SecurityTicks

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API 2026-07-02 at 16:04 By The threat actor known as ToddyCat has been attributed to a new malware called Umbrij that’s designed to gain surreptitious access to a victim’s email correspondence via the Google API. “In this campaign, the attackers focused their attention on corporate

Identity Lifecycle Management Wasn’t Built for AI Agents  2026-07-02 at 14:30 By Identity lifecycle management was architected around a person with an employment record, a manager, and a departure date. AI agents have none of those. As autonomous principals proliferate across enterprise environments, the governance model built for humans develops structural blind spots that traditional

Why Response Time Is Becoming the Missing Metric in Workplace Safety and Security 2026-07-02 at 14:00 By Even the strongest prevention programs cannot eliminate every risk. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack 2026-07-02 at 12:13 By Security firm Sysdig says it has found what it believes is the first ransomware attack run from start to finish by an AI agent. Its Threat Research Team calls the operator JADEPUFFER and says a large language model handled the whole job: breaking

FortiBleed Credential Theft Linked to INC and Lynx Ransomware Operations 2026-07-02 at 11:00 By The recently discovered financially-motivated FortiBleed campaign has been attributed to INC and Lynx ransomware operations, indicating that the verified, stolen credentials were intended for follow-on intrusions. “An operator tied to FortiBleed’s infrastructure was found actively working negotiation panels for both groups,

New ChocoPoC RAT Targets Vulnerability Researchers via Fake PoC Exploit Repos 2026-07-02 at 10:24 By Attackers are hiding a data-stealing trojan inside fake exploit code aimed at the people who hunt bugs for a living. The malware, called ChocoPoC, travels in Python proof-of-concept (PoC) repositories on GitHub that claim to exploit hot new CVEs. Run

SharePoint RCE CVE-2026-45659 Added to CISA KEV After Active Exploitation 2026-07-02 at 09:41 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a high-severity flaw impacting Microsoft SharePoint Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-45659 (CVSS score: 8.8), is a case