SecurityTicks - Security Ticks

Ericsson blames vendor vishing slip-up for breach exposing thousands of records

Ericsson blames vendor vishing slip-up for breach exposing thousands of records 2026-03-10 at 16:33 By Carly Page Crooks used simple phone scam to compromise vendor account, spilling personal and financial data belonging to more than 15,000 people A voice-phishing scam targeting one of Ericsson’s service providers has exposed the personal data of more than 15,000 […]

Ericsson blames vendor vishing slip-up for breach exposing thousands of records Read More »

Armadin secures $189.9 million to counter AI-driven cyber threats

Armadin, Industry news / SecurityTicks

Armadin secures $189.9 million to counter AI-driven cyber threats 2026-03-10 at 16:33 By Industry News Armadin has raised $189.9 million in Seed and Series A funding. Led by Accel, with participation from Google Ventures, Kleiner Perkins, Menlo Ventures, In-Q-Tel, and follow-on investment from 8VC and Ballistic Ventures, this marks the largest combined Seed and Series

Armadin secures $189.9 million to counter AI-driven cyber threats Read More »

Terra Portal adds human-governed AI to live production pentesting

Industry news, Terra Security / SecurityTicks

Terra Portal adds human-governed AI to live production pentesting 2026-03-10 at 16:33 By Industry News Terra Security has announced the launch of Terra Portal, its agentic desktop app that serves as an execution layer for pentesters to direct and oversee AI-driven testing in live production environments. Terra Portal reduces the discovery-to-fix cycle for vulnerabilities from

Terra Portal adds human-governed AI to live production pentesting Read More »

Thousands Affected by Ericsson Data Breach

data breach, Data Breaches, Ericsson / SecurityTicks

Thousands Affected by Ericsson Data Breach 2026-03-10 at 16:33 By Eduard Kovacs The telecommunications equipment and services giant has blamed the incident on a third-party vendor. The post Thousands Affected by Ericsson Data Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Thousands Affected by Ericsson Data Breach Read More »

SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities

patch, Patch Tuesday, SAP, Vulnerabilities, vulnerability / SecurityTicks

SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities 2026-03-10 at 16:33 By Ionut Arghire A code injection bug in FS-QUO and an insecure deserialization flaw in NetWeaver could lead to arbitrary code execution. The post SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities Read More »

Kevin Mandia’s Armadin Launches With $190 Million in Funding

Artificial Intelligence, Cybersecurity Funding, funding, Kevin Mandia, Mandiant / SecurityTicks

Kevin Mandia’s Armadin Launches With $190 Million in Funding 2026-03-10 at 16:33 By Kevin Townsend Armadin uses AI-powered red teaming to find and exploit weaknesses in the same way that attackers attack them. The post Kevin Mandia’s Armadin Launches With $190 Million in Funding appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

Kevin Mandia’s Armadin Launches With $190 Million in Funding Read More »

OpenAI Rolls Out Codex Security Vulnerability Scanner

AI, Artificial Intelligence, open source, OpenAI, scanner, vulnerability / SecurityTicks

OpenAI Rolls Out Codex Security Vulnerability Scanner 2026-03-10 at 16:33 By Eduard Kovacs Codex Security, formerly Aardvark⁠, has found hundreds of critical vulnerabilities in tested software in the past month. The post OpenAI Rolls Out Codex Security Vulnerability Scanner appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

OpenAI Rolls Out Codex Security Vulnerability Scanner Read More »

New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries

Uncategorized / SecurityTicks

New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries 2026-03-10 at 16:33 By Cybersecurity researchers have disclosed nine cross-tenant vulnerabilities in Google Looker Studio that could have permitted attackers to run arbitrary SQL queries on victims’ databases and exfiltrate sensitive data within organizations’ Google Cloud environments. The shortcomings have been collectively named

New “LeakyLooker” Flaws in Google Looker Studio Could Enable Cross-Tenant SQL Queries Read More »

Sorry, kids. Memory crunch threatens to kneecap Chromebook shipments

Uncategorized / SecurityTicks

Sorry, kids. Memory crunch threatens to kneecap Chromebook shipments 2026-03-10 at 16:23 By Dan Robinson Low-cost computers bashed by billion-dollar investment in AI infrastructure Chromebooks, the low-cost computing option popular with education buyers, will be squeezed hardest this year as memory prices spiral out of control.… This article is an excerpt from The Register View

Sorry, kids. Memory crunch threatens to kneecap Chromebook shipments Read More »

