SecurityTicks

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation 2026-09-27 at 10:47 By Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr said on September 26. Citrix has not confirmed the flaws or published a […]

US jury says Apple owes record $5.7 billion in patent case against San Diego company 2026-09-27 at 04:46 By Reuters A US jury ruled that Apple owes Taction over $5.7 billion for infringing haptic technology patents in iPhones and Apple Watches. This article is an excerpt from Latest Technology News | New York Post View […]

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials 2026-09-26 at 23:05 By The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as a four-stage attack […]

Convicted Theranos fraudster Elizabeth Holmes issues ominous threat from prison: ‘I’ll burn them’ 2026-09-26 at 22:21 By Titus Wu The disgraced tech founder remains in a federal prison for cheating investors. This article is an excerpt from Latest Technology News | New York Post View Original Source

Zero Trust for AI Agents Starts With Fixing Zero Visibility 2026-09-26 at 17:21 By The way we talk about AI agents is shifting, and the way we implement them requires an even more fundamental shift. While earlier discourse focused on how quickly organizations could stand up agents and how much productivity they could promise, a […]

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells 2026-09-26 at 17:21 By Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the weaponization of CVE-2026-35273 (CVSS score: 9.8), a critical security flaw […]

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack 2026-09-26 at 13:01 By Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary measure for nine hours over the weekend after it received threat intelligence about an imminent cyber attack. “Kiteworks received credible threat intelligence from […]

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link 2026-09-26 at 12:55 By Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and take control of a site. The cross-site request forgery […]

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild 2026-09-26 at 11:49 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerabilities in question are as follows – […]

TikTok reaches $100M settlement with Alabama over youth addiction claims, ahead of landmark trial 2026-09-26 at 02:20 By Reuters It’s TikTok’s first deal with a state as it fights similar claims nationwide. This article is an excerpt from Latest Technology News | New York Post View Original Source