SecurityTicks

Australia to require Google, Meta, TikTok to pay for local news — or face new tax 2026-04-29 at 19:48 By Thomas Barrabi Dubbed the “News Bargaining Incentive,” the proposed law would impose a 2.25% tax on the local revenues of the social media giants that are unable or unwilling to reach deals with news outlets. […]

NASA boss: Make Pluto A Planet Again 2026-04-29 at 19:48 By Richard Speed Despite looming science cuts, Isaacman finds resources to poke the planetary hornet nest NASA Administrator Jared Isaacman delivered some potentially good news at a Senate hearing this week, as well as some slightly odd news: in an environment of constrained budgets, the

CISA flags data-theft bug in NSA-built OT networking tool 2026-04-29 at 19:48 By Connor Jones GrassMarlin leaks sensitive information, provided your targeting phishing skills are sharp enough The Cybersecurity and Infrastructure Security Agency (CISA) is warning anyone who uses GrassMarlin, a tool developed by the National Security Agency (NSA), about a new vulnerability that attackers

Connected Security: How Proactive Real-Time Tech Keeps Security Workers Safe 2026-04-29 at 19:48 By New technologies are allowing companies to take more proactive approaches and monitor vulnerable employees.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware 2026-04-29 at 19:48 By Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security, SafeDep, Socket, StepSecurity, and Google-owned Wiz, the campaign – calling itself the mini Shai-Hulud – has

AWS plants more tombstones in the application graveyard 2026-04-29 at 18:34 By Corey Quinn Eleven up, ten down On Tuesday in San Francisco at an event called “What’s Next with AWS,” CEO Matt Garman took the stage to announce that AWS is (for what, depending on how you count, is the seventh, eighth, or ninth

Ransomware Responsible for 90% of Manufacturing Cyber Losses 2026-04-29 at 18:34 By When ransomware attacks affect the sector, the losses are significant.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs 2026-04-29 at 18:34 By Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic’s Claude Opus large language model (LLM). The package in question is “@validate-sdk/v2,” which is listed on

Protecting U.S. Critical Infrastructure as Global Tensions Rise 2026-04-29 at 17:47 By Security leader discusses protecting critical infrastructure as geopolitical tensions grow. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

LiteLLM CVE-2026-42208 SQL Injection Exploited within 36 Hours of Disclosure 2026-04-29 at 17:47 By In yet another instance of threat actors quickly jumping on the exploitation bandwagon, a newly disclosed critical security flaw in BerriAI’s LiteLLM Python package has come under active exploitation in the wild within 36 hours of the bug becoming public knowledge.

GitHub: Woah, a genuinely helpful AI-assisted bug report that isn’t total slop. Here, Wiz, take this wad of cash 2026-04-29 at 16:02 By Connor Jones Claude ploughs through months of work in rapid time, helps Wiz researchers nab lucrative award Wiz researchers are set for a tidy payday thanks to their discovery of a high-severity

AWS keynote hypes AI as magic. Its own engineers tell a different story 2026-04-29 at 15:51 By Tim Anderson No shortcuts, human-review everything, says internal team – and keep hiring junior developers Interview  Steve Tarcza, director of Amazon Stores, says his team — StoreGen — exists to help the retail giant’s developers move faster and

Microsoft opens door to the past by releasing 86-DOS and PC-DOS 1.00 2026-04-29 at 15:13 By Richard Speed Back to a time when source repositories were printouts and commits were hand-written notes Antiques code show  Microsoft has released the source for another of its relics. This time, it’s 86-DOS 1.00 getting the open source treatment,

DLP Made Easier On The Teams Running It 2026-04-29 at 15:10 By Juhi Kotkar How Symantec DLP 26.1 takes the complexity out of data security for strapped security teams This article is an excerpt from SECURITY.COM View Original Source