SecurityTicks

Microsoft 365 accounts compromised at 79 organizations, no passwords needed

cybercrime, Don't miss, email security, Hot stuff, Huntress, Microsoft 365, News, phishing /

Microsoft 365 accounts compromised at 79 organizations, no passwords needed 2026-10-23 at 14:45 By Sinisa Markovic An attacker who spent ten weeks replaying stolen Microsoft 365 sign-in sessions broke into email accounts at 79 organizations and used hidden inbox rules to keep victims from seeing parts of their own mail, according to Huntress. The researchers […]

Microsoft 365 accounts compromised at 79 organizations, no passwords needed Read More »

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches

Uncategorized /

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches 2026-10-23 at 14:25 By PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new issue, assigned CVE-2026-115560, affects only web applications configured in an […]

PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches Read More »

Cysic dangles a 10% bounty, hacker pours loot into Tornado Cash

Latest News /

Cysic dangles a 10% bounty, hacker pours loot into Tornado Cash 2026-10-23 at 14:22 By Cointelegraph by Zoltan Vardai The attacker moved $744,000 in ETH and BNB to Tornado Cash after exploiting Cysic’s bridge to mint 10 million tokens on BNB Smart Chain. This article is an excerpt from Cointelegraph.com News View Original Source

Cysic dangles a 10% bounty, hacker pours loot into Tornado Cash Read More »

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image

Uncategorized /

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image 2026-10-23 at 14:21 By Pillow, the most widely used image library for Python, can be made to run operating system commands on a server by specifying the name of a file it is told to open. The flaw, CVE-2026-112900, is in […]

Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image Read More »

Wall Street urging Anthropic, OpenAI to do their IPOs this year ‘before things get crazy’ — here’s why

Uncategorized /

Wall Street urging Anthropic, OpenAI to do their IPOs this year ‘before things get crazy’ — here’s why 2026-10-23 at 14:00 By Charles Gasparino The reasons go well beyond the risks of an AI bubble. This article is an excerpt from Latest Technology News | New York Post View Original Source

Wall Street urging Anthropic, OpenAI to do their IPOs this year ‘before things get crazy’ — here’s why Read More »

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

AI, Artificial Intelligence, China, China APT, ConnectWise, Malware & Threats, Microsoft /

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 at 13:31 By Ionut Arghire The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks Read More »

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

Arista, exploited, Vulnerabilities, vulnerability, Zero-Day /

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months 2026-10-23 at 12:58 By Ionut Arghire The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months Read More »

Bybit secures first full Dubai license for spot trading services

Latest News /

Bybit secures first full Dubai license for spot trading services 2026-10-23 at 12:50 By Cointelegraph by Ezra Reguerra Bybit’s new VARA licence authorizes spot trading services in Dubai, but the exchange must complete additional regulatory requirements before launching. This article is an excerpt from Cointelegraph.com News View Original Source

Bybit secures first full Dubai license for spot trading services Read More »

Capcom data breach exposes 11.7 million account records

cyberattack, data breach, News, online gaming /

Capcom data breach exposes 11.7 million account records 2026-10-23 at 12:07 By Sinisa Markovic Players who signed up for Capcom’s online account service may want to look twice at emails that seem to come from the company. The company has disclosed that a third party gained unauthorized access to customer information linked to CAPCOM ID, […]

Capcom data breach exposes 11.7 million account records Read More »

HSBC launches Hong Kong dollar stablecoin for retail payments

Latest News /

HSBC launches Hong Kong dollar stablecoin for retail payments 2026-10-23 at 11:47 By Cointelegraph by Ezra Reguerra HSBC is rolling out RedCoin wallets to PayMe users, with plans to support tokenized investment subscriptions and expand into institutional uses. This article is an excerpt from Cointelegraph.com News View Original Source

HSBC launches Hong Kong dollar stablecoin for retail payments Read More »

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data

Uncategorized /

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data 2026-10-23 at 11:40 By Malicious Brotli data can make an application on an official build of Node.js run attacker-supplied code, security researchers at Imperva have demonstrated. Their “Node2Shell” proof of concept ran code on the official Node.js 24.22.0 image for Linux arm64, with no […]

Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data Read More »

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances

Uncategorized /

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances 2026-10-23 at 11:35 By AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token if a malicious API asked for it, security firm V12 said on October 22. The cause was the SDKs’ default […]

Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances Read More »

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’

data breach, Data Breaches, healthcare, Quest Diagnostics /

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ 2026-10-23 at 11:25 By Associated Press In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ appeared first on SecurityWeek. This […]

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ Read More »

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense

AI, cybercrime, Don't miss, Hot stuff, News, Symantec /

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense 2026-10-23 at 11:21 By Sinisa Markovic An attack tool built around AI goes looking for AI models that anyone on the internet can reach, then uses them to plan break-ins while the model’s owner pays for the computing power. Symantec captured the agent’s instruction […]

Hackers hijack exposed AI models to launch cyberattacks at victims’ expense Read More »

LiteLLM Compromised in Fresh Supply Chain Attack

AI, Artificial Intelligence, Featured, LiteLLM, supply chain attack, Supply Chain Security /

LiteLLM Compromised in Fresh Supply Chain Attack 2026-10-23 at 11:10 By Ionut Arghire Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

LiteLLM Compromised in Fresh Supply Chain Attack Read More »

Atlassian Patches 75 Flaws in Data Center and Server Products

Atlassian, patch, Vulnerabilities, vulnerability /

Atlassian Patches 75 Flaws in Data Center and Server Products 2026-10-23 at 10:54 By Eduard Kovacs Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Atlassian Patches 75 Flaws in Data Center and Server Products Read More »

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware

Uncategorized /

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware 2026-10-23 at 10:40 By Threat actors have been observed unsuccessfully attempting to exploit the newly disclosed PHP2Shell vulnerabilities to rope infected systems into a Mirai botnet variant called Potassium, as it emerges that weaponizing the flaws may be harder than previously thought. The […]

PHP2Shell Exploit Attempts Hit Millions as Attackers Try to Deploy Mirai Malware Read More »

Scroll to Top