2026 - Security Ticks

In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware

In Other News, Malware & Threats / SecurityTicks

In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware 2026-04-03 at 17:52 By SecurityWeek News Other noteworthy stories that might have slipped under the radar: Symantec vulnerability, anti-ClickFix mechanism added to macOS, FBI hack classified as major incident. The post In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit […]

In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware Read More »

Critical ShareFile Flaws Lead to Unauthenticated RCE

ShareFile, Vulnerabilities, vulnerability / SecurityTicks

Critical ShareFile Flaws Lead to Unauthenticated RCE 2026-04-03 at 17:52 By Ionut Arghire The vulnerabilities can be chained together to bypass authentication and upload arbitrary files to the server. The post Critical ShareFile Flaws Lead to Unauthenticated RCE appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical ShareFile Flaws Lead to Unauthenticated RCE Read More »

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack

Uncategorized / SecurityTicks

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack 2026-04-03 at 17:52 By The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman said the attackers tailored their social […]

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack Read More »

Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture

Uncategorized / SecurityTicks

Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture 2026-04-03 at 17:52 By The next major breach hitting your clients probably won’t come from inside their walls. It’ll come through a vendor they trust, a SaaS tool their finance team signed up for, or a subcontractor nobody in IT knows about. That’s the new attack […]

Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture Read More »

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches

certificates, Microsoft, News, tips, Windows / SecurityTicks

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches 2026-04-03 at 14:57 By Anamarija Pogorelec Microsoft’s Secure Boot certificates, issued in 2011, are approaching expiration in 2026. To help IT administrators track whether devices have received replacement certificates, Microsoft has added new status indicators to the Windows Security app, under Device […]

Windows Security app gets Secure Boot certificate status indicators as 2026 expiration approaches Read More »

It’s not just Florida and Texas that threaten NYC’s sputtering tax base — here’s the next big worry

Uncategorized / SecurityTicks

It’s not just Florida and Texas that threaten NYC’s sputtering tax base — here’s the next big worry 2026-04-03 at 14:31 By Charles Gasparino Prospective investors in the city’s current and future debt note there will likely be less of a population to tax. This article is an excerpt from Latest Technology News | New […]

It’s not just Florida and Texas that threaten NYC’s sputtering tax base — here’s the next big worry Read More »

Drift sends onchain message to wallets tied to $280M exploit

South Korean brokerage Korea Investment & Securities eyes Coinone stake: Report

When a billboard survives the wind, but not the boot

Uncategorized / SecurityTicks

When a billboard survives the wind, but not the boot 2026-04-03 at 14:30 By Richard Speed This GRUB is not an advert for some tasty fried food Bork!Bork!Bork! It’s one thing to bare your undercarriage in private. It’s a whole other thing to do so on the side of a road, risking the possibility that […]

When a billboard survives the wind, but not the boot Read More »

Claude Code source leak exploited to spread malware

Anthropic, Claude Code, Data leak, Don't miss, Hot stuff, Malware, News, Zscaler / SecurityTicks

Claude Code source leak exploited to spread malware 2026-04-03 at 14:30 By Sinisa Markovic A source code leak involving Anthropic’s Claude Code tool quickly escalated into a cybersecurity threat, as attackers seized on the exposed files to lure developers into downloading malware disguised as “unlocked” versions of the software. Leaked Claude Code source code used […]

Claude Code source leak exploited to spread malware Read More »

Stakeholder Confidence in the Age of Digital Threats: PR as a Security Asset

Uncategorized / SecurityTicks

Stakeholder Confidence in the Age of Digital Threats: PR as a Security Asset 2026-04-03 at 14:30 By Every cyber incident also creates a communication challenge that directly affects stakeholder confidence. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Stakeholder Confidence in the Age of Digital Threats: PR as a Security Asset Read More »

