2026 - Security Ticks

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker 2026-07-07 at 16:27 By U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account […]

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker Read More »

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

Uncategorized / SecurityTicks

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants 2026-07-07 at 16:27 By Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed WriteOut by the Sand Security Research […]

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants Read More »

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws

AI, Anthropic, Artificial Intelligence, Government, Mythos / SecurityTicks

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws 2026-07-07 at 16:13 By Mike Lennon The audits are reportedly being spearheaded by CISA’s Attack Surface Evaluation team, a specialized unit tasked with conducting digital defense assessments and simulated hacking exercises. The post CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws […]

CISA Reportedly Using Anthropic’s Mythos to Scan Government Software for Flaws Read More »

Commvault measures cyber recovery readiness with AI attack simulations

Commvault, Industry news / SecurityTicks

Commvault measures cyber recovery readiness with AI attack simulations 2026-07-07 at 15:50 By Industry News Commvault has announced Commvault Minutes to Recovery, a scenario-driven cyber resilience simulation that lets participants act as a hacker and run their own attacks using frontier AI tools. Then, participants are challenged to defend against and recover from an incident […]

Commvault measures cyber recovery readiness with AI attack simulations Read More »

Critical Adobe ColdFusion Vulnerability Exploited in Attacks

ColdFusion, CVE-2026-48282, Vulnerabilities, vulnerability / SecurityTicks

Critical Adobe ColdFusion Vulnerability Exploited in Attacks 2026-07-07 at 15:38 By Ionut Arghire Hackers are exploiting a recently patched critical vulnerability (CVE-2026-48282) in Adobe ColdFusion that carries a CVSS score of 10/10. The post Critical Adobe ColdFusion Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Adobe ColdFusion Vulnerability Exploited in Attacks Read More »

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks

Cyberwarfare, Featured, Iran / SecurityTicks

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks 2026-07-07 at 15:21 By Ionut Arghire Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to reach high-value targets in Israel. The post Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks appeared first on SecurityWeek. This article is an […]

Iran-Linked Hackers Using Modular C&C Framework in Cyberattacks Read More »

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

Adobe, Adobe ColdFusion, Don't miss, exploit, Hot stuff, KEVIntel, News, PoC, Resecurity, Shadowserver, vulnerability, WatchTowr / SecurityTicks

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) 2026-07-07 at 15:03 By Zeljka Zorz CVE-2026-48282, one of the maximum severity vulnerabilities patched in Adobe ColdFusion on June 30, 2026, has been targeted by attackers in the wild. Exploitation attempts were detected on July 2, through the honeypot sensors of cybersecurity threat-intelligence service KEVIntel, mere minutes after […]

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282) Read More »

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker

CISO, CISO Conversations, CISO Strategy, Interview, Tarah Wheeler / SecurityTicks

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker 2026-07-07 at 15:00 By Kevin Townsend Tarah Wheeler is CISO at TPO Group, a firm that provides cybersecurity consultancy for high-stakes organizations. But despite this elevated position, her journey was far from typical. The post CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and […]

CISO Conversations: Tarah Wheeler, Cybersecurity Leader, Thought Leader and Original Thinker Read More »

Radware updates Agentic AI Protection with AI governance and compliance capabilities

Industry news / SecurityTicks

Radware updates Agentic AI Protection with AI governance and compliance capabilities 2026-07-07 at 14:17 By Industry News Radware has announced enhancements to its Agentic AI Protection solution to help organizations govern and secure AI agents across enterprise environments. The release adds compliance reporting to support alignment with leading global AI standards, enhanced visibility into agent […]

Radware updates Agentic AI Protection with AI governance and compliance capabilities Read More »

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security

Cybersecurity Funding, funding, Keyfactor / SecurityTicks

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security 2026-07-07 at 14:13 By Mike Lennon The investment will accelerate Keyfactor’s machine identity, PKI, and cryptographic security platform as enterprises prepare for AI-driven and post-quantum threats. The post Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security appeared first on SecurityWeek. This article is an excerpt […]

Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security Read More »

Ctrl Wallet to shut weeks after security exploit

Vitalik Buterin confirms AI identified his anonymous Ethereum proposal contribution

Bitcoin can fall below $58K if one of its ‘cleanest’ metrics copies history: Analysis

markets / SecurityTicks

Bitcoin can fall below $58K if one of its ‘cleanest’ metrics copies history: Analysis 2026-07-07 at 13:14 By Cointelegraph by William Suberg Bitcoin NUPL metric data suggested that BTC price action should make new cycle lows in order to preserve historical patterns. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin can fall below $58K if one of its ‘cleanest’ metrics copies history: Analysis Read More »

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems

CVE-2026-53359, Featured, Linux, Vulnerabilities / SecurityTicks

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems 2026-07-07 at 13:00 By Ionut Arghire The 16-year-old Januscape flaw affects Linux’s KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host. The post Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems appeared first on […]

Linux Kernel Vulnerability Allows VM Escape on Intel and AMD Systems Read More »

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

Uncategorized / SecurityTicks

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities 2026-07-07 at 12:51 By A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source […]

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities Read More »

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware

Uncategorized / SecurityTicks

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware 2026-07-07 at 09:40 By Several versions of firmware released by Chinese network device manufacturer Tenda have been found to embed an undocumented authentication backdoor that enables administrative access to the devices’ web management interfaces, the CERT Coordination Center (CERT/CC) warned Monday. “An attacker can exploit […]

CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware Read More »

Researchers make the case for a cybersecurity AI scientist

agentic AI, AI, automation, China, cybersecurity, Don't miss, Features, framework, LLMs, News, research / SecurityTicks

Researchers make the case for a cybersecurity AI scientist 2026-07-07 at 09:30 By Mirko Zorz Autonomous AI agents have started doing real security work. Language-model agents probe software for flaws, run penetration tests, and chain together attack steps that once needed a human operator. Research about security has stayed slower and more manual, built around […]

Researchers make the case for a cybersecurity AI scientist Read More »

Review: Building Machine Learning Systems with a Feature Store

books, machine learning, News, O'Reilly, Review, Reviews / SecurityTicks

Review: Building Machine Learning Systems with a Feature Store 2026-07-07 at 09:00 By Sinisa Markovic Many people come to machine learning by training a model on a tidy dataset, and then meet a harder problem: making that model work for real users, on fresh data, every day. Jim Dowling’s O’Reilly book, Building Machine Learning Systems […]

Review: Building Machine Learning Systems with a Feature Store Read More »

Your company already adopted AI and nobody is governing access

AI, cybersecurity, Don't miss, News, opinion, strategy, tips, Video / SecurityTicks

Your company already adopted AI and nobody is governing access 2026-07-07 at 08:30 By Help Net Security In this Help Net Security video, Antoine Berton, CTO at Elba Security, breaks down the AI attack surface. Your company already adopted AI, and every adoption creates access that nobody governs. A quick click on a Friday afternoon […]

Your company already adopted AI and nobody is governing access Read More »

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA

Uncategorized / SecurityTicks

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA 2026-07-07 at 08:16 By BeyondTrust has released updates to address two critical security flaws affecting Remote Support (RS) and Privileged Remote Access (PRA) products that, if successfully exploited, could allow unauthenticated attackers to take control of susceptible devices. The vulnerabilities are listed below – […]

BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA Read More »