SecurityTicks - Security Ticks

Corma Raises $60 Million for Defensive Cybersecurity AI Model

AI, Artificial Intelligence, Corma, Cybersecurity Funding, emerge from stealth, funding / SecurityTicks

Corma Raises $60 Million for Defensive Cybersecurity AI Model 2026-08-11 at 15:01 By SecurityWeek News Corma emerged from stealth with seed funding from Sequoia Capital, Khosla Ventures, and Coatue. The post Corma Raises $60 Million for Defensive Cybersecurity AI Model appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Corma Raises $60 Million for Defensive Cybersecurity AI Model Read More »

Frontier AI Just Made the Race to Patch Vulns That Much Harder

Uncategorized / SecurityTicks

Frontier AI Just Made the Race to Patch Vulns That Much Harder 2026-08-11 at 14:45 By Dominic Djannesari For the 99.9% of organizations bracing for an era of endless Zero Days, it’s time to act—and fast This article is an excerpt from SECURITY.COM View Original Source

Frontier AI Just Made the Race to Patch Vulns That Much Harder Read More »

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers

Uncategorized / SecurityTicks

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers 2026-08-11 at 14:35 By Security researchers invented a cryptocurrency startup, advertised developer jobs, and hired three people they believe were North Korean operatives. Every virtual machine the company issued was recording. The onboarding paperwork is the part hiring teams can use.

Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers Read More »

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities

AI sidebar, Chrome, data theft, extension, fraud, Malware & Threats / SecurityTicks

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities 2026-08-11 at 14:15 By Eduard Kovacs The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data. The post Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities appeared first on SecurityWeek.

Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities Read More »

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11

Uncategorized / SecurityTicks

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 2026-08-11 at 13:48 By Windows Plug and Play can be abused to fetch signed vendor software for an emulated USB device and execute privileged installation components that researchers chained to SYSTEM access on a fully updated Windows 11 machine. The same PnP path

Researchers Turn USB Auto-Install Into a Full SYSTEM Takeover on Windows 11 Read More »

Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption

hacker, Hacker Conversations, Marcus Hutchins / SecurityTicks

Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption 2026-08-11 at 13:00 By Kevin Townsend Marcus Hutchins doesn’t personally consider himself a hacker – but he accepts the epithet because it’s a widely used term for what he once did. The post Hacker Conversations: Marcus Hutchins and the Journey From the

Hacker Conversations: Marcus Hutchins and the Journey From the Gray Zone to Redemption Read More »

Ransomware gangs don’t need control system access to disrupt industrial production

critical infrastructure, Dragos, News, Ransomware / SecurityTicks

Ransomware gangs don’t need control system access to disrupt industrial production 2026-08-11 at 12:32 By Sinisa Markovic Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial

Ransomware gangs don’t need control system access to disrupt industrial production Read More »

Locking your ssh-agent exposed local-only keys until OpenSSH 10.5

Linux, News, open source, OpenSSH, software / SecurityTicks

Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 2026-08-11 at 12:15 By Anamarija Pogorelec Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the check that tells the agent whether a request came from your own machine or arrived

Locking your ssh-agent exposed local-only keys until OpenSSH 10.5 Read More »

Anthropic strikes $9B compute deal with Bitcoin miner Riot: Report

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine

Uncategorized / SecurityTicks

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine 2026-08-11 at 09:55 By Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular network the local grid operator uses to reach remote equipment. The plant

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine Read More »

GPT-5.6-Cyber refuses security researchers’ requests far less often

AI, News, OpenAI, red team / SecurityTicks

GPT-5.6-Cyber refuses security researchers’ requests far less often 2026-08-11 at 09:32 By Sinisa Markovic GPT-5.6-Cyber is a new OpenAI model built on GPT-5.6 Sol, trained to find zero-day vulnerabilities and build exploit chains, with fewer refusals on higher-risk, dual-use work. Model is available only through Daybreak Red, the higher tier of OpenAI’s vetted access program

GPT-5.6-Cyber refuses security researchers’ requests far less often Read More »

South Korea drops Travel Rule threshold for crypto transfers

Mozilla Issues New Firefox GPG Key Following Exposure

Application Security, Data Protection, exposed key, Firefox, GPG, Mozilla, signing key, supply chain, Thunderbird / SecurityTicks

Mozilla Issues New Firefox GPG Key Following Exposure 2026-08-11 at 09:16 By Eduard Kovacs The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it. The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Mozilla Issues New Firefox GPG Key Following Exposure Read More »

Who will be the Stanislav Petrov in your organization?

AI, BH Consulting, boardroom, Brian Honan, CISO, cybersecurity, Don't miss, Expert analysis, Expert corner, Hot stuff, News, opinion / SecurityTicks

Who will be the Stanislav Petrov in your organization? 2026-08-11 at 09:00 By Help Net Security The recent news coverage of “rogue AI” systems hacking innocent companies reminded me of one of the world’s most unsung heroes and genuinely someone who may well have saved the world. In 1983, the USSR’s early warning systems reported

Who will be the Stanislav Petrov in your organization? Read More »

Payments platform Decta explores stablecoin-enabled treasury settlement

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins

Uncategorized / SecurityTicks

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins 2026-08-11 at 08:48 By Cybersecurity researchers have warned of a supply chain compromise impacting WordPress plugin vendor BdThemes, prompting the content management systems (CMS) platform’s plugins team to temporarily disable their downloads. “Unlike traditional software supply chain attacks, zero source code files were modified

BdThemes Supply Chain Attack Poisons JSON to Create Rogue WordPress Admins Read More »

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix

5G, AI, cybersecurity, Don't miss, Features, Hot stuff, networking, News, research / SecurityTicks

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix 2026-08-11 at 08:30 By Mirko Zorz Researchers at Nanyang Technological University turned a set of AI agents loose on the software that runs 4G and 5G phone networks, and the agents came back with 84 security flaws

An AI tool found 84 flaws in 5G network software and 23 of them still have no fix Read More »

Previously unseen entry vector used to breach Polish energy plant

CERT-PL, critical infrastructure, cyberattack, energy sector, EU, News, poland / SecurityTicks

Previously unseen entry vector used to breach Polish energy plant 2026-08-11 at 08:00 By Sinisa Markovic The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a

Previously unseen entry vector used to breach Polish energy plant Read More »

Mass Kidnapping Increased 154% from 2020 to 2025

Uncategorized / SecurityTicks

Mass Kidnapping Increased 154% from 2020 to 2025 2026-08-11 at 08:00 By 2026 will see an increase in kidnaps-for-ransom. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Mass Kidnapping Increased 154% from 2020 to 2025 Read More »

Your security vendor gets the frontier cyber model, you get the findings

AI, News, OpenAI, red team / SecurityTicks

Your security vendor gets the frontier cyber model, you get the findings 2026-08-11 at 07:43 By Anamarija Pogorelec Selected red team specialists can now use OpenAI’s cyber models to find and exploit weaknesses in client applications and infrastructure. Those clients never get the models themselves. That split is the design of the Daybreak Cyber Partner

Your security vendor gets the frontier cyber model, you get the findings Read More »