September, 2026 - Security Ticks

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars

AI, Artificial Intelligence, exploit, ICS, ICS/OT, PLC, WAGO / SecurityTicks

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars 2026-09-01 at 15:37 By Eduard Kovacs Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models. The post Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars appeared first on SecurityWeek. This […]

Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars Read More »

Fake Claude Opus 5 app delivers malware and wipes its own tracks

Anthropic, Claude Code, GitHub, Malware, Morphisec, News / SecurityTicks

Fake Claude Opus 5 app delivers malware and wipes its own tracks 2026-09-01 at 15:21 By Sinisa Markovic A malicious GitHub repository impersonating Anthropic and claiming to offer free access to “Claude Opus 5” is delivering RevStealer, Windows information-stealing malware that targets passwords, cryptocurrency wallet data and login credentials, according to Morphisec. Repository README using […]

Fake Claude Opus 5 app delivers malware and wipes its own tracks Read More »

Hackers Start Exploiting Critical Langflow Vulnerability

AI, Artificial Intelligence, exploited, Langflow, Vulnerabilities, vulnerability / SecurityTicks

Hackers Start Exploiting Critical Langflow Vulnerability 2026-09-01 at 15:07 By Ionut Arghire Tracked as CVE-2026-0768, the security defect allows unauthenticated attackers to execute arbitrary Python code remotely. The post Hackers Start Exploiting Critical Langflow Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Start Exploiting Critical Langflow Vulnerability Read More »

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones

Uncategorized / SecurityTicks

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones 2026-09-01 at 14:48 By The most common way into a company last year was to ask. A web page tells the visitor to prove they are not a robot. While they read the instructions, it quietly places a command on their clipboard. Then it talks […]

Threat Actors Don’t Want Better Attacks. They Want Repeatable Ones Read More »

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting

ATM jackpotting, cybercrime, Malware, Malware & Threats, plead guilty / SecurityTicks

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting 2026-09-01 at 14:24 By Ionut Arghire The defendants unsuccessfully attempted to physically install malware on ATMs to force them to dispense cash. The post Five Venezuelans Plead Guilty in US Court to ATM Jackpotting appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Five Venezuelans Plead Guilty in US Court to ATM Jackpotting Read More »

London Stock Exchange partners with Kraken parent for tokenized UK stocks: FT

Ransomware Gang Claims Nutex Health Data Breach

data breach, Data Breaches, Gentlemen, healthcare, Nutex, Ransomware / SecurityTicks

Ransomware Gang Claims Nutex Health Data Breach 2026-09-01 at 13:47 By Ionut Arghire The company has notified the SEC that hackers accessed patient, employee, provider, business, and financial information. The post Ransomware Gang Claims Nutex Health Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Ransomware Gang Claims Nutex Health Data Breach Read More »

Bitfinex Securities lists tokenized notes tied to Strategy, Metaplanet

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild

exploited, JFrog, JFrog Artifactory, Vulnerabilities, vulnerability / SecurityTicks

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild 2026-09-01 at 12:59 By Eduard Kovacs Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure. The post Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild Read More »

Singapore weighs recognizing some foreign-issued stablecoins

9.5 Million Impacted by Aesto Health Data Breach

Aesto Health, data breach, Data Breaches, healthcare / SecurityTicks

9.5 Million Impacted by Aesto Health Data Breach 2026-09-01 at 12:09 By Ionut Arghire Hackers stole personal and health information from the healthcare technology company’s AWS infrastructure. The post 9.5 Million Impacted by Aesto Health Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

9.5 Million Impacted by Aesto Health Data Breach Read More »

Berlin refuses to be blackmailed after network breach

breach, cyberattack, data breach, EU, Germany, News, Ransomware / SecurityTicks

Berlin refuses to be blackmailed after network breach 2026-09-01 at 12:07 By Sinisa Markovic Berlin’s state government has confirmed an extortion attempt following a data theft from its administrative network in August. Governing Mayor Kai Wegner and Interior Senator Iris Spranger addressed the extortion attempt on Friday, following an emergency Senate session at the Rotes […]

Berlin refuses to be blackmailed after network breach Read More »

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000

Uncategorized / SecurityTicks

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 2026-09-01 at 12:05 By METR (short for Model Evaluation and Threat Research and pronounced “Meter”), a research non-profit that evaluates frontier artificial intelligence (AI) models for their ability to carry out long-horizon, agentic tasks, disclosed that it suffered “two notable security incidents” where […]

Attackers Steal METR API Key and Consume AI Credits Worth About $600,000 Read More »

WatchGuard Patches Critical Vulnerabilities

patch, RCE, Vulnerabilities, vulnerability, WatchGuard / SecurityTicks

WatchGuard Patches Critical Vulnerabilities 2026-09-01 at 11:50 By Ionut Arghire Three critical issues in the Fireware OS iked process could allow unauthenticated attackers to execute arbitrary code remotely. The post WatchGuard Patches Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

WatchGuard Patches Critical Vulnerabilities Read More »

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis

Uncategorized / SecurityTicks

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis 2026-09-01 at 11:26 By Cybersecurity researchers have disclosed a new technique dubbed GuardBreaker that’s been put to use by a Russia-aligned threat actor known as UAC-0099 against a target in Ukraine with an aim to interfere with artificial intelligence (AI)-assisted analysis. The idea, […]

Russia-Aligned UAC-0099 Plants Nuclear Weapon Prompt in Malware to Disrupt AI Analysis Read More »

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

Uncategorized / SecurityTicks

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity 2026-09-01 at 10:22 By Threat actors are exploiting two critical flaws impacting Langflow and Ruby on Rails, according to new findings from VulnCheck. The vulnerabilities in question are listed below – CVE-2026-0768 (CVSS score: 9.8) – A lack of proper validation of a […]

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity Read More »

LastPass enhancements improve visibility, governance, and control

Industry news, LastPass / SecurityTicks

LastPass enhancements improve visibility, governance, and control 2026-09-01 at 09:00 By Industry News LastPass announced a series of strategic product innovations, customer experience enhancements, and industry milestones. These advancements reflect the company’s continued focus on providing practical tools to protect access and identity in an increasingly AI-driven threat landscape. Highlights include new tools that simplify […]

LastPass enhancements improve visibility, governance, and control Read More »

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers

AI, cybersecurity, Don't miss, Europe, Hot stuff, News, security operations, SOC, Threat Intelligence / SecurityTicks

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers 2026-09-01 at 08:30 By Mirko Zorz Askeal takes the opposite approach to omniscient Gen AI: rather than pretending to know everything, it combines AI with community expertise. Vetted vendors, researchers, and practitioners contribute their intelligence and tools to help users conduct manual investigations. The startup, […]

Askeal, the AI cybersecurity assistant that gives verifiable, expert-backed answers Read More »

PaperCut Exploitation Escalates to Active Intrusions

exploited, Featured, PaperCut, Vulnerabilities, vulnerability, Zero-Day / SecurityTicks

PaperCut Exploitation Escalates to Active Intrusions 2026-09-01 at 08:27 By Eduard Kovacs CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog. The post PaperCut Exploitation Escalates to Active Intrusions appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PaperCut Exploitation Escalates to Active Intrusions Read More »

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes

GitHub, News, open source, software / SecurityTicks

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes 2026-09-01 at 08:04 By Anamarija Pogorelec Failed SSH logins pile up in an auth log, and a scanner walks a website looking for exposed admin paths. CrowdSec reads log sources and HTTP requests, works out which addresses are misbehaving, and hands the block to […]

Bot detection arrives in CrowdSec 1.8.0, along with two DoS fixes Read More »

September 2026