September, 2026 - Security Ticks

Cohesity adds recovery capabilities for AI agents and the data they manage

Cohesity adds recovery capabilities for AI agents and the data they manage 2026-09-16 at 13:58 By Industry News Cohesity has introduced Cohesity Agent Resilience. This new Cohesity Data Cloud capability will discover, protect, and recover the infrastructure behind enterprise AI agents. A unified view of an agent and the state it depends on. (Source: Cohesity) […]

Cohesity adds recovery capabilities for AI agents and the data they manage Read More »

280,000 Impacted by Premier Medical Group Data Breach

data breach, Data Breaches, healthcare, Premier Medical Group / SecurityTicks

280,000 Impacted by Premier Medical Group Data Breach 2026-09-16 at 13:47 By Ionut Arghire In June 2026, hackers accessed files containing patients’ names, contact information, diagnosis details, and health insurance information. The post 280,000 Impacted by Premier Medical Group Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

280,000 Impacted by Premier Medical Group Data Breach Read More »

Rubrik MCP gives AI agents controlled access to security intelligence

Industry news, Rubrik / SecurityTicks

Rubrik MCP gives AI agents controlled access to security intelligence 2026-09-16 at 13:41 By Industry News Rubrik has announced Rubrik MCP (Model Context Protocol), giving an organization’s AI agents a secure, programmable path to Rubrik’s data, identity, and application intelligence. Support for MCP expands Rubrik AI, which is now trusted by one-third of its global […]

Rubrik MCP gives AI agents controlled access to security intelligence Read More »

CenterPoint Energy confirms data breach following claims on hacking forum

breach, critical infrastructure, cybercrime, data breach, News / SecurityTicks

CenterPoint Energy confirms data breach following claims on hacking forum 2026-09-16 at 13:35 By Sinisa Markovic CenterPoint Energy disclosed that an unauthorized third party got into customer data through one of its external systems, after online claims by a hacker that millions of records had been stolen from the company. CenterPoint Energy is a Houston-based […]

CenterPoint Energy confirms data breach following claims on hacking forum Read More »

Chrome, Firefox Updates Patch 115 Vulnerabilities

Chrome, Firefox, patch, Vulnerabilities, vulnerability / SecurityTicks

Chrome, Firefox Updates Patch 115 Vulnerabilities 2026-09-16 at 13:28 By Ionut Arghire Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox. The post Chrome, Firefox Updates Patch 115 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome, Firefox Updates Patch 115 Vulnerabilities Read More »

Anthropic is a cult and Claude is rapidly becoming its god — they treat AI like it’s human: source

Uncategorized / SecurityTicks

Anthropic is a cult and Claude is rapidly becoming its god — they treat AI like it’s human: source 2026-09-16 at 13:00 By Vivi Lin “These people are treating AI as if it’s a human in disguise, with human motives, with human emotions,” said University of Washington professor Pedro Domingos. This article is an excerpt […]

Anthropic is a cult and Claude is rapidly becoming its god — they treat AI like it’s human: source Read More »

Sensitive Data Thrives in a Quiet Environment

Uncategorized / SecurityTicks

Sensitive Data Thrives in a Quiet Environment 2026-09-16 at 13:00 By Prateek Temkar, Rai Johnson Symantec® CBX cuts noise and amplifies visibility for streamlined teams This article is an excerpt from SECURITY.COM View Original Source

Sensitive Data Thrives in a Quiet Environment Read More »

The Leadership Test You Don’t Know You’re Taking

Uncategorized / SecurityTicks

The Leadership Test You Don’t Know You’re Taking 2026-09-16 at 12:00 By When I was in high school, students joked that you got 200 points on the SAT simply for writing your name. True or not, it captured an important idea: your name got you into the game but didn’t distinguish you from anyone else. […]

The Leadership Test You Don’t Know You’re Taking Read More »

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability

exploited, Vulnerabilities, vulnerability, WSO2 / SecurityTicks

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability 2026-09-16 at 11:39 By Eduard Kovacs The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data. The post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Enterprises Warned of Attacks Exploiting WSO2 Vulnerability Read More »

