SecurityTicks

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor 2026-10-30 at 14:11 By Cybersecurity researchers have disclosed that the official Anthropic Claude Code extension was compromised on the Open VSX registry to install a persistent SSH backdoor on infected hosts. The issue has since been traced to the compromise of the Cursor […]

Official Claude Code VS Code Extension Compromised to Install Persistent SSH Backdoor Read More »

Fresh WordPress Vulnerability in Attackers’ Crosshairs

Fresh WordPress Vulnerability in Attackers’ Crosshairs 2026-10-30 at 14:04 By Ionut Arghire Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution. The post Fresh WordPress Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Fresh WordPress Vulnerability in Attackers’ Crosshairs Read More »

Claude Code extension poisoned with persistent SSH backdoor

Claude Code extension poisoned with persistent SSH backdoor 2026-10-30 at 13:15 By Sinisa Markovic A tampered build of Anthropic’s Claude Code extension for VS Code-compatible editors planted an SSH backdoor on developers’ machines, researchers at macOS security firm Phorion have found. The company spotted the malicious package, version 2.1.313, on Open VSX, an open-source marketplace […]

Claude Code extension poisoned with persistent SSH backdoor Read More »

Drupal Commerce Core Vulnerability Exploited Against Online Stores 

Drupal Commerce Core Vulnerability Exploited Against Online Stores  2026-10-30 at 13:07 By Eduard Kovacs Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders. The post Drupal Commerce Core Vulnerability Exploited Against Online Stores  appeared first on SecurityWeek. This article is an excerpt […]

Drupal Commerce Core Vulnerability Exploited Against Online Stores  Read More »

Here’s when top Wall Street executives expect OpenAI will launch its blockbuster IPO

Here’s when top Wall Street executives expect OpenAI will launch its blockbuster IPO 2026-10-30 at 12:00 By Charles Gasparino Sam Altman has been among the AI industry’s top alarmists – as has Anthropic CEO Dario Amodei. This article is an excerpt from Latest Technology News | New York Post View Original Source

Here’s when top Wall Street executives expect OpenAI will launch its blockbuster IPO Read More »

THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack

THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack 2026-10-30 at 11:52 By Cointelegraph by Zoltan Vardai North Korean hackers previously used THORChain to move funds stolen from Bybit and Bitget, prompting calls for the protocol to intervene. This article is an excerpt from Cointelegraph.com News View Original Source

THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack Read More »

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack 2026-10-30 at 11:41 By Eduard Kovacs Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds. The post $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack appeared first on SecurityWeek. This article […]

$2 Million+ Drained From Polymarket Traders in New Supply Chain Attack Read More »

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux 2026-10-30 at 11:32 By Ionut Arghire Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server. The post Max-Severity GitLab Vulnerability Exploited Against Alpine Linux appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Max-Severity GitLab Vulnerability Exploited Against Alpine Linux Read More »

Trezor warns CryptoBilis buyers to move funds over suspected implant

Trezor warns CryptoBilis buyers to move funds over suspected implant 2026-10-30 at 11:26 By Cointelegraph by Ezra Reguerra Trezor urged customers who bought devices from CryptoBilis since March to move their funds after a report of a suspected hardware implant. This article is an excerpt from Cointelegraph.com News View Original Source

Trezor warns CryptoBilis buyers to move funds over suspected implant Read More »

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw 2026-10-30 at 11:25 By Drupal has warned that threat actors are exploiting a “highly critical” security flaw in its Commerce Core component. The vulnerability, tracked as CVE-2026-118539 (CVSS score: N/A), is a case of missing authorization affecting Commerce Core versions from 0.0.0 to 2.41 […]

Hackers Actively Exploit Highly Critical Drupal Commerce Core Authorization Bypass Flaw Read More »

Open-weight AI model GLM-5.3 cheated its way to correct answers

Open-weight AI model GLM-5.3 cheated its way to correct answers 2026-10-30 at 11:23 By Anamarija Pogorelec Irregular evaluated Zhipu AI’s open-weight model GLM-5.3 across 13 offensive cyber scenarios using CyScenarioBench, the company’s framework for measuring an LLM’s ability to plan and execute multistage attacks under realistic constraints. The model refused none of the tasks and […]

Open-weight AI model GLM-5.3 cheated its way to correct answers Read More »

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines 2026-10-30 at 10:44 By Ionut Arghire An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system. The post TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines appeared first on SecurityWeek. This article is an […]

TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines Read More »

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record 2026-10-30 at 10:26 By Sinisa Markovic About $6.3 billion in cryptocurrency was stolen from Binance in what might be the biggest crypto hack in history. “Binance’s initial investigation suggests that the security incident may involve a compromised DevOps engineer’s […]

Binance hit by $6.3 billion theft in what could be the biggest crypto heist on record Read More »

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor 2026-10-30 at 10:16 By Eduard Kovacs Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop. The post $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor appeared first on SecurityWeek. This article is an […]

$6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor Read More »

Live updates: Binance $6.3B hack linked to North Korea’s TraderTraitor

Live updates: Binance $6.3B hack linked to North Korea’s TraderTraitor 2026-10-30 at 09:33 By Cointelegraph by Felix Ng Follow live updates as Binance says $6.3 billion in assets have been stolen in a major hack. Around $3 billion in stolen funds have been frozen. This article is an excerpt from Cointelegraph.com News View Original Source

Live updates: Binance $6.3B hack linked to North Korea’s TraderTraitor Read More »

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV 2026-10-30 at 09:27 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added two security flaws impacting Cisco and GitLab software to its Known Exploited Vulnerabilities (KEV), citing evidence of active exploitation. The vulnerabilities are listed below – CVE-2026-97229 (CVSS […]

CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV Read More »

What exactly is ISOC? And what does it mean for you?

What exactly is ISOC? And what does it mean for you? 2026-10-30 at 08:36 By Help Net Security Gartner recently released a new category of assessing security tools: the Integrated Security Operations Center (ISOC). Even though SIEM isn’t going anywhere, a rapidly evolving threat landscape is forcing a shift in industry logic that is reflected […]

What exactly is ISOC? And what does it mean for you? Read More »

Fake IT help desk callers got by on little more than names and email addresses

Fake IT help desk callers got by on little more than names and email addresses 2026-10-30 at 08:30 By Mirko Zorz Attackers posing as IT help desk staff contacted employees by phone, email and Microsoft Teams in the third quarter of 2026 and talked them into opening remote access sessions, Cisco Talos Incident Response (Talos […]

Fake IT help desk callers got by on little more than names and email addresses Read More »

Scroll to Top