SecurityTicks

Public GitHub Issue Could Trick GitHub Agentic Workflows Into Leaking Private Repo Data 2026-07-07 at 17:04 By A public issue can trick GitHub Agentic Workflows into leaking the contents of an organization’s private repositories, researchers at Noma Security have shown. The attacker needs only to open a normal-looking issue on a public repository, with no […]

Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker 2026-07-07 at 16:27 By U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a persistent Windows device ID, according to a newly unsealed federal complaint. Microsoft records tied that ID first to the account

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants 2026-07-07 at 16:27 By Cybersecurity researchers have disclosed details of a now-patched critical session isolation vulnerability in Writer, an enterprise generative artificial intelligence (AI) platform, that could result in cross-tenant compromise. The one-click vulnerability has been codenamed WriteOut by the Sand Security Research

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities 2026-07-07 at 12:51 By A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering departments of U.S. and Canadian universities as part of a new campaign. The activity involves the exploitation of now-patched, critical security flaws in the open-source