Mobile Attack Surface Expands as Enterprises Lose Control

attack surface management, mobile, Mobile & Wireless, Threat Intelligence / SecurityTicks

Mobile Attack Surface Expands as Enterprises Lose Control 2026-04-03 at 14:30 By Kevin Townsend Shadow AI embedded in everyday apps, combined with outdated mobile devices and zero-click exploits, is creating a new and largely unseen mobile risk. The post Mobile Attack Surface Expands as Enterprises Lose Control appeared first on SecurityWeek. This article is an […]

Mobile Attack Surface Expands as Enterprises Lose Control Read More »

React2Shell Exploited in Large-Scale Credential Harvesting Campaign

Malware & Threats, React2Shell, UAT-10608 / SecurityTicks

React2Shell Exploited in Large-Scale Credential Harvesting Campaign 2026-04-03 at 14:30 By Ionut Arghire Using automated scanning and the Nexus Listener collection framework, the hackers compromised over 750 systems. The post React2Shell Exploited in Large-Scale Credential Harvesting Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

React2Shell Exploited in Large-Scale Credential Harvesting Campaign Read More »

T-Mobile Sets the Record Straight on Latest Data Breach Filing

data breach, Data Breaches, T-Mobile / SecurityTicks

T-Mobile Sets the Record Straight on Latest Data Breach Filing 2026-04-03 at 14:30 By Eduard Kovacs The cybersecurity incident involved an insider and had a limited impact, the telecoms giant told SecurityWeek. The post T-Mobile Sets the Record Straight on Latest Data Breach Filing appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

T-Mobile Sets the Record Straight on Latest Data Breach Filing Read More »

North Korean Hackers Drain $285 Million From Drift in 10 Seconds

Cryptocurrency, cryptocurrency heist, cybercrime, drift, Featured, North Korea / SecurityTicks

North Korean Hackers Drain $285 Million From Drift in 10 Seconds 2026-04-03 at 14:30 By Ionut Arghire The attackers prepared infrastructure and multiple nonce-based transactions, took over an admin key, and drained five vaults. The post North Korean Hackers Drain $285 Million From Drift in 10 Seconds appeared first on SecurityWeek. This article is an […]

North Korean Hackers Drain $285 Million From Drift in 10 Seconds Read More »

New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images

Uncategorized / SecurityTicks

New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images 2026-04-03 at 14:30 By Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple App Store and Google Play Store, more than a year after the trojan was discovered targeting both the mobile operating systems. The malware has been found to conceal itself within seemingly […]

New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images Read More »

Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK

Uncategorized / SecurityTicks

Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK 2026-04-03 at 12:15 By Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security incident that took place on April 1, 2026. “Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a […]

Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK Read More »

Crypto hackers steal $169M from 34 DeFi protocols in Q1: DefiLlama

TrendAI Insight: New U.S. National Cyber Strategy

Trend Micro Research : Articles, News, Reports, Trend Micro Research : Artificial Intelligence (AI), Trend Micro Research : Compliance & Risks, Trend Micro Research : Latest News, Trend Micro Research : Network / SecurityTicks

TrendAI Insight: New U.S. National Cyber Strategy 2026-04-03 at 11:01 By TrendAI reviews the White House National Cyber Strategy, outlining six pillars to strengthen U.S. cybersecurity—from deterrence and regulation to federal modernization, critical infrastructure protection, AI leadership, and workforce development. This article is an excerpt from Trend Micro Research, News and Perspectives View Original Source

TrendAI Insight: New U.S. National Cyber Strategy Read More »

APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance

APERION, Industry news / SecurityTicks

APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance 2026-04-03 at 11:01 By Industry News APERION launched SmartFlow SDK, providing a secure, on-premises path for enterprises migrating away from compromised cloud-based AI gateways. The launch coincides with a 200% increase in web traffic since the March 24 LiteLLM supply chain attack that […]

APERION releases SmartFlow SDK for secure, on-prem AI governance without cloud reliance Read More »