SecurityTicks

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day

cybersecurity, Don't miss, extortion, FBI, Hot stuff, News, Oracle /

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day 2026-09-28 at 16:56 By Zeljka Zorz The FBI’s online portals for job applicants (at apply.fbijobs.gov) and special agent applicants (at fbijobs.gov/special-agents) are still unavailable, following what appears to be successful compromises by the ShinyHunters cyber extortion group. Last week, the United States’ domestic […]

FBI job portals remain offline after ShinyHunters claims breach via PeopleSoft zero-day Read More »

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data

AI, Don't miss, Hot stuff, Microsoft, News, vulnerability disclosure /

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data 2026-09-28 at 16:50 By Sinisa Markovic A flaw in Titan, an internal Microsoft analytics service, could have let an attacker read employee records and Bing search analytics, a 16-year-old security researcher has disclosed. The researcher, who goes by Faav, found […]

16-year-old researcher breaks into Microsoft analytics service with access to 17 trillion rows of data Read More »

Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl

attack surface management /

Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl 2026-09-28 at 16:28 By Ashish Khaitan Cloud infrastructure now changes by the hour, yet many security teams still map their external attack surface once a quarter or once a year. That mismatch creates blind spots that can last for months.   […]

Attack Surface Management in 2026: Why Point-in-Time Scans Can’t Keep Up With Cloud Sprawl Read More »

Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon

Cameron John Wagenius, cybercrime, hacker, sentenced /

Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon 2026-09-28 at 15:36 By Ionut Arghire Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers. The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek. This article is an […]

Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon Read More »

Other users can watch your browsing and time your keystrokes through OS file notifications

apple, Don't miss, Linux, macOS, News, Privacy, research, Windows /

Other users can watch your browsing and time your keystrokes through OS file notifications 2026-09-28 at 15:14 By Anamarija Pogorelec Researchers at Graz University of Technology have used the file-notification systems in Windows, Linux, and macOS to spy on activity in other accounts. On Windows, a standard unprivileged account detected 95.7 percent of another user’s […]

Other users can watch your browsing and time your keystrokes through OS file notifications Read More »

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI

Uncategorized /

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI 2026-09-28 at 14:58 By AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systems—often without the same controls applied to human users. According to Okta’s […]

Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI Read More »

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

Uncategorized /

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent 2026-09-28 at 14:46 By Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that’s targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent. “The implant installs the framework unchanged, then overwrites its SOUL.md persona […]

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent Read More »

DC Health Agency Exposes 400,000 Beneficiary Records

data breach, Data Breaches, DHCF, healthcare /

DC Health Agency Exposes 400,000 Beneficiary Records 2026-09-28 at 14:29 By Ionut Arghire The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed. The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

DC Health Agency Exposes 400,000 Beneficiary Records Read More »

Hong Kong regulators expand financial reporting oversight to licensed crypto firms

Latest News /

Hong Kong regulators expand financial reporting oversight to licensed crypto firms 2026-09-28 at 14:09 By Cointelegraph by Ezra Reguerra The SFC and AFRC signed a new MoU extending financial reporting, audit and compliance cooperation to licensed virtual asset service providers. This article is an excerpt from Cointelegraph.com News View Original Source

Hong Kong regulators expand financial reporting oversight to licensed crypto firms Read More »

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign

cybercrime, Oracle PeopleSoft, ShinyHunters, Vulnerabilities, vulnerability /

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign 2026-09-28 at 13:56 By Ionut Arghire The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273. The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign Read More »

Email spam filters cost GOP fundraisers estimated $117M in donations last year: bombshell study

Uncategorized /

Email spam filters cost GOP fundraisers estimated $117M in donations last year: bombshell study 2026-09-28 at 13:45 By Thomas Barrabi The little-noticed analysis, published on July 7 by Cameron Ellis of the University of Iowa and Lars Powell of the University of Alabama, could reignite long-running complaints by Republicans who have accused Google and other […]

Email spam filters cost GOP fundraisers estimated $117M in donations last year: bombshell study Read More »

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

Uncategorized /

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally 2026-09-28 at 13:44 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citrix NetScaler ADC and Gateway flaws to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerabilities are listed below – CVE-2026-88771 (CVSS score: […]

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally Read More »

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

Uncategorized /

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources 2026-09-28 at 13:44 By The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168, has called it an evolution of the threat actor’s tradecraft. […]

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources Read More »

New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections

Cambridge Analytica, Compliance, Data Protection, Facebook, lawsuit, Meta, Privacy, Privacy & Compliance /

New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections 2026-09-28 at 13:40 By Associated Press A New Mexico jury has found Facebook liable for deceiving users about privacy protections on the platform. The post New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections appeared first on SecurityWeek. This article […]

New Mexico Jury Finds Facebook Liable for Deceiving Users About Privacy Protections Read More »

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog

AI, Artificial Intelligence, NVIDIA /

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog 2026-09-28 at 13:27 By Eduard Kovacs The platform combines open source software and a reference system design to keep AI agents within set boundaries. The post Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Nvidia Unveils AI Agent Safety Platform With Hardware-Based Watchdog Read More »

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772)

CISA, Citrix, Don't miss, Hot stuff, NCSC-NL, NetScaler, News, Tenable /

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) 2026-09-28 at 12:51 By Zeljka Zorz Citrix has patched eight critical and high-severity vulnerabilities in NetScaler ADC and NetScaler Gateway, two of which (CVE-2026-88771, CVE-2026-88772) have been exploited in zero-day attacks to plant webshells on compromised devices. Rumors about their existence and active exploitation popped […]

Citrix NetScaler RCE zero-days exploited globally for weeks (CVE-2026-88771, CVE-2026-88772) Read More »

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability

alert, Kiteworks, Malware & Threats, Vulnerabilities, vulnerability /

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability 2026-09-28 at 12:44 By Ionut Arghire The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised. The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability Read More »

Scroll to Top