SecurityTicks

Red Team Discoveries Support Organizations in Assessing Risk 2026-08-26 at 18:00 By Red team tests were conducted at the behest of two critical infrastructure organizations.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions 2026-08-26 at 16:44 By Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that’s used as a proxy to redirect Microsoft 365 sign-ins, while capturing authenticated sessions in the process. In a report shared with The Hacker News ahead […]

Imagine the SOC Without a Queue: From Alert Backlog to AI Hypothesis Engine 2026-08-26 at 16:07 By The SOC we’ve always known was built around a model that guarantees most of the alert queue will never receive analyst review. There’s never time. In a traditional SOC, the typical progression follows a well-known pattern: an alert […]

Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code 2026-08-26 at 14:55 By The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura’s HTML5 video player library that allow a remote, unauthenticated attacker to read arbitrary files from a server and execute code on it. The flaws, tracked as […]

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown 2026-08-26 at 14:32 By An eight-month INTERPOL operation targeting West African organized crime groups has led to arrests of 58 people and the identification of 263 suspects. “The operation, which brought together 22 countries from six continents, is a response to the […]

Newly SLEEPWALKER Backdoor Waits for One Crafted Packet, Then Runs Its Own Bytecode 2026-08-26 at 14:32 By An independent malware researcher has documented a previously unreported Windows backdoor, dubbed SLEEPWALKER, that stays inert in memory until a specifically crafted network packet reaches the machine and then runs commands written in a 23-instruction language of its […]

Claude Opus 4.6 Bypasses Gym Booking Limit, Cancels Other Users’ Reservations in Tests 2026-08-26 at 13:27 By Aikido Security has published research that recreates the Australian gym-booking incident in a synthetic environment, finding that Claude Opus 4.6, running on the OpenClaw agent harness, exploited a client-side-only booking restriction in 9 of 10 runs. The original […]