SecurityTicks

Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE 2026-10-12 at 15:02 By A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack. The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrary PHP […]

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch 2026-10-12 at 13:36 By Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure. The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side […]

AI safety ‘doomers’ pouring cash into Minnesota’s Senate race for Sanders-backed lefty Peggy Flanagan 2026-10-12 at 13:00 By Thomas Barrabi Silicon Valley AI safety “doomers” are flooding Minnesota’s Senate race with donations for Bernie Sanders-backed Democrat Peggy Flanagan – who has called the tech an “existential threat” to humanity, The Post has learned. This article […]

The Unintended Consequences: Why “Quick Fix” Security May Compromise Life Safety 2026-10-12 at 12:00 By In the wake of increasing safety concerns, school administrators understandably face immense pressure to act quickly to fortify their classrooms. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records 2026-10-12 at 10:26 By Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine. The activity, which brings together commodity offensive tools like Cobalt Strike with an AI […]