SecurityTicks

24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login 2026-07-28 at 18:41 By Cybersecurity researchers have sounded an alert after finding more than 36,000 Baseboard Management Controller (BMC) management interfaces exposing Intelligent Platform Management Interface (IPMI) protocol to the public internet. Of the 36,872 internet-exposed server-management interfaces running IPMI, 24,650 have been found to disclose […]

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process 2026-07-28 at 18:01 By A new Mirai-derived botnet called Tengu can use a compromised Linux device’s hardware watchdog to trigger a reboot when defenders kill its main process. If that happens, Tengu’s other persistence mechanisms get another chance to relaunch it. Nozomi Networks Labs

Security Leaders Weigh in on Open Secure AI Alliance 2026-07-28 at 17:47 By Recently, a number of organizations announced the establishment of an open secure AI alliance.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as Root 2026-07-28 at 17:29 By OpenWrt has shipped version 24.10.8 to close a critical DHCPv6 stack overflow and a wider set of remotely triggerable flaws in network services enabled by default. The critical issue, tracked as CVE-2026-53921 and rated 9.8 on CVSS 3.1 in

JFrog Confirms OpenAI Models Exploited Artifactory Zero-Day Before Hugging Face Breach 2026-07-28 at 16:33 By JFrog has confirmed that OpenAI models exploited a zero-day in self-hosted Artifactory while trying to reach the open internet from a sealed evaluation environment. Artifactory is JFrog’s software repository manager. OpenAI says the models then escalated privileges and moved laterally

Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays 2026-07-28 at 16:10 By The Iranian state-backed hacking group tracked as Nimbus Manticore (aka GalaxyGato, Mirage Kitten, Smoke Sandstorm, Subtle Snail, and UNC1549) has been attributed to a fresh set of attacks targeting entities across the Middle East, Africa, and South Asia. The intrusions