2026 - Security Ticks

UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks

UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks 2026-09-15 at 16:33 By Industry News UltraViolet Cyber has announced the launch of Equinox, its proprietary detection engineering platform, built and operated by the Threat Intelligence & Detection Engineering (TIDE) team. Equinox maximizes detection coverage across customers’ Security Information and Event Management (SIEM) and Endpoint Detection […]

UltraViolet Cyber Equinox measures detection coverage against MITRE frameworks Read More »

Thai Broadband Provider Hacked via Fortinet Vulnerability

3BB, exploited, Fortinet, Malware & Threats, Thailand / SecurityTicks

Thai Broadband Provider Hacked via Fortinet Vulnerability 2026-09-15 at 16:33 By Ionut Arghire The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools. The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Thai Broadband Provider Hacked via Fortinet Vulnerability Read More »

Globalgig expands managed security portfolio to protect enterprise AI

Industry news / SecurityTicks

Globalgig expands managed security portfolio to protect enterprise AI 2026-09-15 at 16:21 By Industry News Globalgig has expanded its managed security portfolio to cover enterprise AI, bringing together services that discover, assess, and protect the AI applications, agents, models, and data enterprises are putting into production. The services are delivered through the same managed model […]

Globalgig expands managed security portfolio to protect enterprise AI Read More »

eBook: Identity-First Threat Intelligence

Enzoic, News, Whitepapers and webinars / SecurityTicks

eBook: Identity-First Threat Intelligence 2026-09-15 at 16:00 By Help Net Security Attackers increasingly bypass traditional defenses by logging in with credentials that have already been stolen, exposed, or sold on the Dark Web. As infostealer malware accelerates credential theft, organizations need greater visibility into identity risk across Active Directory, IAM, and authentication environments. Download the […]

eBook: Identity-First Threat Intelligence Read More »

Ransomware Doesn’t Just Break Systems. It Breaks People.

Uncategorized / SecurityTicks

Ransomware Doesn’t Just Break Systems. It Breaks People. 2026-09-15 at 16:00 By The most enduring impact of ransomware attacks is human: stress, fear, job loss, and long-term consequences that rarely show up in incident reports. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Ransomware Doesn’t Just Break Systems. It Breaks People. Read More »

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks

AI, cybercrime, News, Sophos / SecurityTicks

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks 2026-09-15 at 15:32 By Sinisa Markovic A new AI subscription service called Luciferus is being marketed on a hacking forum as an alternative to jailbreaking ChatGPT or Claude, Sophos found. The Counter Threat Unit (CTU) spotted the advertisement on August 24 on […]

Uncensored AI sold on hacking forum as alternative to ChatGPT and Claude jailbreaks Read More »

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds

Uncategorized / SecurityTicks

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds 2026-09-15 at 14:52 By With artificial intelligence (AI) shrinking the window between vulnerability discovery and exploitation and lowering the barrier to entry for bad actors, new findings from Sysdig show that skilled human operators can move just as swiftly after gaining initial access. In […]

Human Attacker Exploits Marimo RCE, Reaches SSH Bastion in Eight Seconds Read More »

240,000 Hit by Data Breach at Japan’s Digital Agency

data breach, Data Breaches, Government, Japan, VPN / SecurityTicks

240,000 Hit by Data Breach at Japan’s Digital Agency 2026-09-15 at 14:45 By Ionut Arghire Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people. The post 240,000 Hit by Data Breach at Japan’s Digital Agency appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

240,000 Hit by Data Breach at Japan’s Digital Agency Read More »

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point

Uncategorized / SecurityTicks

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point 2026-09-15 at 14:26 By Introduction Security teams have gotten pretty good at testing against what can hurt them. Can this EDR agent catch this payload? Will my organization fail the phishing simulation? Does this SIEM rule fire on this particular technique? And, […]

Attack Chains, Not Just Attack Surfaces: Why Testing Individual Techniques Misses the Point Read More »

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers

Uncategorized / SecurityTicks

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers 2026-09-15 at 14:12 By Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data. The first is an automated effort aimed at internet-exposed Vite development servers that’s designed to steal cloud credentials, configurations from Amazon […]

Mass-Scanning Campaign Exploits Vite Flaw to Extract Cloud Credentials From Exposed Dev Servers Read More »

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)

0-day, Cisco, Don't miss, email security, enterprise, Hot stuff, News, SMBs / SecurityTicks

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) 2026-09-15 at 14:09 By Zeljka Zorz Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident Response Team became aware of active exploitation of this vulnerability in September 2025, and has shared […]

Cisco patches actively exploited email gateway zero-day (CVE-2026-76461) Read More »

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases

apple, Featured, iOS, iOS 27, macOS, macOS Golden Gate 27, patches, Vulnerabilities, vulnerability / SecurityTicks

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases 2026-09-15 at 14:06 By Ionut Arghire The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks. The post Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases appeared first on […]

Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases Read More »

Microsoft sets security and safety rules for its AI models

agentic AI, AI, cybersecurity, framework, guidelines, Microsoft, News / SecurityTicks

Microsoft sets security and safety rules for its AI models 2026-09-15 at 13:50 By Anamarija Pogorelec Microsoft AI has published the first draft of its Humanist AI Code of Conduct, a training manual outlining how it develops AI models and intends them to behave during deployment. The draft is open for public consultation for six […]

Microsoft sets security and safety rules for its AI models Read More »

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

cybercrime, Don't miss, Hot stuff, Hudson Rock, Malware, News, social engineering / SecurityTicks

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz 2026-09-15 at 13:10 By Sinisa Markovic Attackers compromised the verified official HBO Max Reddit account, u/hbomax, and used its trusted advertising status to launch a ClickFix campaign targeting macOS and Windows devices with information-stealing malware. Screenshot of the fraudulent ad (Source: Alex Cutts) ClickFix has […]

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz Read More »

US House crypto tax package omits mining, staking reward deferral

US seeks $61M in USDT allegedly tied to sanctioned Iranian oil sales

Ethereum, Base wallet standards talks fail, Ethlabs researcher says

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints

AI, Artificial Intelligence, Code of Conduct, Microsoft / SecurityTicks

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints 2026-09-15 at 12:40 By Eduard Kovacs The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability. The post Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints appeared first on SecurityWeek. […]

Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints Read More »

Bitcoin short-term holders hit 30-day profit streak as bull-market odds improve: CryptoQuant

markets / SecurityTicks

Bitcoin short-term holders hit 30-day profit streak as bull-market odds improve: CryptoQuant 2026-09-15 at 12:30 By Cointelegraph by William Suberg Bitcoin short-term holders approached a full month in partial profit as analysis saw improving odds of an enduring bullish BTC price reversal. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin short-term holders hit 30-day profit streak as bull-market odds improve: CryptoQuant Read More »

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack

ClickFix, Mac malware, malvertising, Malware, Malware & Threats, Reddit / SecurityTicks

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack 2026-09-15 at 12:09 By Ionut Arghire Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware. The post Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack appeared first on SecurityWeek. This article is […]

Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack Read More »