AI has been a ‘net negative’ for crypto: Phemex CEO

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update

CSPU, Featured, Oracle, patches, Vulnerabilities, vulnerability / SecurityTicks

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update 2026-09-16 at 11:06 By Ionut Arghire The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws. The post Oracle Patches 800+ Vulnerabilities in September 2026 Security Update appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Oracle Patches 800+ Vulnerabilities in September 2026 Security Update Read More »

NIST and CISA finalize playbook to stop token theft and forgery

access management, CISA, cloud security, cybersecurity, guidelines, identity management, News, NIST, security controls, SSO / SecurityTicks

NIST and CISA finalize playbook to stop token theft and forgery 2026-09-16 at 10:40 By Anamarija Pogorelec NIST and CISA have finalized guidelines to help federal agencies and cloud service providers (CSPs) protect identity and access tokens from forgery, theft, and misuse. The guidance, Protecting Tokens and Assertions from Forgery, Theft, and Misuse (NIST IR […]

NIST and CISA finalize playbook to stop token theft and forgery Read More »

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Uncategorized / SecurityTicks

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens 2026-09-16 at 09:41 By A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as CVE-2026-5430 (CVSS score: 9.8/10.0), is a case of improper verification of a cryptographic […]

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens Read More »

What happens when AI agent governance is missing at scale

agentic AI, automation, cybersecurity, Don't miss, enterprise, Features, Hot stuff, News, opinion, strategy, tips / SecurityTicks

What happens when AI agent governance is missing at scale 2026-09-16 at 09:00 By Mirko Zorz In this interview with Help Net Security, Gourab Basu, Global Head of Engineering at meshIQ, discusses governance in AI agent systems. He argues that instructions written into a prompt are not enough to control what an agent does, since […]

What happens when AI agent governance is missing at scale Read More »

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

Uncategorized / SecurityTicks

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells 2026-09-16 at 08:48 By Threat actors are exploiting a critical security flaw in WooCommerce Wholesale Lead Capture, a premium WordPress plugin that has more than 6,000 active installs. “This vulnerability can be leveraged by unauthenticated attackers to upload arbitrary files, including PHP backdoors, […]

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells Read More »

DeepZero: Open-source hunting for vulnerable Windows drivers

Don't miss, drivers, GitHub, News, open source, scanner, software, Windows / SecurityTicks

DeepZero: Open-source hunting for vulnerable Windows drivers 2026-09-16 at 08:30 By Mirko Zorz DeepZero is an open-source engine that automates the search for exploitable Windows kernel drivers. You point it at a folder of binaries and it parses them, pulls them apart, scans them, throws most of them away, and asks a language model whether […]

DeepZero: Open-source hunting for vulnerable Windows drivers Read More »

The modern attack chain: Rethinking Google Workspace security in the age of AI

AI, attack, cybersecurity, Don't miss, Google Workspace, Hot stuff, Material Security, News, opinion / SecurityTicks

The modern attack chain: Rethinking Google Workspace security in the age of AI 2026-09-16 at 08:00 By Help Net Security Over the past two months, I’ve written about the Vercel breach and the Composio breach separately. Both offer lessons to learn on their own. But reading them together, I keep coming back to the same […]

The modern attack chain: Rethinking Google Workspace security in the age of AI Read More »

US charges ex-Robinhood engineers over alleged pre-listing crypto trades

MSPs say nearly half their customers rely on them for CISO services

CISO, Compliance, cybersecurity, managed security, News, report, Sophos, survey / SecurityTicks

MSPs say nearly half their customers rely on them for CISO services 2026-09-16 at 07:30 By Anamarija Pogorelec MSPs estimate that 46% of their customers, on average, look to them to act as CISOs, according to Sophos. Most of those providers do that job without the full set of compliance services, and many spread the […]

MSPs say nearly half their customers rely on them for CISO services Read More »