2026 - Security Ticks

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Ransomware, Threat Intelligence, Threat Report / SecurityTicks

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 2026-10-21 at 18:00 By Kevin Townsend Rapid7’s Q3 analysis finds high-severity flaws exploited within three days on average, while AI appeared in just 8% of tracked incidents. The post High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 appeared first on SecurityWeek. […]

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 Read More »

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports

Uncategorized / SecurityTicks

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports 2026-10-21 at 17:12 By Generative AI has changed what a malicious email looks like. Messages that once gave themselves away through clumsy wording, generic pretexts, and reused templates now arrive fluent, personalized, and unique to each recipient, and the behavioral signals email filters have […]

Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports Read More »

eMudhra security blunder left trusted CA signing keys exposed to anyone

apple, certificates, Google, Mozilla, News / SecurityTicks

eMudhra security blunder left trusted CA signing keys exposed to anyone 2026-10-21 at 17:11 By Sinisa Markovic Eight intermediate certificates issued by Indian certificate authority eMudhra were secured with private keys so weak that anyone could recover them from the public certificates in under a second. On its website, the company highlights that it has […]

eMudhra security blunder left trusted CA signing keys exposed to anyone Read More »

Meta’s Muse AI leaves users vulnerable to identity theft through simple security flaw — with over 6,800 links exposed: report

Uncategorized / SecurityTicks

Meta’s Muse AI leaves users vulnerable to identity theft through simple security flaw — with over 6,800 links exposed: report 2026-10-21 at 17:08 By Ben Cost Leaked links included loan applications with the requested amount, bank transaction details, a real estate investor’s internal performance report and a corporate revenue doc intended for the CEO. This […]

Meta’s Muse AI leaves users vulnerable to identity theft through simple security flaw — with over 6,800 links exposed: report Read More »

Solana’s Alpenglow launches on mainnet, targets 99% faster finality

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries

agentic AI, AI, cybersecurity, News, NVIDIA / SecurityTicks

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries 2026-10-21 at 16:52 By Anamarija Pogorelec NVIDIA’s OpenShell Reference Architecture is designed to help businesses control AI agents operating across enterprise infrastructure and local computing systems. It builds on NVIDIA’s existing OpenShell security software, combining it with hardware for running AI models, managing […]

NVIDIA unveils security architecture that can stop AI agents crossing set boundaries Read More »

PHP2Shell: Critical PHP vulnerabilities patched, update now!

Cloudflare, CVE, CVSS, cybersecurity, Don't miss, Hot stuff, News, patch, PHP, security update, UK NCSC, vulnerability / SecurityTicks

PHP2Shell: Critical PHP vulnerabilities patched, update now! 2026-10-21 at 16:51 By Mirko Zorz The PHP development team has released emergency security updates to fix PHP2Shell, two critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that could let attackers execute code remotely on web servers without logging in. The fixes are in PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, and […]

PHP2Shell: Critical PHP vulnerabilities patched, update now! Read More »

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

AI, Asymptote Labs, Cybersecurity Funding, funding / SecurityTicks

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security 2026-10-21 at 16:17 By SecurityWeek News Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform. The post Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security appeared first on SecurityWeek. This article […]

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security Read More »

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands

Uncategorized / SecurityTicks

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands 2026-10-21 at 16:15 By Google on Tuesday said it’s rolling out improved safeguards in its Chrome browser to secure users against ClickFix attacks when Enhanced Protection is enabled. ClickFix is a popular social engineering technique in which bad actors trick users into copying […]

Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands Read More »

Human Expertise at the Speed of AI: SentinelOne Names LevelBlue its Global Exclusive Delivery Partner for Wayfinder

Artificial Intelligence, News / SecurityTicks

Human Expertise at the Speed of AI: SentinelOne Names LevelBlue its Global Exclusive Delivery Partner for Wayfinder 2026-10-21 at 16:15 By Today, SentinelOne named LevelBlue its global exclusive delivery partner for Wayfinder, SentinelOne’s suite of AI-powered managed security and threat detection services. This article is an excerpt from LevelBlue Blog View Original Source

