SecurityTicks - Security Ticks

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover 2026-04-15 at 17:15 By A recently disclosed critical security flaw impacting nginx-ui, an open-source, web-based Nginx management tool, has come under active exploitation in the wild. The vulnerability in question is CVE-2026-33032 (CVSS score: 9.8), an authentication bypass vulnerability that enables threat actors to seize control […]

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover Read More »

Humanoid robot chases pack of wild boars in bizarre video: ‘The hero we don’t deserve’

Uncategorized / SecurityTicks

Humanoid robot chases pack of wild boars in bizarre video: ‘The hero we don’t deserve’ 2026-04-15 at 16:35 By Ben Cost It was a real a-pork-alyptic scene. This article is an excerpt from Latest Technology News | New York Post View Original Source

Humanoid robot chases pack of wild boars in bizarre video: ‘The hero we don’t deserve’ Read More »

French cops free mother and son after 20-hour crypto kidnap ordeal

Uncategorized / SecurityTicks

French cops free mother and son after 20-hour crypto kidnap ordeal 2026-04-15 at 16:35 By Connor Jones Latest in a string of cases that have earned France an unfortunate title A mother and her ten-year-old son are now free after being kidnapped for around 20 hours while the father was being extorted for hundreds of […]

French cops free mother and son after 20-hour crypto kidnap ordeal Read More »

Bitdefender extends GravityZone with continuous email threat protection

Bitdefender, Industry news / SecurityTicks

Bitdefender extends GravityZone with continuous email threat protection 2026-04-15 at 16:35 By Industry News Bitdefender has launched GravityZone Extended Email Security, unifying email and endpoint protection in one platform. Built for organizations and MSPs, it uses an ICES approach to deliver continuous protection against modern email threats, including phishing, BEC, ransomware, impersonation, and insider attacks. […]

Bitdefender extends GravityZone with continuous email threat protection Read More »

100 Chrome Extensions Steal User Data, Create Backdoor

backdoor, browser extension, Chrome extension, extension, Malware & Threats / SecurityTicks

100 Chrome Extensions Steal User Data, Create Backdoor 2026-04-15 at 16:34 By Ionut Arghire Published through five accounts, the extensions appear part of a coordinated campaign based on shared C&C infrastructure. The post 100 Chrome Extensions Steal User Data, Create Backdoor appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

100 Chrome Extensions Steal User Data, Create Backdoor Read More »

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks

AI, Artificial Intelligence, Featured, MCP, Vulnerabilities, vulnerability / SecurityTicks

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks 2026-04-15 at 16:34 By Kevin Townsend Researchers warn that a flaw in Anthropic’s Model Context Protocol allows unsanitized commands to execute silently, enabling full system compromise across widely used AI environments. The post ‘By Design’ Flaw in MCP Could Enable Widespread AI Supply […]

‘By Design’ Flaw in MCP Could Enable Widespread AI Supply Chain Attacks Read More »

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems

AI in Cybersecurity, cyber news, Cyberwarfare, Threat Intelligence / SecurityTicks

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems 2026-04-15 at 16:17 By Ashish Khaitan Modern cybersecurity no longer suffers from a lack of data; it suffers too much of it, scattered across systems that rarely speak the same language. Security teams today must monitor endpoints, cloud workloads, SaaS applications, and an ever-expanding universe […]

How Cyble Blaze AI Delivers 360° Threat Visibility Across Dark Web and Enterprise Systems Read More »

Tenable unveils OT discovery engine to expose cyber-physical risks

Industry news, Tenable / SecurityTicks

Tenable unveils OT discovery engine to expose cyber-physical risks 2026-04-15 at 16:17 By Industry News Tenable unveiled a new OT asset discovery engine that enables security teams to bring risks associated with cyber-physical systems (OT, IoT, and shadow IT) into a unified view of cyber exposure. With instant deployment and no additional IT overhead required, […]

Tenable unveils OT discovery engine to expose cyber-physical risks Read More »

CISO Conversations: Ross McKerchar, CISO at Sophos

CISO, CISO Conversations, CISO Strategy / SecurityTicks

CISO Conversations: Ross McKerchar, CISO at Sophos 2026-04-15 at 16:17 By Kevin Townsend Sophos’ Ross McKerchar discusses leadership at scale, retaining talent, defending against AI-enabled threats, and the industry’s growing trust problem. The post CISO Conversations: Ross McKerchar, CISO at Sophos appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISO Conversations: Ross McKerchar, CISO at Sophos Read More »

