SecurityTicks

CrashStealer macOS Malware Uses Notarized Dropper to Pass Gatekeeper Checks 2026-07-13 at 20:36 By Cybersecurity researchers have flagged a new macOS information stealer called CrashStealer that’s capable of harvesting sensitive data from compromised systems. Unlike other information stealers that are built on AppleScript droppers or Objective-C-based wrappers, CrashStealer is implemented in native C++, according to […]

Google and Microsoft Pull ModHeader With 1.6 Million Installs After Dormant Collector Found 2026-07-13 at 20:17 By Google and Microsoft have pulled ModHeader, a popular header-editing extension with roughly 1.6 million installs across Chrome and Edge, after researchers found a hidden browsing-history collector built into its official store version. The collector was dormant. An empty […]

⚡ Weekly Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More 2026-07-13 at 18:05 By Somewhere right now, a security tool is quietly finding bugs faster than any human can fix them. That’s supposed to be the good news. The catch is that the attackers have the same tools, pointed the other […]

New MemGhost Attack Plants Persistent False Memories in AI Agents Through One Email 2026-07-13 at 16:49 By Give an AI assistant a memory and access to your inbox, and you hand an attacker a way to rewrite what it thinks it knows about you. A single email can trick that agent into saving a false […]

Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft 2026-07-13 at 16:42 By A new phishing-as-a-service (PhaaS) operation called Forg365 is using a combination of device code phishing, adversary-in-the-middle (AitM) tactics, antibot evasion, artificial intelligence (AI)-assisted lure creation, and post-compromise mailbox operations targeting Microsoft 365 accounts. Distributed via Telegram and costing $400 […]

Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory 2026-07-13 at 15:37 By Cybersecurity researchers have flagged an intrusion in which an unknown threat actor leveraged a vibe-coded PowerShell script for Active Directory (AD) enumeration. “The script looked for the Domain Controller (DC) and mapped users, computers, and domains, before creating a directory and […]