SecurityTicks

n8n Token Exchange Flaw Could Let Attackers Log In as Users From Another Issuer 2026-07-16 at 18:27 By n8n, the workflow automation platform, handed out the wrong accounts at login. On Enterprise instances configured to trust more than one external token issuer, it matched an incoming JWT to a local user on the sub claim alone and […]

20+ Hijacked Government Websites Became
an Attack Channel 2026-07-16 at 18:27 By More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a leading provider of interactive malware analysis and threat intelligence solutions. The investigation revealed previously undocumented backdoor behavior, hidden infrastructure relationships, and

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password 2026-07-16 at 18:27 By ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands 2026-07-16 at 18:27 By Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread,

New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker Commands 2026-07-16 at 16:41 By Ask an AI agent to summarize the reviews on a product page, and a single planted review can make it click “Buy Now” instead. Ask a coding assistant to apply a maintainer’s fix from a GitHub thread,

20+ Hijacked Government Websites Became
an Attack Channel 2026-07-16 at 16:41 By More than 20 Brazilian government websites were hijacked and turned into malware delivery channels in an active PhantomEnigma campaign uncovered by ANY.RUN, a leading provider of interactive malware analysis and threat intelligence solutions. The investigation revealed previously undocumented backdoor behavior, hidden infrastructure relationships, and

Daxin Resurfaces in Taiwan Alongside Stupig Pre-Login SYSTEM Backdoor 2026-07-16 at 16:41 By An advanced malware previously attributed to a China-linked threat actor has resurfaced after more than four years within a Taiwan manufacturing firm, along with a previously unreported backdoor dubbed Stupig. Daxin (“srt64.sys”), as the kernel-mode rootkit is referred to, was first documented

New TELEPUZ Malware Spreads via ClickFix to Steal Data and Run Commands 2026-07-16 at 15:50 By Cybersecurity researchers have called attention to a new modular malware called TELEPUZ that’s been spreading via websites infected with ClickFix lures since late April 2026. “The malware is full-featured, lightweight, and modular,” Elastic Security Labs researcher Cyril François said

New ClickLock macOS Stealer Kills Apps Every 210ms Until Victims Type Their Password 2026-07-16 at 15:33 By ClickLock Stealer, a new macOS infostealer, answers a victim’s refusal by killing their apps on a loop until they hand over the login password. It arrives as a command pasted into Terminal, asks for the password behind a