SecurityTicks

OpenAI warns employees about foreign ‘honey pots’ offering sex to steal AI secrets 2026-10-15 at 21:24 By Thomas Barrabi The possibility of so-called “honey pot” schemes are just one of several scenarios that OpenAI has used to put its employees on guard against espionage, the Wall Street Journal reported, citing people familiar with the matter. […]

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads 2026-10-15 at 19:22 By Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said […]

Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks 2026-10-15 at 19:22 By The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The activity, observed from June 2025 through August 2026, involves four different […]

Healthcare Ransomware Attacks Doubled Since This Time Last Year 2026-10-15 at 19:00 By Healthcare saw an average of 3.33 attacks each day in Q3 2026.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams 2026-10-15 at 18:26 By A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to be a rebrand of a traffic monetization operation dubbed ROI777. Help TDS is assessed to be active […]

1M Impacted by CenterPoint Energy Data Breach 2026-10-15 at 17:42 By A data breach against CenterPoint Energy has impacted approximately 1 million Texans.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing 2026-10-15 at 17:17 By Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw. One code-execution flaw is in React Server Components, and the other in librsvg, the […]

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks 2026-10-15 at 17:17 By NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005. There are three memory bugs that F5, the company behind NGINX, says could crash […]