SecurityTicks

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution 2026-04-16 at 15:03 By Cisco has announced patches to address four critical security flaws impacting Identity Services and Webex Services that could result in arbitrary code execution and allow an attacker to impersonate any user within the service. The details of the vulnerabilities are below –

Hidden Passenger? How Taboola Routes Logged-In Banking Sessions to Temu 2026-04-16 at 15:03 By A bank approved a Taboola pixel. That pixel quietly redirected logged-in users to a Temu tracking endpoint. This occurred without the bank’s knowledge, without user consent, and without a single security control registering a violation. Read the full technical breakdown in the Security Intelligence Brief. Download

Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto Attacks 2026-04-16 at 15:03 By A “novel” social engineering campaign has been observed abusing Obsidian, a cross-platform note-taking application, as an initial access vector to distribute a previously undocumented Windows remote access trojan called PHANTOMPULSE in attacks targeting individuals in the financial and cryptocurrency sectors. Dubbed

The Agentic AI Tsunami is Here: Is Your Legacy IAM Sinking or Swimming? 2026-04-16 at 13:07 By Paul Toal AI agents are becoming a new class of enterprise identity—and most platforms weren’t built for them This article is an excerpt from SECURITY.COM View Original Source

Microsoft announces product it doesn’t want you to buy: Extended security updates for old Exchange, and Skype for Biz 2026-04-16 at 13:07 By Richard Speed Just migrate already, would you? But if you can’t, Redmond will take your cash Microsoft will keep delivering security updates for old versions of Exchange Server and Skype for Business

Obsolete Google nag drowns out vital bar information at Swedish concert hall 2026-04-16 at 12:21 By Richard Speed Backup and Sync may be dead, but it still knows how to kill the buzz before the ukuleles start Bork!Bork!Bork!  Sweden is arguably the home of bork – think the Swedish Chef from The Muppets – so

Cops hand Motorola £25M no-bid deal to keep 2000-era radios alive 2026-04-16 at 12:11 By Lindsay Clark Biz as usual for Brit public sector: ESN replacement is 12 years late and £3B over budget UK police tech buyers have awarded a £25 million no-competition contract for communications technology first commissioned in 2000, with the replacement

Server-room lock was nothing but a crock 2026-04-16 at 11:03 By Avram Piltch Your cybersecurity is only as good as the physical security of the servers PWNED  Welcome back to Pwned, the column where we immortalize the worst vulns that organizations opened up for themselves. If you’re the kind of person who leaves your car

QUIC will soon be as important as TCP – but it’s vastly different 2026-04-16 at 11:03 By Bruce Davie Deciphering the third transport protocol’s four RFCs is a task to rival the proverbial blind man trying to understand an elephant While Larry was producing most of the content for the “Request/Reponse” chapter for the next