SecurityTicks

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More 2026-03-23 at 16:12 By Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories. This edition covers a mix of issues: supply chain […]

We Found Eight Attack Vectors Inside AWS Bedrock. Here’s What Attackers Can Do with Them 2026-03-23 at 15:31 By AWS Bedrock is Amazon’s platform for building AI-powered applications. It gives developers access to foundation models and the tools to connect those models directly to enterprise data and systems. That connectivity is what makes it powerful

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper 2026-03-23 at 15:31 By Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments. The last known clean release of Trivy on Docker Hub is 0.69.3. The malicious versions 0.69.4,

Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware 2026-03-23 at 15:31 By Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive nature of emails to send phishing messages masquerading

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks 2026-03-23 at 15:31 By Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high intelligence value, the U.S. Cybersecurity and Infrastructure Security Agency

Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems 2026-03-23 at 15:31 By Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activity starting the week of March 9, 2026, in customer

US chip testing firm shrugged off ransomware hit as minor – then came the data leak 2026-03-23 at 15:17 By Carly Page Trio-Tech International initially said hack wasn’t ‘material,’ but then stolen data was published Trio-Tech International initially shrugged off a ransomware attack at a Singapore subsidiary as immaterial, only to reverse course days later

Intel’s Core Ultra 270K, 250K Plus are an appeal to cash-strapped PC enthusiasts 2026-03-23 at 15:17 By Tobias Mann More cores, higher clocks, and lower prices? What’s not to like? Review  It’s a tough time to be a PC enthusiast. Between the memory crunch and the AI boom driving up prices on storage, DDR5, and

RSAC 2026: Uncle Sam backs out, and AI agents are everywhere 2026-03-23 at 15:17 By Brandon Vigliarolo Infosec pros descend on San Francisco kettle  When El Reg cybersecurity editor Jessica Lyons joins infosec industry colleagues in San Francisco for RSAC 2026 this week, she’s expecting agentic AI to be on everyone’s lips – at least

Is Crowdsourcing Your Security Plan a Career Risk? 2026-03-23 at 15:16 By Build meaningful insights from relationships with other security leaders. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware 2026-03-23 at 15:16 By Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the urgency and time-sensitive nature of emails to send phishing messages masquerading

We Found Eight Attack Vectors Inside AWS Bedrock. Here’s What Attackers Can Do with Them 2026-03-23 at 15:16 By AWS Bedrock is Amazon’s platform for building AI-powered applications. It gives developers access to foundation models and the tools to connect those models directly to enterprise data and systems. That connectivity is what makes it powerful

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper 2026-03-23 at 15:16 By Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments. The last known clean release of Trivy on Docker Hub is 0.69.3. The malicious versions 0.69.4,

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks 2026-03-23 at 15:16 By Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with high intelligence value, the U.S. Cybersecurity and Infrastructure Security Agency