SecurityTicks - Security Ticks

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls 2026-10-29 at 12:44 By Cisco has released patches to address a high-severity security flaw in Secure Firewall Adaptive Security Appliance (ASA) Software and Secure Firewall Threat Defense (FTD) Software that it said has been exploited in the wild. The vulnerability, tracked as […]

Cisco Patches Actively Exploited ASA and FTD VPN Flaw That Can Crash Firewalls Read More »

ECB President Christine Lagarde to step down in February 2027

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

China, China APT, Cisco, exploited, Malware & Threats, Nation-State, SD-WAN, Silent Train, Volt Typhoon, Vulnerabilities, Zero-Day / SecurityTicks

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network 2026-10-29 at 12:29 By Eduard Kovacs Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed. The post Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network appeared first on SecurityWeek. This article is an […]

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network Read More »

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents

data breach, Data leak, DHS, Don't miss, Hacktivism, Hot stuff, News, USA / SecurityTicks

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents 2026-10-29 at 12:16 By Sinisa Markovic Names, offices, contact details and assignments of more than 41,000 U.S. Department of Homeland Security (DHS) employees have been leaked by a hacktivist group calling itself the Department of Peace. The group handed the data to the transparency collective […]

Hacktivists leak 41,000 DHS staff records, revealing undercover ICE agents Read More »

Sandbox Flipped to ‘Danger-Full-Access’: Unauthorized AI Relays Create Risk for Organizations

Uncategorized / SecurityTicks

Sandbox Flipped to ‘Danger-Full-Access’: Unauthorized AI Relays Create Risk for Organizations 2026-10-29 at 12:00 By Threat Hunter Team A grey market relay service installs the real OpenAI Codex and Anthropic Claude Code CLIs, then reconfigures them to route every prompt and credential through third-party servers with sandboxing switched off. This article is an excerpt from […]

Sandbox Flipped to ‘Danger-Full-Access’: Unauthorized AI Relays Create Risk for Organizations Read More »

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco, exploited, Vulnerabilities, vulnerability / SecurityTicks

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August 2026-10-29 at 11:47 By Eduard Kovacs Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-2026-76418 and assigned a CVSS score of 8.6, the bug resides in the Remote […]

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August Read More »

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys

Uncategorized / SecurityTicks

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys 2026-10-29 at 11:04 By Hackers exploited a critical Cisco Catalyst SD-WAN flaw, fixed in February, to plant custom malware inside the systems that control an organization’s SD-WAN network. The malware, called KeyDrift, is designed to copy the keys that encrypt traffic between […]

Hackers Exploited Cisco SD-WAN Flaw to Plant Malware Built to Steal Encryption Keys Read More »

HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

data breach, Data Breaches, healthcare, iRhythm / SecurityTicks

HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million 2026-10-29 at 10:27 By Ionut Arghire Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications. The post HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million Read More »

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

ESXi, exploited, Featured, VMWare, VMware ESXi, Vulnerabilities, vulnerability, Zero-Day / SecurityTicks

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day 2026-10-29 at 10:01 By Ionut Arghire CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged. The post Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day Read More »

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility

Uncategorized / SecurityTicks

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility 2026-10-29 at 09:56 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a security flaw impacting Broadcom VMware ESX to its Known Exploited Vulnerabilities (KEV) catalog, after CrowdStrike revealed that it had been weaponized by a China-nexus threat actor known as […]

China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility Read More »

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces

Uncategorized / SecurityTicks

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces 2026-10-29 at 09:56 By Palo Alto Networks on Wednesday warned that threat actors are exploiting the recently patched PHP2Shell vulnerabilities against publicly-accessible management interfaces. “Active exploitation has been observed targeting the Palo Alto Networks management interface exposed to the internet,” the network security company […]

Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces Read More »

