2026 - Security Ticks

Citrix UniconOS dual boot turns Windows endpoints into their own recovery device

Citrix UniconOS dual boot turns Windows endpoints into their own recovery device 2026-08-25 at 16:19 By Industry News Citrix announced Citrix UniconOS dual boot, a new endpoint resiliency capability designed to help organizations recover access to work in minutes — without spare hardware, central reimaging or prolonged business downtime. Available now as part of Citrix […]

Citrix UniconOS dual boot turns Windows endpoints into their own recovery device Read More »

Fideo Lens reveals connections across identities, accounts and devices

Industry news / SecurityTicks

Fideo Lens reveals connections across identities, accounts and devices 2026-08-25 at 16:13 By Industry News Fideo Intelligence introduced Fideo Lens, an investigative intelligence platform that helps fraud and financial crime teams discover hidden relationships among identities, accounts, devices and behaviors. Starting with a single identity signal, investigators can use Fideo Lens to visualize and connect […]

Fideo Lens reveals connections across identities, accounts and devices Read More »

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update

account security, Identity & Access, passkey, WhatsApp / SecurityTicks

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update 2026-08-25 at 16:00 By Eduard Kovacs When Android users get a call from a non-contact, they will see more information about the caller, including their country. The post WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update appeared first on SecurityWeek. This […]

WhatsApp Adds Multiple Passkeys and Stronger 2SV in Account Security Update Read More »

Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference

ICS, ICS/OT, OT, training / SecurityTicks

Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference 2026-08-25 at 15:57 By Mike Lennon Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville. The post Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Hands-On Cyber-Physical Systems Training Returns to ICS Cybersecurity Conference Read More »

Fake OpenAI Codex download tricks macOS users into installing malware

Cato Networks, Google, macOS, Malware, News, OpenAI, social engineering / SecurityTicks

Fake OpenAI Codex download tricks macOS users into installing malware 2026-08-25 at 15:40 By Sinisa Markovic A malware campaign using a sponsored search ad and a fake OpenAI Codex download page to trick macOS users into pasting a malicious command into Terminal has been uncovered by Cato Networks. It’s a variation of ClickFix, a popular […]

Fake OpenAI Codex download tricks macOS users into installing malware Read More »

Over a third of webpages created after ChatGPT’s debut show signs of AI writing, study finds

Uncategorized / SecurityTicks

Over a third of webpages created after ChatGPT’s debut show signs of AI writing, study finds 2026-08-25 at 15:00 By Zoe Hussain More than one-third — 35% — of webpages created after the launch of ChatGPT in 2022 show signs of AI authorship, a Pew Research Center anaylsis found. This article is an excerpt from […]

Over a third of webpages created after ChatGPT’s debut show signs of AI writing, study finds Read More »

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows

Uncategorized / SecurityTicks

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows 2026-08-25 at 14:56 By Thousands of companies have been affected by the Mirage2FA campaign from 2024 to 2026. The commercial phishing-as-a-service toolkit targets Microsoft 365 accounts by abusing legitimate login flows and bypassing two-factor authentication. According to ANY.RUN research, 48% of targeted […]

Mirage2FA Surge Hits 4,500 US and EU Companies, Abusing Microsoft 365 Login Flows Read More »

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

Uncategorized / SecurityTicks

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages 2026-08-25 at 14:52 By Cybersecurity researchers have disclosed details of a new campaign that uses a cluster of 24 npm packages as free phishing infrastructure for redirecting to ClickFix-style fake CAPTCHA pages. “While the malware is simply a single HTML page inside the […]

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages Read More »

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands

Uncategorized / SecurityTicks

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands 2026-08-25 at 14:33 By Cybersecurity researchers are calling attention to a new campaign that employs FTP banners as dead drop resolvers (DDRs) to deliver two previously unreported remote access trojans (RATs) tracked as E4del and PINHOLE. While threat actors are known to […]

E4del and PINHOLE RATs Turn FTP Banners Into Dead Drops for Malware Commands Read More »