Trust Wallet adds real-time scam address checks for crypto users

Linux PC vendor System76 tries to talk Colorado down over OS age checks

Uncategorized / SecurityTicks

Linux PC vendor System76 tries to talk Colorado down over OS age checks 2026-03-10 at 16:08 By Liam Proven Don’t celebrate yet – more states are considering them As more US states push to mandate OS-level age checks, System76 is taking its fight directly to lawmakers.… This article is an excerpt from The Register View

Linux PC vendor System76 tries to talk Colorado down over OS age checks Read More »

The 6 Steps Organizations Should Immediately Take to Mitigate Quantum-Related Risk

Emerging Threats, Tips & Tricks / SecurityTicks

The 6 Steps Organizations Should Immediately Take to Mitigate Quantum-Related Risk 2026-03-10 at 16:00 By Lynn Burns The reality of quantum computing is not quite here, but nobody should fool themselves into believing they should not prepare ahead of time. This article is an excerpt from LevelBlue Blog View Original Source

The 6 Steps Organizations Should Immediately Take to Mitigate Quantum-Related Risk Read More »

HR, recruiters targeted in year-long malware campaign

Aryaka, Don't miss, Hot stuff, Human Resources, Malware, News, phishing, social engineering / SecurityTicks

HR, recruiters targeted in year-long malware campaign 2026-03-10 at 15:39 By Zeljka Zorz An attack campaign targeting HR departments and job recruiters has been stealthily compromising systems, Aryaka researchers have discovered. By avoiding analysis environments and leveraging a specialized module designed to kill antivirus and endpoint detection software, the Russian-speaking attacker(s) behind this campaign have

HR, recruiters targeted in year-long malware campaign Read More »

CFTC chair backs blockchain-based prediction markets as ‘truth machines’

Microsoft flips Windows Autopatch to default hotpatch security updates

Microsoft, News, patch, Windows / SecurityTicks

Microsoft flips Windows Autopatch to default hotpatch security updates 2026-03-10 at 15:32 By Sinisa Markovic Microsoft is changing the default behavior in Windows Autopatch so that hotpatch security updates are enabled automatically for eligible devices managed through Microsoft Intune or the Microsoft Graph API starting with the May 2026 Windows security update. Windows Autopatch is

Microsoft flips Windows Autopatch to default hotpatch security updates Read More »

Fake job applications pack malware that kills EDR before stealing data

Uncategorized / SecurityTicks

Fake job applications pack malware that kills EDR before stealing data 2026-03-10 at 15:31 By Carly Page Russian-speaking attackers lure HR staff into downloading ISO files that disable defenses A Russian-speaking cyber criminal is targeting corporate HR teams with fake CVs that quietly install malware which can disable security tools before stealing data from infected

Fake job applications pack malware that kills EDR before stealing data Read More »

Microsoft Authenticator to nuke Entra creds on rooted and jailbroken phones

Uncategorized / SecurityTicks

Microsoft Authenticator to nuke Entra creds on rooted and jailbroken phones 2026-03-10 at 15:28 By Richard Speed Warning, lockout, then wipe if your device trips detection Microsoft is removing Entra credentials for school and work from jailbroken and rooted devices running iOS and Android.… This article is an excerpt from The Register View Original Source

Microsoft Authenticator to nuke Entra creds on rooted and jailbroken phones Read More »

Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts

account hijacking, AWS, Datadog, Don't miss, Hot stuff, News, phishing / SecurityTicks

Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts 2026-03-10 at 15:22 By Zeljka Zorz Phishers are targeting AWS accounts holders with fake email security alerts and redirecting them to a high-fidelity clone of the AWS Management Console sign-in page, Datadog researchers have warned. The cloned AWS phishing page (Source: Datadog Security Labs)

Attackers use AiTM phishing kit, typosquatted domains to hijack AWS accounts Read More »

Strategy records biggest STRC issuance day with estimated 1,420 BTC buy

Teen crew caught selling DDoS attack tools

cybercrime, DDoS, EU, law enforcement, News, poland / SecurityTicks

Teen crew caught selling DDoS attack tools 2026-03-10 at 15:07 By Sinisa Markovic Seven minors who distributed online programs designed to facilitate DDoS attacks have been identified by Poland’s Central Bureau for Combating Cybercrime (CBZC). They were between 12 and 16 at the time of the crime. CBZC officer during a cybercrime investigation (Source: Poland’s

Teen crew caught selling DDoS attack tools Read More »