Pakistan allows banks to serve licensed crypto firms after years-long ban

Virginia updates law to hold unclaimed crypto in-kind for at least one year

Fireblocks launches tool for institutions to earn yield on stablecoins

US states can’t account for datacenter tax breaks. Literally

Uncategorized / SecurityTicks

US states can’t account for datacenter tax breaks. Literally 2026-04-15 at 16:08 By Dan Robinson Report says authorities are flouting accounting rules by failing to disclose revenue lost to server farm subsidies Many US states and local authorities are violating generally accepted accounting principles (GAAP) by failing to disclose revenue lost to datacenter tax subsidy […]

US states can’t account for datacenter tax breaks. Literally Read More »

Headless 360: Salesforce’s latest pitch to let AI do the dev work

Uncategorized / SecurityTicks

Headless 360: Salesforce’s latest pitch to let AI do the dev work 2026-04-15 at 16:08 By Tim Anderson Here comes ‘enterprise vibe coding’ as CRM giant aims to open development to anyone on the platform Salesforce has introduced what it calls Headless 360 at its developer event TDX, which starts today in San Francisco, designed […]

Headless 360: Salesforce’s latest pitch to let AI do the dev work Read More »

Raspberry Pi OS ends open-door policy for sudo

Uncategorized / SecurityTicks

Raspberry Pi OS ends open-door policy for sudo 2026-04-15 at 16:07 By Richard Speed Command prefix will require password by default The latest version of Raspberry Pi OS now requires a password for sudo by default.… This article is an excerpt from The Register View Original Source

Raspberry Pi OS ends open-door policy for sudo Read More »

Ancient Excel bug comes out of retirement for active attacks

Uncategorized / SecurityTicks

Ancient Excel bug comes out of retirement for active attacks 2026-04-15 at 16:07 By Connor Jones Vuln old enough to drive lands on CISA’s exploited list While Microsoft was rolling out its bumper Patch Tuesday updates this week, US cybersecurity agency CISA was readying an alert about a 17-year-old critical Excel flaw now under exploit.… […]

Ancient Excel bug comes out of retirement for active attacks Read More »

MiningDropper – A Global Modular Android Malware Campaign Operating at Scale

cyber news / SecurityTicks

MiningDropper – A Global Modular Android Malware Campaign Operating at Scale 2026-04-15 at 16:07 By rohansinhacyblecom Executive Summary Cyble Research and Intelligence Labs (CRIL) has been monitoring a significant surge in the use of “MiningDropper”, a sophisticated Android malware delivery framework that combines cryptocurrency mining capabilities with the deployment of infostealers, Remote Access Trojans (RATs), […]

MiningDropper – A Global Modular Android Malware Campaign Operating at Scale Read More »

Webinar: The IT Leader’s Guide to AI Governance

Don't miss, News, Storyblok, Whitepapers and webinars / SecurityTicks

Webinar: The IT Leader’s Guide to AI Governance 2026-04-15 at 16:07 By Help Net Security Generative AI is moving from experimentation to everyday enterprise use, often faster than governance models were designed to support. As adoption accelerates, organizations are navigating the evolving landscape with new questions around security, data privacy, compliance, and control, all while […]

Webinar: The IT Leader’s Guide to AI Governance Read More »

Axonius updates Asset Cloud with AI, exposure management, and asset trust standard

Axonius, Industry news / SecurityTicks

Axonius updates Asset Cloud with AI, exposure management, and asset trust standard 2026-04-15 at 16:07 By Industry News Axonius has expanded its Asset Cloud with AI-powered remediation in Axonius Exposures, added support for IoT and OT environments via Axonius Cyber-Physical Assets, and introduced a new data trust standard with Axonius Verified Assets. “Security environments have […]

Axonius updates Asset Cloud with AI, exposure management, and asset trust standard Read More »

Two Vulnerabilities Patched in Ivanti Neurons for ITSM

Ivanti, Vulnerabilities, vulnerability / SecurityTicks

Two Vulnerabilities Patched in Ivanti Neurons for ITSM 2026-04-15 at 16:07 By Ionut Arghire The flaws could allow a remote attacker to maintain access after their account has been disabled and to access information from other user sessions. The post Two Vulnerabilities Patched in Ivanti Neurons for ITSM appeared first on SecurityWeek. This article is […]

Two Vulnerabilities Patched in Ivanti Neurons for ITSM Read More »