First Malware Built Specifically for Car Head Units Fuels Botnet

Android malware, BadBox, botnet, car hacking, head unit, IoT Security, Malware & Threats / SecurityTicks

First Malware Built Specifically for Car Head Units Fuels Botnet 2026-08-25 at 14:18 By Eduard Kovacs Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices. The post First Malware Built Specifically for Car Head Units Fuels Botnet appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

First Malware Built Specifically for Car Head Units Fuels Botnet Read More »

Frontier AI: Vulnerability Management’s Systemic Revolution

Uncategorized / SecurityTicks

Frontier AI: Vulnerability Management’s Systemic Revolution 2026-08-25 at 14:14 By Vulnerability management has been a staple of security programs since the dawn of the cybersecurity discipline. The symbiotic relationship between vulnerability and patch management teams has also existed for that time and has gone through waves of contention and thankfulness. While this relationship required thoughtful […]

Frontier AI: Vulnerability Management’s Systemic Revolution Read More »

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks

CERT-PL, CISA, collaboration, Don't miss, email security, exploit, Hot stuff, News, Shadowserver, Synacor, vulnerability / SecurityTicks

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks 2026-08-25 at 13:03 By Zeljka Zorz At least 274 internet-facing Zimbra instances have been compromised by unknown attackers via CVE-2026-73570, the Shadowserver Foundation shared on Monday. About CVE-2026-73570 Zimbra Collaboration Suite (ZCS) is a communication and collaboration platform popular with organizations that need to have control over […]

Unpatched Zimbra servers are falling to CVE-2026-73570 attacks Read More »

Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff

Artificial Intelligence, China, NVIDIA / SecurityTicks

Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff 2026-08-25 at 13:01 By Associated Press AI infrastructure, including advanced semiconductors mostly made in Taiwan, has become a key point of competition between the U.S. and China. The post Taiwan Charges 9 Over Illegal AI Server Exports to China, […]

Taiwan Charges 9 Over Illegal AI Server Exports to China, Including Nvidia and Super Micro Staff Read More »

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access

Uncategorized / SecurityTicks

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access 2026-08-25 at 13:01 By Bad actors are attempting to exploit two severe unauthenticated authentication bypasses in the Xecurify miniOrange SAML 2.0 Single Sign On plugin that make it possible for an attacker to sign in as any WordPress user, including administrators. The vulnerabilities, as […]

Attackers Target miniOrange SAML Flaws That Can Grant WordPress Admin Access Read More »

Silent Patches Don’t Stop Attackers—They Blind Defenders

patches, Vulnerabilities / SecurityTicks

Silent Patches Don’t Stop Attackers—They Blind Defenders 2026-08-25 at 13:00 By Tod Beardsley Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. The post Silent Patches Don’t Stop Attackers—They Blind Defenders appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Silent Patches Don’t Stop Attackers—They Blind Defenders Read More »

Standard Chartered becomes first bank distributor of HKD stablecoin

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack

breach, News, phishing, ReliaQuest, social engineering, SOCRadar / SecurityTicks

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack 2026-08-25 at 12:24 By Sinisa Markovic Cybersecurity company ReliaQuest has confirmed that one of its own employees fell for a social engineering attack, handing attackers a password and a brief window into the company’s identity system. The admission came after the extortion group […]

ShinyHunters taunts ReliaQuest after its own employee falls for social engineering attack Read More »

Galaxy puts Coldcard hack losses at 1,789 BTC, with 87% unmoved

Business owner faces up to 280 years over $24M crypto Ponzi scheme

CISA Warns of Exploited Oracle WebLogic Vulnerability

CISA KEV, exploited, Oracle, Oracle WebLogic, Vulnerabilities, vulnerability / SecurityTicks

CISA Warns of Exploited Oracle WebLogic Vulnerability 2026-08-25 at 10:46 By Eduard Kovacs The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. The post CISA Warns of Exploited Oracle WebLogic Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA Warns of Exploited Oracle WebLogic Vulnerability Read More »