SecurityTicks

Anthropic sure has a mess on its hands thanks to that Claude Code source leak 2026-04-06 at 05:33 By Brandon Vigliarolo Pay no attention to that code behind the curtain, says Anthropic as it scrambles to defend its IPO Kettle  When it comes to circling up for this week’s Kettle, what is there to discuss

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation 2026-04-06 at 00:27 By Drift has revealed that the April 1, 2026, attack that led to the theft of $285 million was the culmination of a months-long targeted and meticulously planned social engineering operation undertaken by the Democratic People’s Republic of Korea (DPRK) that began in the

Researchers didn’t want to glamorize cybercrims. So they roasted them 2026-04-05 at 17:32 By Jessica Lyons True-crime tales of criminals making fools of themselves interview  Cybercrime crews have become almost mystical entities, with security vendors assigning them names like Wizard Spider and Velvet Tempest.… This article is an excerpt from The Register View Original Source

AI agents promise to ‘run the business,’ but who is liable if things go wrong? 2026-04-05 at 14:02 By Lindsay Clark Vendors tout the potential, but responsibility remains unclear Feature  “You can’t blame it on the box,” says the boss of a UK financial regulator. What about the people who sold you the box? Good

How Nvidia learned to embrace the light in its quest for scale 2026-04-05 at 11:17 By Tobias Mann The GPU king’s move to optical scale-up was inevitable If you thought Nvidia’s GB200 rack systems were big, CEO Jensen Huang is just getting started. At GTC last month, the world’s most valuable company revealed plans to

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants 2026-04-05 at 10:14 By Cybersecurity researchers have discovered 36 malicious packages in the npm registry that are disguised as Strapi CMS plugins but come with different payloads to facilitate Redis and PostgreSQL exploitation, deploy reverse shells, harvest credentials, and drop a persistent implant. “Every package

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS 2026-04-05 at 10:14 By Fortinet has released out-of-band patches for a critical security flaw impacting FortiClient EMS that it said has been exploited in the wild. The vulnerability, tracked as CVE-2026-35616 (CVSS score: 9.1), has been described as a pre-authentication API access bypass leading to privilege escalation. “An improper access