SecurityTicks - Security Ticks

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach 2026-07-28 at 16:33 By JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog’s software repository manager. OpenAI says the models then escalated privileges and moved laterally […]

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach Read More »

BlackCloak extends deepfake protection to the executive’s trusted circle

Black Hat, Black Hat USA 2026, BlackCloak, Industry news / SecurityTicks

BlackCloak extends deepfake protection to the executive’s trusted circle 2026-07-28 at 16:15 By Industry News Deepfakes have made one of our oldest assumptions unreliable: that you can trust a familiar face or voice. While the industry focuses mainly on building “in-line detection tools” that try to spot the fake, BlackCloak, the leader in Digital Executive

BlackCloak extends deepfake protection to the executive’s trusted circle Read More »

Bugcrowd introduces Savant Pathseeker for agentic penetration testing with exploit validation

Bugcrowd, Industry news / SecurityTicks

Bugcrowd introduces Savant Pathseeker for agentic penetration testing with exploit validation 2026-07-28 at 16:14 By Industry News Bugcrowd unveils Savant Pathseeker, the first solution in its Agentic Offensive Testing line. Savant Pathseeker gives security teams the speed and scale to test every external web application and API continuously, not just the assets that make it

Bugcrowd introduces Savant Pathseeker for agentic penetration testing with exploit validation Read More »

PayPal expands stablecoin push as crypto assets factor into Q2 results

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays

Uncategorized / SecurityTicks

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays 2026-07-28 at 16:10 By The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays Read More »

Prescient Security adds attack surface management to Cait, broadens AI-assisted pentesting

Industry news / SecurityTicks

Prescient Security adds attack surface management to Cait, broadens AI-assisted pentesting 2026-07-28 at 16:10 By Industry News Prescient Security has announced a series of capability expansions to Cait (Cacilian AI), its continuous AI-assisted penetration testing service. The updates which will roll out through summer 2026 add attack surface management (ASM), new asset testing types and

Prescient Security adds attack surface management to Cait, broadens AI-assisted pentesting Read More »

OT Security Startup Frenos Raises $1.52 Million

Cybersecurity Funding, Frenos, funding, ICS, ICS/OT, OT / SecurityTicks

OT Security Startup Frenos Raises $1.52 Million 2026-07-28 at 16:05 By Ionut Arghire The company will use the fresh investment to grow its customer success and AI R&D teams. The post OT Security Startup Frenos Raises $1.52 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

OT Security Startup Frenos Raises $1.52 Million Read More »

Cyberhaven launches Flow to secure data across human and AI workflows

Cyberhaven, Industry news / SecurityTicks

Cyberhaven launches Flow to secure data across human and AI workflows 2026-07-28 at 16:03 By Industry News Cyberhaven has introduced Cyberhaven Flow, an AI-native data security platform built to protect data across human and AI workflows. Flow connects lineage, identity, and behavior to protect data as it is created, copied, fragmented, and shared, marking a

Cyberhaven launches Flow to secure data across human and AI workflows Read More »

Ethereum, Solana led crypto hack losses in H1 2026: Blockaid

Intel 471 expands Verity471 with AI agent and MCP support for threat intelligence

Industry news, Intel 471 / SecurityTicks

Intel 471 expands Verity471 with AI agent and MCP support for threat intelligence 2026-07-28 at 15:55 By Industry News Intel 471 has announced two new AI capabilities in the Verity471 platform, MCP471 and Agent471. As attackers use AI to lower the barrier to scale, security teams must use their own AI capabilities to make intelligence

Intel 471 expands Verity471 with AI agent and MCP support for threat intelligence Read More »

SpecterOps brings AWS attack path management and AI to hybrid identity security

Industry news, SpecterOps / SecurityTicks

SpecterOps brings AWS attack path management and AI to hybrid identity security 2026-07-28 at 15:48 By Industry News SpecterOps has announced new capabilities built to give defenders a dynamic understanding of how adversaries traverse their hybrid environment and the ability to proactively eliminate pathways before they can be abused. BloodHound Enterprise adds support for Amazon