Bitcoin ETFs add $137M, pushing October back into the green

markets / SecurityTicks

Bitcoin ETFs add $137M, pushing October back into the green 2026-10-29 at 09:32 By Cointelegraph by Helen Partz Bitcoin ETFs drew $424 million over three days, lifting October net inflows to $111 million despite a hawkish Federal Reserve decision and weaker crypto sentiment. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin ETFs add $137M, pushing October back into the green Read More »

Qualys CISO on what security teams can do as exploit campaigns grow

automation, CISO, cybersecurity, Don't miss, Features, Hot stuff, News, opinion, patching, Qualys, strategy, tips, vulnerability management / SecurityTicks

Qualys CISO on what security teams can do as exploit campaigns grow 2026-10-29 at 08:30 By Mirko Zorz In this Help Net Security interview, Nathan Smolenski, CISO at Qualys, talks about how security teams can handle the growing volume of AI-discovered vulnerabilities. He explains why CISOs should track the average window of exposure instead of […]

Qualys CISO on what security teams can do as exploit campaigns grow Read More »

IT bosses are confident they’ve found the certificates they don’t know about

authentication, certificates, Encryption, News, report, Sectigo, SSL/TLS / SecurityTicks

IT bosses are confident they’ve found the certificates they don’t know about 2026-10-29 at 08:00 By Mirko Zorz Forty percent of 500 senior IT and security leaders surveyed for certificate authority Sectigo said they are very prepared for monthly TLS certificate renewals because automated systems are already in place. Their more specific answers point elsewhere. […]

IT bosses are confident they’ve found the certificates they don’t know about Read More »

Shame and sleepless nights haunt scam victims long after the money is gone

cybercriminals, fraud, identity theft, Identity Theft Resource Center, News, report, scams / SecurityTicks

Shame and sleepless nights haunt scam victims long after the money is gone 2026-10-29 at 07:30 By Anamarija Pogorelec Scams and identity theft hurt people in different ways, and recovering involves much more than getting money back, according to ITRC’s 2026 Consumer Impact Report. Scam victims often struggle with shame and self-blame, while identity theft […]

Shame and sleepless nights haunt scam victims long after the money is gone Read More »

Stolen staff logins are spreading attacks between K-12 school districts

Center for Internet Security, cybersecurity, education, Government, News, report, USA / SecurityTicks

Stolen staff logins are spreading attacks between K-12 school districts 2026-10-29 at 07:00 By Mirko Zorz Last school year, 808 K-12 school organizations got some unwelcome news. The Multi-State Information Sharing and Analysis Center (MS-ISAC) told them their staff accounts or credentials were circulating on underground and dark web marketplaces. That’s 808 of the center’s […]

Stolen staff logins are spreading attacks between K-12 school districts Read More »

Bitcoin faces fresh pressure after Fed’s hawkish rate hold: Analysts

markets / SecurityTicks

Bitcoin faces fresh pressure after Fed’s hawkish rate hold: Analysts 2026-10-29 at 03:12 By Cointelegraph by Felix Ng Traders are pricing in a 78% chance of a December rate hike, while analysts say Treasury yields, the US dollar and upcoming inflation data could determine Bitcoin’s next move. This article is an excerpt from Cointelegraph.com News […]

Bitcoin faces fresh pressure after Fed’s hawkish rate hold: Analysts Read More »

Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow

Uncategorized / SecurityTicks

Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow 2026-10-29 at 00:52 By Reuters Alphabet’s cash burn was driven by spending to boost cloud capacity and fund AI research. This article is an excerpt from Latest Technology News | New York Post View Original Source

Google parent Alphabet tumbles after profit disappoints, warns AI is battering its cash flow Read More »

Canadian ‘crypto king’ case to go to jury as criminal trial winds down

‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses

Uncategorized / SecurityTicks

‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses 2026-10-28 at 23:10 By News.com.au A reporter posed as a suicidal 14-year-old girl on the Character app. It took just five minutes to suggest methods to end her life. This article is an excerpt from Latest Technology News | New York […]

‘Quick and painless’: Aussie woman poses as suicidal teen. See AI app’s vile responses Read More »