SecurityTicks - Security Ticks

Upwind Security Raises $400 Million at $3.8 Billion Valuation

Cybersecurity Funding, funding, Upwind / SecurityTicks

Upwind Security Raises $400 Million at $3.8 Billion Valuation 2026-10-28 at 15:56 By Mike Lennon The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Upwind Security Raises $400 Million at $3.8 Billion Valuation Read More »

Google Cloud outlines MPC service for institutional Bitcoin custody

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Chrome, Firefox, patches, Vulnerabilities, vulnerability / SecurityTicks

Chrome and Firefox Updates Patch Over 200 Vulnerabilities 2026-10-28 at 15:39 By Ionut Arghire The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Chrome and Firefox Updates Patch Over 200 Vulnerabilities Read More »

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

Data Protection, GoAhead, TLS, Vulnerabilities, vulnerability, web server / SecurityTicks

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices 2026-10-28 at 15:10 By Eduard Kovacs FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices […]

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices Read More »

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch

Uncategorized / SecurityTicks

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch 2026-10-28 at 14:48 By Threat actors are beginning to probe for a newly patched critical vulnerability in Oracle E-Business Suite (EBS), according to threat intelligence firm Defused Cyber. The vulnerability in question is CVE-2026-101767 (CVSS score: 9.8) in the Oracle Application Object Library […]

Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch Read More »

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police

Chainalysis, cybercrime, FBI, law enforcement, Lumen, National Crime Agency, News, Silent Push, US DoJ / SecurityTicks

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police 2026-10-28 at 14:40 By Sinisa Markovic The FBI has seized virtualine.net, the domain of a bulletproof hosting provider that laundered money for its criminal customers and kept a forum trading in child sexual abuse material online despite repeated warnings from police and […]

FBI seizes Virtualine, bulletproof hosting provider that promised to shield criminals from police Read More »

Tailscale fixes SSH flaws allowing lateral movement within tailnets

consumer, Don't miss, enterprise, Hot stuff, News, remote management, secure access, secure connectivity, SMBs, Tailscale, vulnerability / SecurityTicks

Tailscale fixes SSH flaws allowing lateral movement within tailnets 2026-10-28 at 14:25 By Zeljka Zorz Tailscale, the company behind the popular software-defined mesh networking and connectivity platform of the same name, has shipped fixes for several vulnerabilities, including some in Tailscale SSH that could let an attacker who already had access to a device in […]

Tailscale fixes SSH flaws allowing lateral movement within tailnets Read More »

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator

arrest, cybercrime, law enforcement, News, Ransomware, US DoJ / SecurityTicks

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator 2026-10-28 at 14:17 By Anamarija Pogorelec A Ukrainian national who participated in ransomware attacks targeting hospitals, government entities, law firms, and other businesses was sentenced to five years and 10 months in prison. Artem Stryzhak, 36, pleaded guilty in December 2025 to two counts of […]

Ukrainian ransomware hacker sentenced, $11 million reward offered for co-conspirator Read More »

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China, exploited, PHP2Shell, Vulnerabilities / SecurityTicks

China-Linked Hackers Exploit PHP2Shell to Root Firewalls 2026-10-28 at 14:00 By Ionut Arghire The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

China-Linked Hackers Exploit PHP2Shell to Root Firewalls Read More »

Settlement concerns prompt Euronext to halt CoinShares’ Zcash ETP ahead of debut

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass

Uncategorized / SecurityTicks

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass 2026-10-28 at 13:15 By Adobe has released patches to address multiple critical security flaws in Campaign Classic that, if successfully exploited, could result in arbitrary code execution, security feature bypass, and privilege escalation. The list of eight vulnerabilities is as follows – […]

Adobe Fixes 8 Critical Campaign Classic Flaws Allowing Code Execution and Security Bypass Read More »

Mirae Asset Securities issues tokenized notes on Solana

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

EPICS, ICS, ICS/OT, Vulnerabilities, vulnerability / SecurityTicks

Long-Hidden Flaws Patched in EPICS Research Facility Control Software 2026-10-28 at 12:48 By Eduard Kovacs Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek. This article is an excerpt […]

Long-Hidden Flaws Patched in EPICS Research Facility Control Software Read More »

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed

Uncategorized / SecurityTicks

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed 2026-10-28 at 12:30 By Modern phishing campaigns can compromise American businesses without relying on traditional credential theft. Attackers can abuse legitimate cloud services, authentication mechanisms, and trusted business workflows to gain access to corporate accounts while leaving fewer obvious signs behind. ANY.RUN’s analysis of Skyw4lker, […]

American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed Read More »

Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

Compliance, GRC, Risk Management, Supply Chain Security / SecurityTicks

Nobody Trusts the Security Questionnaire. We Rely on It Anyway. 2026-10-28 at 12:30 By Sravish Sridhar The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It […]

Nobody Trusts the Security Questionnaire. We Rely on It Anyway. Read More »

Data breach at Sony-owned internet provider compromises 2.6 million customer records

breach, data breach, Don't miss, Hot stuff, News, Sony / SecurityTicks

Data breach at Sony-owned internet provider compromises 2.6 million customer records 2026-10-28 at 12:18 By Sinisa Markovic Attackers who broke into the So-net member database made off with personal information belonging to more than 2.58 million current and former customers, along with the email passwords of 54,401 users, Sony Network Communications has disclosed. So-net is […]

Data breach at Sony-owned internet provider compromises 2.6 million customer records Read More »

Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over

markets / SecurityTicks

Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over 2026-10-28 at 11:55 By Cointelegraph by William Suberg Bitcoin sought to rebuild support at $80,000 while Asian and US tech stocks extended a rebound into key corporate earnings releases. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin price eyes $82K as Morgan Stanley strategist says most of correction is over Read More »

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

AI, Cybersecurity Funding, funding, Funding/M&A, Infisical, secrets sprawl / SecurityTicks

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise 2026-10-28 at 11:48 By SecurityWeek News The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on […]

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise Read More »

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster

CISA, cybersecurity, GitHub, Google Workspace, Government, Microsoft 365, News, open source, software, USA / SecurityTicks

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster 2026-10-28 at 11:38 By Mirko Zorz CISA released ScubaGear v2.0 and ScubaGoggles v1.1.0, new versions of the open-source tools it publishes to check Microsoft 365 and Google Workspace settings against its security baselines. The agency calls ScubaGear v2.0 the most comprehensive update to […]

CISA updates ScubaGear and ScubaGoggles, and says Microsoft 365 checks get faster Read More »

Hackers Start Probing Fresh Oracle EBS Vulnerability

E-Business Suite, EBS, exploited, Oracle, Vulnerabilities, vulnerability / SecurityTicks

Hackers Start Probing Fresh Oracle EBS Vulnerability 2026-10-28 at 11:14 By Ionut Arghire CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Start Probing Fresh Oracle EBS Vulnerability Read More »