SpecterOps brings AWS attack path management and AI to hybrid identity security Read More »

Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response

Industry news, Team Cymru / SecurityTicks

Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response 2026-07-28 at 15:36 By Industry News Team Cymru has announced Pure Signal Command, the connected operating environment for analysts, security teams, applications, and AI agents to access and act on Team Cymru’s internet infrastructure intelligence. Command unlocks Team Cymru’s globally observed threat

Team Cymru unveils Pure Signal Command for AI-powered threat intelligence and incident response Read More »

Exposed BMCs hand out password hashes before login

authentication, Don't miss, hardware, HPE, News, passwords, research, Supermicro, vulnerability / SecurityTicks

Exposed BMCs hand out password hashes before login 2026-07-28 at 15:00 By Sinisa Markovic An attacker who reaches UDP port 623 on a server’s baseboard management controller can ask it for a password hash and receive one before logging in. The exchange is part of the IPMI 2.0 handshake, built on an authentication protocol introduced

Exposed BMCs hand out password hashes before login Read More »

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model

AI, AI model, Artificial Intelligence, MAI-Cyber-1-Flash, Microsoft / SecurityTicks

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model 2026-07-28 at 14:11 By Eduard Kovacs The company claims MAI-Cyber-1-Flash tops Anthropic’s Mythos and OpenAI’s GPT-5.6 Sol in CyberGym testing. The post Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft Unveils MAI-Cyber-1-Flash, Its First Cybersecurity AI Model Read More »

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077)

continuous integration, Don't miss, enterprise, Hot stuff, JetBrains, News, software development, vulnerability / SecurityTicks

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077) 2026-07-28 at 14:04 By Zeljka Zorz JetBrains has fixed a critical vulnerability (CVE-2026-63077) affecting TeamCity On-Premises and is urging admins to upgrade self-hosted servers as soon as possible. “For those who are unable to do so, we have released a security patch plugin,” noted Daniel Gallo,

JetBrains fixes critical unauthenticated RCE in TeamCity On-Premises (CVE-2026-63077) Read More »

VERITAS project could change the way scientists secure AI

AI, cybersecurity, News / SecurityTicks

VERITAS project could change the way scientists secure AI 2026-07-28 at 14:02 By Sinisa Markovic The AI models, datasets, and automated systems researchers depend on can be compromised in ways conventional cybersecurity tools aren’t designed to detect. A new project called VERITAS (VERified Infrastructure for Trustworthy AI in Science) aims to close that gap by

VERITAS project could change the way scientists secure AI Read More »

Act Security Emerges from Stealth to Fight the Patch Problem

funding, Funding/M&A, patch, Vulnerabilities / SecurityTicks

Act Security Emerges from Stealth to Fight the Patch Problem 2026-07-28 at 14:00 By Kevin Townsend Act Security tackles the spiraling patch problem caused by AI’s ability to find new vulnerabilities in existing cloud environments. The post Act Security Emerges from Stealth to Fight the Patch Problem appeared first on SecurityWeek. This article is an

Act Security Emerges from Stealth to Fight the Patch Problem Read More »

Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker

hacker, Hacker Conversations / SecurityTicks

Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker 2026-07-28 at 14:00 By Kevin Townsend Tal Kollander’s history divides neatly into two halves: first as an active hacker and then as the block that stops hacks. The post Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker appeared first on SecurityWeek.

Hacker Conversations: Tal Kollander’s Journey From Black Hat to Hack Blocker Read More »

Hush Security Raises $30 Million for AI Agent Governance

AI, Artificial Intelligence, Cybersecurity Funding, funding, Hush Security / SecurityTicks

Hush Security Raises $30 Million for AI Agent Governance 2026-07-28 at 13:17 By Ionut Arghire The startup will invest in expanding engineering and sales teams, accelerating ecosystem support, and expanding corporate partnerships. The post Hush Security Raises $30 Million for AI Agent Governance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Hush Security Raises $30 Million for AI Agent Governance Read More »