SecurityTicks - Security Ticks

YouTubers targeted with fake sponsorships and “channel verification” phishing

account hijacking, Don't miss, ESET, Google, News, scams, tips, Youtube / SecurityTicks

YouTubers targeted with fake sponsorships and “channel verification” phishing 2026-10-08 at 15:41 By Zeljka Zorz Scammers are going after YouTube creators’ Google accounts by posing as a brand looking for sponsorship partners. By sending out personalized emails that reference a creator’s own videos and directing targeted creators to a convincing fake collaboration platform, the fraudsters […]

YouTubers targeted with fake sponsorships and “channel verification” phishing Read More »

SonicWall and Splunk Patch Critical Vulnerabilities

patch, SonicWall, Splunk, Vulnerabilities, vulnerability / SecurityTicks

SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall and Splunk Patch Critical Vulnerabilities Read More »

Anthropic’s new budget model gets much better at ignoring hidden commands

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News / SecurityTicks

Anthropic’s new budget model gets much better at ignoring hidden commands 2026-10-08 at 14:24 By Anamarija Pogorelec Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter […]

Anthropic’s new budget model gets much better at ignoring hidden commands Read More »

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Uncategorized / SecurityTicks

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia 2026-10-08 at 13:30 By Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page […]

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia Read More »

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

AI, botnet, Don't miss, GitHub, Hot stuff, Malware, News / SecurityTicks

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers 2026-10-08 at 13:24 By Sinisa Markovic Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and […]

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Read More »

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Uncategorized / SecurityTicks

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm 2026-10-08 at 13:01 By The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 “contains obfuscated malware that harvests credentials, exfiltrates […]

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm Read More »

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls

markets / SecurityTicks

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls 2026-10-08 at 12:56 By Cointelegraph by William Suberg Bitcoin’s realized cap rise in the 30 days to Oct. 5 came mostly from existing holders, not fresh capital, Glassnode data showed. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls Read More »

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Uncategorized / SecurityTicks

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases 2026-10-08 at 12:46 By Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. “The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their […]

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Read More »

ESMA gives crypto firms 3 months to exit non-compliant stablecoins

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme

charged, cybercrime, MonsterCloud, Ransomware / SecurityTicks

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme 2026-10-08 at 12:27 By Ionut Arghire Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation. The post Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme appeared first on SecurityWeek. This article is an excerpt from […]

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme Read More »

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News / SecurityTicks

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

backdoor, critical infrastructure, cybercrime, ESET, Malware, News, Russian Federation, Ukraine / SecurityTicks

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor 2026-10-08 at 12:00 By Mirko Zorz ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in […]

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor Read More »

Samsung Wallet to add USDC transfers for US Galaxy users in October

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

data breach, Data Breaches, healthcare, Oracle Health / SecurityTicks

Oracle Health Data Breach Tally Climbs to Nearly 20 Million 2026-10-08 at 11:23 By Eduard Kovacs The figure is far higher than the counts that surfaced in earlier filings and patient notifications. The post Oracle Health Data Breach Tally Climbs to Nearly 20 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Oracle Health Data Breach Tally Climbs to Nearly 20 Million Read More »

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

FBI, law enforcement, News, Ransomware, US DoJ, USA / SecurityTicks

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims 2026-10-08 at 11:00 By Sinisa Markovic The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and billing them far more than the ransom. Zohar Pinhasi (aka “Zack Silver” and “Zack […]

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims Read More »

FortiBleed Attackers Locking Victims Out of Fortinet Devices

Featured, FortiBleed, Fortinet, Malware & Threats / SecurityTicks

FortiBleed Attackers Locking Victims Out of Fortinet Devices 2026-10-08 at 10:52 By Ionut Arghire Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

FortiBleed Attackers Locking Victims Out of Fortinet Devices Read More »

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks

Uncategorized / SecurityTicks

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks 2026-10-08 at 10:42 By The U.S. State Department is offering up to $10 million for information leading to the identification or location of Zhang Yu, a Chinese national charged in the United States in connection with the 2021 Microsoft Exchange […]

U.S. Offers Up to $10 Million for Tips on Zhang Yu, Charged in HAFNIUM Hacks Read More »

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data

Uncategorized / SecurityTicks

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data 2026-10-08 at 10:41 By The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims by secretly paying the attackers to obtain decryptors while claiming to use proprietary tools to […]

MonsterCloud Owner Accused of Billing Over $19M While Secretly Paying Ransoms to Decrypt Data Read More »

Pricing your bad days and how to build an economic model for security decisions

boardroom, CISO, CXO, cyber insurance, cyber risk, Don't miss, Features, Hot stuff, News, Risk Management, strategy, tips / SecurityTicks

Pricing your bad days and how to build an economic model for security decisions 2026-10-08 at 09:00 By Mirko Zorz Ivan Milenkovic, VP Risk Technology EMEA at Qualys, explains how security leaders can build an economic model that puts money behind their decisions. He suggests starting with a few loss scenarios, then working down to […]

Pricing your bad days and how to build an economic model for security decisions Read More »

Who watches the AI watching your street?

AI, CCTV, Don't miss, Features, Hot stuff, News, Privacy, research, security cameras, surveillance / SecurityTicks

Who watches the AI watching your street? 2026-10-08 at 08:30 By Mirko Zorz Yusaku Fujii, a professor at Gunma University in Japan, has designed audits and penalties to stop operators from misusing AI that analyzes street camera footage. His system adds an independent record-keeper and unannounced spot checks to the AI’s outputs. Fujii’s test setting […]

Who watches the AI watching your street? Read More »