Human Expertise at the Speed of AI: SentinelOne Names LevelBlue its Global Exclusive Delivery Partner for Wayfinder Read More »

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

Chrome, memory corruption, patch, Vulnerabilities, vulnerability / SecurityTicks

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes 2026-10-21 at 15:57 By Ionut Arghire The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities. The post Memory Bugs Account for Most of Chrome’s 353 New Security Fixes appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes Read More »

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

AI, Artificial Intelligence, OpenAI / SecurityTicks

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor 2026-10-21 at 15:34 By Eduard Kovacs In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it. The post OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor appeared first on SecurityWeek. This article is […]

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor Read More »

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors

Uncategorized / SecurityTicks

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors 2026-10-21 at 15:05 By Cybersecurity researchers have disclosed details of a previously undocumented China-aligned threat cluster known as Bronze Sandcastle that has been observed targeting organizations in Asia and Africa since mid-2025. “The most distinctive technical marker for Bronze Sandcastle is its consistent use of […]

China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors Read More »

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

CA, certificate, certificate authority, eMudhra, Risk Management / SecurityTicks

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys 2026-10-21 at 14:22 By Ionut Arghire The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them. The post Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys Read More »

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June

Don't miss, Hot stuff, News, Palo Alto Networks, Ransomware, Rapid7, ReliaQuest, VPN, vulnerability / SecurityTicks

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June 2026-10-21 at 14:13 By Sinisa Markovic Several ransomware groups are exploiting CVE-2026-0257, an authentication bypass in Palo Alto Networks’ PAN-OS GlobalProtect patched in May, to break into organizations in sectors ranging from healthcare and education to government and energy. CVE-2026-0257 stems from the […]

Ransomware gangs have been exploiting Palo Alto GlobalProtect VPN flaw since June Read More »

China Defends DeepSeek After US Ban of Its AI From Government Systems

Artificial Intelligence, Ban, China, controversy, DeepSeek, US / SecurityTicks

China Defends DeepSeek After US Ban of Its AI From Government Systems 2026-10-21 at 13:54 By Associated Press The DHS said agencies should remove DeepSeek products as well as third-party products and services developed using DeepSeek from their IT systems. The post China Defends DeepSeek After US Ban of Its AI From Government Systems appeared […]

China Defends DeepSeek After US Ban of Its AI From Government Systems Read More »

PancakeSwap TVL tops $380M as major fee overhaul heads to vote

markets / SecurityTicks

PancakeSwap TVL tops $380M as major fee overhaul heads to vote 2026-10-21 at 13:50 By Cointelegraph by Ezra Reguerra PancakeSwap’s proposed fee-sharing overhaul would give liquidity providers 88% of swap fees and cut CAKE emissions by 69%, as BNB Chain’s DeFi activity expands. This article is an excerpt from Cointelegraph.com News View Original Source

PancakeSwap TVL tops $380M as major fee overhaul heads to vote Read More »

France proposes liability for crypto exchanges offering DeFi access

Bitcoin ‘top buyers’ halt BTC price upside with $87.7K now key: Glassnode

markets / SecurityTicks

Bitcoin ‘top buyers’ halt BTC price upside with $87.7K now key: Glassnode 2026-10-21 at 13:39 By Cointelegraph by William Suberg Bitcoin price current resistance near $87,000 was reinforced by investors who bought BTC in late 2025, per new research. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin ‘top buyers’ halt BTC price upside with $87.7K now key: Glassnode Read More »

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t

Uncategorized / SecurityTicks

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn't 2026-10-21 at 13:36 By You cannot fully block the two critical PHP flaws called PHP2Shell before today’s fix, and the one setting being passed around as a workaround is not enough on its own, the security firm that suggested it […]

PHP2Shell: What Actually Protects You Before the 14:00 UTC PHP RCE Patch, and What Doesn’t Read More »