SecurityTicks

Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path 2026-10-01 at 08:54 By Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used in attacks against specific targeted individuals. The trigger is a malicious PDF with a crafted embedded font that […]

Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft 2026-10-01 at 08:21 By Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party security products, citing ongoing investigation findings from SlowMist. “Their investigation identified malicious activity involving third-party security products, including a zero-day vulnerability, and […]

MetaMask Security Incident Prompts Exit of Affected Ethereum Validators 2026-10-01 at 08:10 By MetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting part of its infrastructure. “We are actively addressing and remediating the issue internally, in coordination with external partners and security advisors,” the software cryptocurrency wallet maker […]

The Problem with CISA’s 2026 Cybersecurity Awareness Month Recommendations 2026-10-01 at 08:00 By The issue with CISA’s 2026 Cybersecurity Awareness Month suggestions? Identity attacks have evolved. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs 2026-10-01 at 07:35 By Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue’s Threat Hunt Operations & Research (THOR) team, which analyzed […]

Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets 2026-09-30 at 21:27 By Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data, according to findings from the Microsoft Security Research team. The attack exploits CVE-2026-73570 (CVSS score: 8.9), an unauthenticated […]

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks 2026-09-30 at 21:27 By Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM) software under the guise of meeting invitations, PDF-themed lures, software update prompts, and other social-engineering content. “Once executed, the legitimate MSP360 installer, distributed under […]

Better.com founder Vishal Garg claims shareholder victory to oust CEO, board less than 2 months after firing 2026-09-30 at 20:00 By Ariel Zilber If Better formally accepts the votes as valid, Garg’s group would have enough shareholder support to reshape the board. This article is an excerpt from Latest Technology News | New York Post […]

ShinyHunters and the New Reality of Identity Theft 2026-09-30 at 20:00 By The new generation of cybercriminals, exemplified by groups like ShinyHunters, practice a more persistent version of identity theft. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Improving Security Training to Adapt to Modern Phishing Schemes 2026-09-30 at 19:00 By Security magazine speaks with with Ron Zayas, Chief Executive Officer at Ironwall by Incogni, about the risks associated with online, publicly accessible information. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

40M McDonald’s Records Exposed Through Customer Data Platform 2026-09-30 at 18:40 By McDonald’s Indonesia exposed more than 40 million records.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager 2026-09-30 at 18:24 By Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30. The flaw, CVE-2026-76504, could allow a remote attacker with no login access to […]