks to bypass multi-factor authentication (MFA). This often leads to business email compromise (BEC), which

React to this headline:

Evolving cloud threats: Insights and recommendations Read More »

How nation-states exploit political instability to launch cyber operations

BlackBerry, critical infrastructure, cyberattacks, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, threat / SecurityTicks

How nation-states exploit political instability to launch cyber operations 2024-10-15 at 07:37 By Mirko Zorz In this Help Net Security interview, Ismael Valenzuela, Vice President of Threat Research & Intelligence at BlackBerry, discusses the impact of geopolitical tensions on the frequency and sophistication of cyberattacks. He explains how nation-states and politically motivated groups exploit unrest

React to this headline:

How nation-states exploit political instability to launch cyber operations Read More »

Developing an effective cyberwarfare response plan

Armis, Artificial Intelligence, cybersecurity, Cyberwarfare, digital transformation, Don't miss, Features, Hot stuff, News, opinion, remediation, strategy, threat, Threat Intelligence / SecurityTicks

Developing an effective cyberwarfare response plan 2024-09-27 at 07:01 By Mirko Zorz In this Help Net Security interview, Nadir Izrael, CTO at Armis, discusses how AI has transformed cyberwarfare by amplifying attacks’ scale and sophistication. Izrael emphasizes the need for AI-powered defenses and proactive cybersecurity strategies to combat these evolving threats. How has adopting AI

React to this headline:

Developing an effective cyberwarfare response plan Read More »

Organizations turn to biometrics to counter deepfakes

biometrics, cybercrime, deepfakes, iProov, News, report, survey, threat / SecurityTicks

Organizations turn to biometrics to counter deepfakes 2024-08-20 at 06:31 By Help Net Security The risk of deepfakes is rising with 47% of organizations having encountered a deepfake and 70% of them believing deepfake attacks which are created using generative AI tools, will have a high impact on their organizations, according to iProov. Perceptions of

React to this headline:

Organizations turn to biometrics to counter deepfakes Read More »

74% of IT professionals worry AI tools will replace them

Artificial Intelligence, cybersecurity, News, Pluralsight, report, survey, threat / SecurityTicks

74% of IT professionals worry AI tools will replace them 2024-08-15 at 07:31 By Help Net Security 56% of security professionals are concerned about AI-powered threats, according to Pluralsight. Many organizations lack structured AI training Over half of surveyed technologists are either extremely concerned or moderately concerned about AI-powered threats, with only 6% saying they

React to this headline:

74% of IT professionals worry AI tools will replace them Read More »

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals

cybercriminals, cybersecurity, Darktrace, News, phishing, Ransomware, report, threat / SecurityTicks

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals 2024-08-09 at 07:32 By Help Net Security The sophistication of cyber threats has escalated dramatically, with malicious actors’ deploying advanced tactics, techniques, and procedures (TTPs) to exploit vulnerabilities and evade detection, according to Darktrace. Subscription-based tools such as Malware-as-a-Service (MaaS) and Ransomware-as-a-Service (RaaS) have also lowered the barrier-to-entry

React to this headline:

Malware-as-a-Service and Ransomware-as-a-Service lower barriers for cybercriminals Read More »

Organizations fail to log 44% of cyber attacks, major exposure gaps remain

access control, cybersecurity, network, News, Picus Security, report, threat / SecurityTicks

Organizations fail to log 44% of cyber attacks, major exposure gaps remain 2024-08-02 at 07:31 By Help Net Security 40% of tested environments allowed attack paths that lead to domain admin access, according to Picus Security. Achieving domain admin access is particularly concerning because it is the highest level of access within an organization’s IT

React to this headline:

Organizations fail to log 44% of cyber attacks, major exposure gaps remain Read More »

Insecure file-sharing practices in healthcare put patient privacy at risk

data, data security, healthcare, Metomic, News, report, survey, threat / SecurityTicks

Insecure file-sharing practices in healthcare put patient privacy at risk 2024-07-30 at 06:01 By Help Net Security Healthcare organizations continue to put their business and patients at risk of exposing their most sensitive data, according to Metomic. 25% of publicly shared files owned by healthcare organizations contain Personally Identifiable Information (PII). 68% of private files

React to this headline:

Insecure file-sharing practices in healthcare put patient privacy at risk Read More »

AI-generated deepfake attacks force companies to reassess cybersecurity

Artificial Intelligence, authentication, deepfakes, GetApp, News, report, survey, threat / SecurityTicks

AI-generated deepfake attacks force companies to reassess cybersecurity 2024-07-26 at 07:31 By Help Net Security As AI-generated deepfake attacks and identity fraud become more prevalent, companies are developing response plans to address these threats, according to GetApp. In fact, 73% of US respondents report that their organization has developed a deepfake response plan. This concern

React to this headline:

AI-generated deepfake attacks force companies to reassess cybersecurity Read More »