2026 - Security Ticks

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

AI, Artificial Intelligence, ChatGPT, OpenAI, source code, vulnerability / SecurityTicks

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code 2026-09-18 at 15:45 By Eduard Kovacs Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. The post AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code Read More »

23 Million User Records Compromised in Gyazo Data Breach

data breach, Data Breaches, Gyazo, images / SecurityTicks

23 Million User Records Compromised in Gyazo Data Breach 2026-09-18 at 14:38 By Eduard Kovacs Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access. The post 23 Million User Records Compromised in Gyazo Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

23 Million User Records Compromised in Gyazo Data Breach Read More »

Larry Ellison’s about-face on an Oracle stock sale sparks chatter in Silicon Valley, Hollywood

Uncategorized / SecurityTicks

Larry Ellison’s about-face on an Oracle stock sale sparks chatter in Silicon Valley, Hollywood 2026-09-18 at 14:00 By Charles Gasparino Was this Ellison being crazy like a fox? This article is an excerpt from Latest Technology News | New York Post View Original Source

Larry Ellison’s about-face on an Oracle stock sale sparks chatter in Silicon Valley, Hollywood Read More »

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

AI, Artificial Intelligence, Azure, Cloud, cloud security, Copilot, Featured, Microsoft, patches, Vulnerabilities, vulnerability / SecurityTicks

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products 2026-09-18 at 13:57 By Eduard Kovacs Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority. The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Patches 18 Vulnerabilities in AI, Cloud Products Read More »

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage

Uncategorized / SecurityTicks

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage 2026-09-18 at 13:40 By Cybersecurity researchers have discovered a cluster of 13 npm packages that have been found to deliver a previously undocumented JavaScript stealer codenamed WeaselBiscuit. The new malware family, per OpenSourceMalware, exhibits functional overlaps with two malware strains associated with the […]

WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage Read More »

Bots with good manners are better at fooling people on social media

bot, Don't miss, Hot stuff, News, social media, Study, Surfshark / SecurityTicks

Bots with good manners are better at fooling people on social media 2026-09-18 at 13:15 By Sinisa Markovic Most people can’t tell a bot from a human online, and the bots most likely to fool them are the polite ones, according to a new Surfshark study. The company analyzed 1,722 participants worldwide, testing their ability […]

Bots with good manners are better at fooling people on social media Read More »

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

Brevo, ClickFix, Featured, Malware, Malware & Threats, supply chain attack, Supply Chain Security, WordPress / SecurityTicks

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites 2026-09-18 at 12:46 By Ionut Arghire Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts. The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Brevo Supply Chain Attack Injects Malware Into 100,000 Websites Read More »

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer

Uncategorized / SecurityTicks

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer 2026-09-18 at 12:40 By A financially motivated threat actor has been linked to the development and distribution of a JavaScript (JS)-based information stealer known as PhantomRaven via the npm package registry. “The developer likely wrote the malware using a large language model (LLM), […]

Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer Read More »

Stablecoin payments firm dtcpay closes $25M round with SBI backing

Beyond 1999: The Case for AI-Augmented Vulnerability Orchestration

Uncategorized / SecurityTicks

Beyond 1999: The Case for AI-Augmented Vulnerability Orchestration 2026-09-18 at 12:00 By Threat actors use AI and automation to weaponize flaws in milliseconds. Meanwhile, defensive teams remain shackled to spreadsheets, ticket chains, and 30-day approval cycles. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Beyond 1999: The Case for AI-Augmented Vulnerability Orchestration Read More »

Arcjet brings security controls and audit trails to AI agents

Industry news / SecurityTicks

Arcjet brings security controls and audit trails to AI agents 2026-09-18 at 11:55 By Industry News Arcjet has launched agent runtime security, a new product that helps engineering teams secure the AI agents they are building while giving security teams the governance and compliance evidence they need. Arcjet brings observability, enforcement, and audit capabilities across […]

Arcjet brings security controls and audit trails to AI agents Read More »

Binance brushes off Lagarde MiCA speculation, reaffirms Europe commitment

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched

agentic AI, AI, Claude Code, Don't miss, GitHub, Hot stuff, News, vulnerability / SecurityTicks

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched 2026-09-18 at 11:49 By Sinisa Markovic Four major AI coding agents, Claude Code, Codex, GitHub Copilot and Gemini CLI, all share the same zero-click RCE vulnerability, one that could give an attacker the same reach into a company’s systems and data as the […]

Zero-click RCE vulnerability hit four major AI coding agents, two remain unpatched Read More »

Bitcoin cycle bottom may already be in at $58K, says analyst James Check

markets / SecurityTicks

Bitcoin cycle bottom may already be in at $58K, says analyst James Check 2026-09-18 at 11:47 By Cointelegraph by Ezra Reguerra Onchain analyst James Check says Bitcoin may have bottomed near $58,000 after two capitulations and warns against anchoring to an October low. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin cycle bottom may already be in at $58K, says analyst James Check Read More »

Critical Orkes Conductor Vulnerability Exploited in Attacks

exploited, Orkes, Vulnerabilities, vulnerability / SecurityTicks

Critical Orkes Conductor Vulnerability Exploited in Attacks 2026-09-18 at 11:42 By Ionut Arghire CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions. The post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical Orkes Conductor Vulnerability Exploited in Attacks Read More »

Android apps can now check security patches down to individual device components

Android, cybersecurity, Google, News, patching, security update / SecurityTicks

Android apps can now check security patches down to individual device components 2026-09-18 at 11:38 By Anamarija Pogorelec New AndroidX Security State libraries provide a more granular way to determine how securely patched an Android device is. The stable Security State v1.1.0 and Security State Provider v1.0.0 libraries allow developers to check the security status […]

Android apps can now check security patches down to individual device components Read More »

MIND Secures $72 Million for AI-Powered DLP

Cybersecurity Funding, Data Protection, data security, funding, MIND / SecurityTicks

MIND Secures $72 Million for AI-Powered DLP 2026-09-18 at 10:25 By Ionut Arghire The company will use the funding to accelerate platform development and expand its presence in key enterprise markets. The post MIND Secures $72 Million for AI-Powered DLP appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

MIND Secures $72 Million for AI-Powered DLP Read More »

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root

Uncategorized / SecurityTicks

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root 2026-09-18 at 10:21 By A critical vulnerability in Check Point’s Security Management and Log Servers could allow an attacker without login credentials to run code as root on those servers over the network. The Security Management Server is the system that controls firewall […]

Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root Read More »

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories

Uncategorized / SecurityTicks

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories 2026-09-18 at 10:21 By Attackers keep finding new keys. The funny part is that defenders keep inventing where to store them. This week, those keys sit in AI tools, exposed services, old bugs, weak logins, and software sold like a monthly […]

ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories Read More »

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files

Uncategorized / SecurityTicks

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files 2026-09-18 at 10:21 By Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape the project directory shared into it and read or change files anywhere else on the host, Docker warns in a security announcement on September 15. The […]

Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files Read More »