2026 - Security Ticks

How Financial Services Companies Can Modernize Their Software Supply Chain

How Financial Services Companies Can Modernize Their Software Supply Chain 2026-10-01 at 14:45 By Every security leader at a bank, insurer, or asset manager has had a version of this conversation: Security wants to eliminate a class of vulnerabilities. Engineering explains what it would take to upgrade the platform where they live. Somebody prices out […]

How Financial Services Companies Can Modernize Their Software Supply Chain Read More »

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates

Uncategorized / SecurityTicks

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates 2026-10-01 at 14:34 By OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models. A “core cluster of the activity,” going back to the first week of July, has […]

OpenAI Disrupts Reasoning Extraction Campaign Linked to Moonshot AI Associates Read More »

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV

Uncategorized / SecurityTicks

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV 2026-10-01 at 14:34 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation. The vulnerability, tracked as CVE-2026-76504 (CVSS score: 9.8), […]

CISA Adds Exploited Cisco Catalyst SD-WAN Manager Auth Bypass to KEV Read More »

Armadin raises $255.5 million to expand AI offensive security platform

Industry news / SecurityTicks

Armadin raises $255.5 million to expand AI offensive security platform 2026-10-01 at 14:16 By Industry News Armadin has raised $255.5 million in Series B funding co-led by Andreessen Horowitz (a16z) and Accel that brings the company’s valuation to over $2.5 billion. The round includes participation from new investors Bain Capital Ventures (BCV) and Redpoint. Existing […]

Armadin raises $255.5 million to expand AI offensive security platform Read More »

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

cybercrime, Malware, Ploutus, Sanctions, Tracking & Law Enforcement, Treasury / SecurityTicks

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network 2026-10-01 at 13:51 By Eduard Kovacs The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme. The post Treasury Blacklists Most-Wanted ATM Malware Developer and His Network appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network Read More »

Tokenized assets don’t always mirror traditional markets, Dune finds

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

AI, Artificial Intelligence, DIVD, exploited, Incident Response, Vulnerabilities, Zammad, Zero-Day / SecurityTicks

Zammad Zero-Days Exploited in AI-Powered DIVD Hack 2026-10-01 at 13:42 By Ionut Arghire The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zammad Zero-Days Exploited in AI-Powered DIVD Hack Read More »

Bitcoin trapped below $86K as PCE changes cloud inflation reading

markets / SecurityTicks

Bitcoin trapped below $86K as PCE changes cloud inflation reading 2026-10-01 at 13:30 By Cointelegraph by William Suberg Bitcoin erased its post-PCE gains as analysts cautioned that methodology changes complicated the lower-than-expected inflation reading. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin trapped below $86K as PCE changes cloud inflation reading Read More »

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504)

0-day, Cisco, Don't miss, exploit, Hot stuff, News / SecurityTicks

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) 2026-10-01 at 13:18 By Zeljka Zorz For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a […]

New Cisco SD-WAN zero-day exploited in-the-wild (CVE-2026-76504) Read More »

Binance’s EU services face scrutiny over licensing exemption: Report

Tech companies launching their own programs to train grads because they ‘can’t rely’ on Ivy Leagues

Uncategorized / SecurityTicks

Tech companies launching their own programs to train grads because they ‘can’t rely’ on Ivy Leagues 2026-10-01 at 13:00 By Lydia Moynihan “It used to be the case that you could rely on somebody who went to an Ivy or Ivy-equivalent to be top notch,” said Palantir’s Jordan Hirsch. “But that’s not the case anymore.” […]

Tech companies launching their own programs to train grads because they ‘can’t rely’ on Ivy Leagues Read More »

Some car apps are slipping owners’ data to big tech companies

connected cars, data collection, Don't miss, Hot stuff, News, Privacy, research / SecurityTicks

Some car apps are slipping owners’ data to big tech companies 2026-10-01 at 12:52 By Sinisa Markovic The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification […]

Some car apps are slipping owners’ data to big tech companies Read More »

500,000 Active Credentials Left Exposed on GitHub

Application Security, Data leak, Data Protection, GitHub, Identity & Access, secrets scanning, secrets sprawl / SecurityTicks

500,000 Active Credentials Left Exposed on GitHub 2026-10-01 at 12:43 By Ionut Arghire Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default. The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

500,000 Active Credentials Left Exposed on GitHub Read More »

Chainalysis beats most Celsius claims, but ‘audit’ lawsuit survives

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Cisco, exploited, SD-WAN, Vulnerabilities, Zero-Day / SecurityTicks

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability 2026-10-01 at 11:26 By Ionut Arghire The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability Read More »

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders

AI, Artificial Intelligence, Featured, Gemini, Gemini 4 Argon, Google / SecurityTicks

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders 2026-10-01 at 10:52 By Eduard Kovacs The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide. The post Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders appeared first on SecurityWeek. This article is […]

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders Read More »

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version

Uncategorized / SecurityTicks

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version 2026-10-01 at 10:49 By Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cyber defenders through its Fairwind Program. “It delivers frontier performance in complex […]

Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version Read More »

Sentinel Envelope Plus adds software protection without source code changes

Industry news, Thales / SecurityTicks

Sentinel Envelope Plus adds software protection without source code changes 2026-10-01 at 10:38 By Industry News Thales has announced Sentinel Envelope Plus, a new addition to its Sentinel Envelope software protection solution that significantly hardens compiled applications against AI-assisted reverse engineering, automated zero-day vulnerability discovery, and automated exploit generation. Sentinel Envelope Plus applies multiple layers […]

Sentinel Envelope Plus adds software protection without source code changes Read More »

BlackFog adds prompt protection and governance for agentic AI

BlackFog, Industry news / SecurityTicks

BlackFog adds prompt protection and governance for agentic AI 2026-10-01 at 10:25 By Industry News BlackFog has announced the launch of ADX Vision 2.0, expanding its AI security capabilities to help organizations govern and control the use of generative and agentic AI across the enterprise. As employees move from simply interacting with AI tools to […]

BlackFog adds prompt protection and governance for agentic AI Read More »

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path

Uncategorized / SecurityTicks

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path 2026-10-01 at 08:54 By Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that […]

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path Read More »