SecurityTicks

Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations 2026-07-07 at 00:06 By An Iranian hacking group affiliated with Iran’s Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations. The activity, which has primarily singled out IT providers and […]

16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems 2026-07-06 at 21:51 By A use-after-free bug in Linux’s KVM hypervisor can be triggered from a guest virtual machine to corrupt the shadow-page state of the host kernel that runs it. Dubbed ‘Januscape’ and tracked as CVE-2026-53359, the flaw sits

Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure 2026-07-06 at 20:22 By Threat actors have been observed attempting to exploit a recently patched critical security flaw in Gitea Docker images, according to Sysdig. The vulnerability in question is CVE-2026-20896 (CVSS score: 9.8), a vulnerability that stems from the DevOps platform trusting the

Security Guard Assaulted at Firework Show 2026-07-06 at 20:00 By A fight broke out at a country club, resulting in the injury of a security guard. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Security Guard Found Alive After 8 Days Beneath Earthquake Rubble 2026-07-06 at 19:15 By 43-year-old Hernán Alberto Gil Flores was retrieved from a collapsed mall following an earthquake.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Researchers Discover First Documented Case of Agentic Ransomware 2026-07-06 at 18:00 By Researchers believe they have discovered the first documented case of an extortion operation run end-to-end by an LLM. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

⚡ Weekly Recap: Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More 2026-07-06 at 16:25 By A streaming box should not need a threat model. Neither should a username field, a demo repo, a reset flow, or a browser permission prompt. That is the irritating part this week: the risky pieces were