SecurityTicks

UAC-0050 Targets European Financial Institution With Spoofed Domain and RMS Malware 2026-02-24 at 19:12 By A Russia-aligned threat actor has been observed targeting a European financial institution as part of a social engineering attack to likely facilitate intelligence gathering or financial theft, signaling a possible expansion of the threat actor’s targeting beyond Ukraine and into […]

GhostBSD to ditch Xorg for XLibre as Red Hat’s Wayland crusade leaves X11 fans out in the cold 2026-02-24 at 18:52 By Liam Proven FreeBSD’s friendliest desktop distro bets on the controversial fork GhostBSD plans to move to the XLibre X11 server to better support its flagship MATE desktop – as well as Xfce and […]

AMD copy-pastes 6 GW chips-for-stock deal in new Meta agreement 2026-02-24 at 18:52 By Brandon Vigliarolo The House of Zen signed a nearly identical deal with OpenAI last fall AMD just signed a mega chip deal with Meta that appears almost identical to the one it signed with OpenAI last fall. And just like all […]

Go library maintainer brands GitHub’s Dependabot a ‘noise machine’ 2026-02-24 at 18:52 By Tim Anderson When a one-line fix triggers thousands of PRs, something’s off A Go library maintainer has urged developers to turn off GitHub’s Dependabot, arguing that false positives from the dependency-scanning tool “reduce security by causing alert fatigue.”… This article is an […]

Microsoft gives Windows laggards the ‘gift of time’ wrapped in licensing fees 2026-02-24 at 17:07 By Richard Speed With Server 2016 and other OSes for the chop, security fixes can continue to flow for a price Microsoft is giving Windows customers the “gift of time” but expects compensation for its generosity.… This article is an […]

Identity Prioritization isn’t a Backlog Problem – It’s a Risk Math Problem 2026-02-24 at 16:42 By Most identity programs still prioritize work the way they prioritize IT tickets: by volume, loudness, or “what failed a control check.” That approach breaks the moment your environment stops being mostly-human and mostly-onboarded. In modern enterprises, identity risk is […]

UnsolicitedBooker Targets Central Asian Telecoms With LuciDoor and MarsSnake Backdoors 2026-02-24 at 16:42 By The threat activity cluster known as UnsolicitedBooker has been observed targeting telecommunications companies in Kyrgyzstan and Tajikistan, marking a shift from prior attacks aimed at Saudi Arabian entities. The attacks involve the deployment of two distinct backdoors codenamed LuciDoor and MarsSnake, […]

Lazarus Group Uses Medusa Ransomware in Middle East and U.S. Healthcare Attacks 2026-02-24 at 16:42 By The North Korea-linked Lazarus Group (aka Diamond Sleet and Pompilus) has been observed using Medusa ransomware in an attack targeting an unnamed entity in the Middle East, according to a new report by the Symantec and Carbon Black Threat […]