SecurityTicks

Attackers Exploit Three Fortinet FortiSandbox Flaws, One Patched Last Week 2026-06-16 at 13:30 By Bad actors are exploiting multiple security vulnerabilities in Fortinet FortiSandbox, according to threat intelligence firm Defused Cyber. In a post shared on X, the company said it has observed exploitation of CVE-2026-39813, CVE-2026-39808, and CVE-2026-25089 over the past 24 hours. CVE-2026-39813 […]

Hidden in Teams: DragonForce Attackers Weaponize Microsoft Teams Relays to Stay Hidden 2026-06-16 at 13:00 By Threat Hunter Team Backdoor.Turn, a Go-based RAT, is the first known malware to abuse Microsoft Teams’ TURN relay servers to mask command-and-control traffic. The attackers also used a previously unknown vulnerability in a Huawei driver. This article is an […]

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth 2026-06-16 at 12:44 By Cybersecurity researchers have flagged two previously undocumented Windows variants of what was believed to be a Linux-only backdoor called SprySOCKS. “The Windows variants discovered are internally marked as WIN_DRV and WIN_PLUS,” ESET said in a report shared with The Hacker News. “Both […]

Fake Microsoft Alerts Used to Deploy North Korean NarwhalRAT Malware 2026-06-16 at 11:14 By The North Korean state-sponsored hacking group known as ScarCruft (aka APT37) has been observed using spear-phishing messages impersonating Microsoft Account security notifications to deliver malware called NarwhalRAT. “The attack email contained a message impersonating an MS account security alert,” the Genians […]

Cisco Releases Security Updates for Actively Exploited SD-WAN Manager Flaw 2026-06-16 at 09:05 By Cisco has released security updates for a medium-severity security flaw in Catalyst SD-WAN Manager that has come under active exploitation in the wild. The vulnerability, tracked as CVE-2026-20262, carries a CVSS score of 6.5 out of 10.0. “A vulnerability in the […]

CISA Flags LiteSpeed cPanel Plugin Flaw Exploited for Root Privilege Escalation 2026-06-16 at 08:41 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a security flaw impacting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities (KEV) catalog, requiring Federal Civilian Executive Branch (FCEB) agencies to apply the fixes by June 18, 2026. The […]

Cyberwar At the Front Line: Why Enterprises Must Prepare for Digital Conflict 2026-06-16 at 02:44 By The risk landscape can change quickly, meaning security leaders need to prepare for anything. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails 2026-06-15 at 22:44 By A China-linked espionage group hid inside North American medical, academic, and military research networks for more than a year, quietly stealing sensitive research and defense email. The way in was a backdoor on their REDCap research servers that stole […]