SecurityTicks

Popular sex toy company admits hacker stole sensitive customer information 2026-02-25 at 20:45 By Hannah Sparks These sex toy shoppers are f—ked. X-rated accessories maker Tenga informed customers earlier this month of a data breach that likely included their names, email addresses and past order details, TechCrunch has reported. “An unauthorized party gained access to […]

Google Disrupts UNC2814 GRIDTIDE Campaign After 53 Breaches Across 42 Countries 2026-02-25 at 20:44 By Google on Wednesday disclosed that it worked with industry partners to disrupt the infrastructure of a suspected China-nexus cyber espionage group tracked as UNC2814 that breached at least 53 organizations across 42 countries. “This prolific, elusive actor has a long […]

Hardly anybody bought Samsung’s last smartphones for AI. It hopes this year’s models change that 2026-02-25 at 20:13 By Simon Sharwood But only Qualcomm can power the most alluring features Just 20 percent of punters who bought Samsung’s 2025 flagship smartphone, the Galaxy S25 Ultra, cited AI as the main reason for their purchase. With […]

Claude Code Flaws Allow Remote Code Execution and API Key Exfiltration 2026-02-25 at 19:47 By Cybersecurity researchers have disclosed multiple security vulnerabilities in Anthropic’s Claude Code, an artificial intelligence (AI)-powered coding assistant, that could result in remote code execution and theft of API credentials. “The vulnerabilities exploit various configuration mechanisms, including Hooks, Model Context Protocol […]

Trump’s message for big tech with energy-hungry AI projects: Build your own power plants! 2026-02-25 at 19:05 By Thomas Barrabi President Trump said he has told tech companies they’ll need to build their own power plants to support artificial intelligence development – a move that comes as he looks to ease energy costs for ordinary […]

Fake ‘interview’ repos lure Next.js devs into running secret-stealing malware 2026-02-25 at 19:04 By Connor Jones Come for the coding test, stay for the C2 traffic Next.js developers are once again in the crosshairs as hackers seed malicious repositories disguised as legitimate projects, according to Microsoft, which said a limited set of those repos were […]

Strategies for Security Leaders in the Midst of Skill Shortages 2026-02-25 at 19:04 By In this episode of Lock It Down with Security Magazine, Chief Security & Trust Officer Kory Daniels shares how security leaders struggling with skill shortages can make strategic tradeoffs to lessen their team’s burden. This article is an excerpt from Subscribe […]

Microsoft boss on AI content: ‘Nobody wants anything that is sloppy’ 2026-02-25 at 18:39 By Richard Speed Sometimes the ‘S’ word slips through even the best media training Is it OK to say “slop” again? Microsoft boss Satya Nadella took to the stage on the London leg of the company’s AI tour and said the […]

Ex-L3Harris exec jailed 7 years for selling exploits to Russia 2026-02-25 at 18:26 By Connor Jones Former Trenchant manager profited millions from cyber tools reserved for the US The former general manager of L3Harris’s cyber arm will spend the next seven years behind bars for selling trade secrets to Russia.… This article is an excerpt […]

Hubble in a death spiral that could end as early as 2028 without a reboost 2026-02-25 at 18:26 By Richard Speed Orbit decay accelerates as solar activity rises, with no approved mission yet to raise the telescope’s altitude A newly released plot of the Hubble Space Telescope’s altitude shows just how quickly the observatory has […]

Top 5 Ways Broken Triage Increases Business Risk Instead of Reducing It 2026-02-25 at 18:25 By Triage is supposed to make things simpler. In a lot of teams, it does the opposite. When you can’t reach a confident verdict early, alerts turn into repeat checks, back-and-forth, and “just escalate it” calls. That cost doesn’t stay […]

SLH Offers $500–$1,000 Per Call to Recruit Women for IT Help Desk Vishing Attacks 2026-02-25 at 18:25 By The notorious cybercrime collective known as Scattered LAPSUS$ Hunters (SLH) has been observed offering financial incentives to recruit women to pull off social engineering attacks. The idea is to hire them for voice phishing campaigns targeting IT […]

Malicious NuGet Packages Stole ASP.NET Data; npm Package Dropped Malware 2026-02-25 at 18:25 By Cybersecurity researchers have discovered four malicious NuGet packages that are designed to target ASP.NET web application developers to steal sensitive data. The campaign, discovered by Socket, exfiltrates ASP.NET Identity data, including user accounts, role assignments, and permission mappings, as well as […]