SecurityTicks

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Atlassian, exploited, Featured, Vulnerabilities, vulnerability /

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »

Cybersecurity Awareness Month 2026: Securing the Next 250 Years

Government, Tips & Tricks /

Cybersecurity Awareness Month 2026: Securing the Next 250 Years 2026-10-08 at 17:00 By This year, the United States of America celebrated their 250th birthday, but Cybersecurity Awareness Month is already looking toward the future with the goal of securing the next 250 years together. This article is an excerpt from LevelBlue Blog View Original Source

Cybersecurity Awareness Month 2026: Securing the Next 250 Years Read More »

The phone was compromised before the user turned it on: the rise of Midnight Mimosa

Anti-Malware Research /

The phone was compromised before the user turned it on: the rise of Midnight Mimosa 2026-10-08 at 15:57 By Adrian Mihai GOZOB Bitdefender’s security researchers have identified a malware campaign (dubbed Midnight Mimosa) running on low-cost, multi-brand Android devices built on MediaTek platforms. This article is an excerpt from Bitdefender Labs View Original Source

The phone was compromised before the user turned it on: the rise of Midnight Mimosa Read More »

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls

cybercrime, FBI, France, law enforcement, News, US DoJ /

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls 2026-10-08 at 15:51 By Sinisa Markovic The FBI and French law enforcement have seized two websites that sold hacked and stolen sexually explicit images and videos of young women and girls, and arrested their suspected administrator in northern France. Seizure notice (Source: […]

Authorities seize sites selling hacked, stolen intimate images of 17,000 women and girls Read More »

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

China, Government, hacker, Hafnium, reward, Silk Typhoon, US /

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward 2026-10-08 at 15:46 By Eduard Kovacs Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026. The post US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward appeared first on SecurityWeek. This article is an excerpt […]

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward Read More »

SonicWall and Splunk Patch Critical Vulnerabilities

patch, SonicWall, Splunk, Vulnerabilities, vulnerability /

SonicWall and Splunk Patch Critical Vulnerabilities 2026-10-08 at 15:37 By Ionut Arghire Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges. The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

SonicWall and Splunk Patch Critical Vulnerabilities Read More »

Anthropic’s new budget model gets much better at ignoring hidden commands

agentic AI, AI, Anthropic, Claude Code, cybersecurity, News /

Anthropic’s new budget model gets much better at ignoring hidden commands 2026-10-08 at 14:24 By Anamarija Pogorelec Anthropic’s Claude Haiku 5.5 model, designed for quick, repetitive workloads and speed-sensitive tasks, is now better at finding vulnerabilities and writing exploits than its predecessor. The company has given it stricter cybersecurity safeguards than Haiku 4.5, though lighter […]

Anthropic’s new budget model gets much better at ignoring hidden commands Read More »

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia

Uncategorized /

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia 2026-10-08 at 13:30 By Phishing kits are no longer limited to copying a familiar login page and waiting for a victim to enter credentials. Attackers are increasingly building filtering, session management, and traffic controls into the infrastructure that delivers the phishing page […]

Wazza Phishkit Targets Banking, Government, and Manufacturing Across the US, EU, and Australia Read More »

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers

AI, botnet, Don't miss, GitHub, Hot stuff, Malware, News /

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers 2026-10-08 at 13:24 By Sinisa Markovic Thousands of hijacked servers have been looking up their command and control (C2) server in a poem posted on GitHub, according to Black Lotus Labs. The malware reading it, dubbed PoeLLM, breaks into exposed AI services and […]

Cryptomining botnet hides C2 addresses in GitHub poem, infects over 3,400 servers Read More »

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm

Uncategorized /

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm 2026-10-08 at 13:01 By The npm package known as “tensorlake,” a TypeScript software development kit (SDK) for Tensorlake applications, sandboxes, and cloud services, was compromised as part of a ChainDrop / Shai-Hulud supply chain attack. The malicious version 0.5.144 “contains obfuscated malware that harvests credentials, exfiltrates […]

Tensorlake npm Package Compromised to Deliver Shai-Hulud Credential-Stealing Worm Read More »

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls

markets /

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls 2026-10-08 at 12:56 By Cointelegraph by William Suberg Bitcoin’s realized cap rise in the 30 days to Oct. 5 came mostly from existing holders, not fresh capital, Glassnode data showed. This article is an excerpt from Cointelegraph.com News View Original Source

Bitcoin monthly ‘new money’ inflows near $5B as BTC price rally stalls Read More »

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases

Uncategorized /

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases 2026-10-08 at 12:46 By Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that are capable of stealing cryptocurrency wallet recovery phrases and private keys. “The extensions masquerade as wallet portals, desktop utilities, and browser tools, but their […]

16 Malicious Firefox Extensions Pose as Rabby and OKX Wallets to Steal Recovery Phrases Read More »

ESMA gives crypto firms 3 months to exit non-compliant stablecoins

Latest News /

ESMA gives crypto firms 3 months to exit non-compliant stablecoins 2026-10-08 at 12:42 By Cointelegraph by Ezra Reguerra ESMA urged EU crypto firms to halt services involving non-MiCA-compliant stablecoins, giving regulators three months to address existing exposures. This article is an excerpt from Cointelegraph.com News View Original Source

ESMA gives crypto firms 3 months to exit non-compliant stablecoins Read More »

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme

charged, cybercrime, MonsterCloud, Ransomware /

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme 2026-10-08 at 12:27 By Ionut Arghire Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation. The post Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme appeared first on SecurityWeek. This article is an excerpt from […]

Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme Read More »

GitHub adds AI to catch passwords before a code push

agentic AI, AI, code, credentials, cybersecurity, DevSecOps, GitHub, News /

GitHub adds AI to catch passwords before a code push 2026-10-08 at 12:02 By Anamarija Pogorelec GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can […]

GitHub adds AI to catch passwords before a code push Read More »

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor

backdoor, critical infrastructure, cybercrime, ESET, Malware, News, Russian Federation, Ukraine /

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor 2026-10-08 at 12:00 By Mirko Zorz ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in […]

What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor Read More »

Samsung Wallet to add USDC transfers for US Galaxy users in October

Latest News /

Samsung Wallet to add USDC transfers for US Galaxy users in October 2026-10-08 at 11:24 By Cointelegraph by Ezra Reguerra Eligible US Galaxy will be able to send USDC to crypto wallets and transfer funds to bank accounts in more than 60 countries. This article is an excerpt from Cointelegraph.com News View Original Source

Samsung Wallet to add USDC transfers for US Galaxy users in October Read More »

Oracle Health Data Breach Tally Climbs to Nearly 20 Million

data breach, Data Breaches, healthcare, Oracle Health /

Oracle Health Data Breach Tally Climbs to Nearly 20 Million 2026-10-08 at 11:23 By Eduard Kovacs The figure is far higher than the counts that surfaced in earlier filings and patient notifications. The post Oracle Health Data Breach Tally Climbs to Nearly 20 Million appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Oracle Health Data Breach Tally Climbs to Nearly 20 Million Read More »

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims

FBI, law enforcement, News, Ransomware, US DoJ, USA /

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims 2026-10-08 at 11:00 By Sinisa Markovic The owner of Florida-based ransomware remediation company MonsterCloud has been charged with fraud for allegedly paying ransomware gangs behind his clients’ backs and billing them far more than the ransom. Zohar Pinhasi (aka “Zack Silver” and “Zack […]

Ransomware recovery firm boss charged with secretly paying attackers and overcharging victims Read More »

Scroll to Top