News - Security Ticks

Epic Fury Update: Stryker Attack Highlights Handala’s Shift from Espionage to Disruption

Epic Fury Update: Stryker Attack Highlights Handala’s Shift from Espionage to Disruption 2026-03-13 at 19:32 By Arthur Erzberger On March 11, 2026, the medical technology vendor Stryker disclosed a global cyberattack affecting its Microsoft environment. The company said there was no indication of ransomware or malware, but the full scope and restoration timeline were unknown. […]

Epic Fury Update: Stryker Attack Highlights Handala’s Shift from Espionage to Disruption Read More »

LevelBlue SpiderLabs Breaks Down the Role of Cyber Operations Taken in the Iran Crisis

Emerging Threats, News / SecurityTicks

LevelBlue SpiderLabs Breaks Down the Role of Cyber Operations Taken in the Iran Crisis 2026-03-13 at 19:32 By Gal Romano As combat operations that began on February 28 with joint US-Israeli strikes on Iran’s military and leadership continue, cybersecurity analysts are turning their attention to how this 21st-century conflict is unfolding in the digital domain.

LevelBlue SpiderLabs Breaks Down the Role of Cyber Operations Taken in the Iran Crisis Read More »

EU Parliament backs extension of CSAM detection rules until 2027

Data Protection, Encryption, Europe, framework, News, Privacy / SecurityTicks

EU Parliament backs extension of CSAM detection rules until 2027 2026-03-13 at 14:19 By Anamarija Pogorelec The European Parliament has voted to extend a temporary exemption to EU privacy legislation that allows online platforms to voluntarily detect child sexual abuse material (CSAM). The extension prolongs a derogation from the EU’s ePrivacy Directive, which was set

EU Parliament backs extension of CSAM detection rules until 2027 Read More »

Authorities dismantle SocksEscort proxy network behind millions in fraud

cybercrime, Europol, fraud, law enforcement, News, Proxy, US DoJ, USA / SecurityTicks

Authorities dismantle SocksEscort proxy network behind millions in fraud 2026-03-13 at 12:22 By Sinisa Markovic SocksEscort, a residential proxy network used to exploit thousands of compromised home routers worldwide and facilitate large-scale fraud that cost victims millions of dollars, has been disrupted in an international law enforcement operation led by the U.S. Department of Justice.

Authorities dismantle SocksEscort proxy network behind millions in fraud Read More »

AI coding agents keep repeating decade-old security mistakes

agentic AI, Anthropic, Artificial Intelligence, Claude Code, cybersecurity, Don't miss, DryRun Security, Google, Hot stuff, News, OpenAI, programming, report / SecurityTicks

AI coding agents keep repeating decade-old security mistakes 2026-03-13 at 08:01 By Anamarija Pogorelec Coding agents are now writing production features on real development teams, and a new report from DryRun Security shows that those agents introduce security vulnerabilities at a high rate across nearly every type of application they build. “AI coding agents can

AI coding agents keep repeating decade-old security mistakes Read More »

Passwords, MFA, and why neither is enough

authentication, Don't miss, FIDO Alliance, MFA, News, passwords, Portnox, strategy, tips, Video / SecurityTicks

Passwords, MFA, and why neither is enough 2026-03-13 at 07:37 By Help Net Security Passwords weren’t enough, so we added MFA. Now MFA isn’t enough either. In this Help Net Security video, Karlo Zatylny, CTO/CISO at Portnox, walks through why each layer of identity security has failed and what comes next. SMS codes can be

Passwords, MFA, and why neither is enough Read More »

New infosec products of the week: March 13, 2026

Binary Defense, Mend, News, OPSWAT, Singulr AI, SOC Prime, Terra Security, Vicarius / SecurityTicks

New infosec products of the week: March 13, 2026 2026-03-13 at 07:37 By Anamarija Pogorelec Here’s a look at the most interesting products from the past week, featuring releases from Binary Defense, Mend.io, OPSWAT, Singulr AI, SOC Prime, Terra Security, and Vicarius. Singulr AI’s Agent Pulse delivers enforceable runtime governance and visibility for AI agents

New infosec products of the week: March 13, 2026 Read More »

€1 million online fraud scheme uncovered, three suspects arrested

cybercrime, EU, Eurojust, fraud, law enforcement, News / SecurityTicks

€1 million online fraud scheme uncovered, three suspects arrested 2026-03-12 at 17:37 By Sinisa Markovic A criminal group suspected of running an online fraud scheme in Germany, which defrauded victims of around €1 million, has been dismantled through judicial cooperation coordinated by Eurojust. On 10 March, German and French authorities arrested three suspects in a

€1 million online fraud scheme uncovered, three suspects arrested Read More »

ENISA advisory examines package manager security risks

Application Security, Artificial Intelligence, automation, cybersecurity, ENISA, News, software development / SecurityTicks

ENISA advisory examines package manager security risks 2026-03-12 at 15:24 By Anamarija Pogorelec Developers install external libraries with a single command, and that step can introduce more code than expected into a project environment. Dependency resolution inside package managers extends software supply chains across large collections of external components. ENISA’s Technical Advisory for Secure Use

ENISA advisory examines package manager security risks Read More »

WhatsApp is giving parents peace of mind over their kids’ privacy

Meta, News, Privacy, WhatsApp / SecurityTicks

WhatsApp is giving parents peace of mind over their kids’ privacy 2026-03-12 at 15:08 By Sinisa Markovic WhatsApp has introduced parent-managed accounts designed for pre-teens, giving parents and guardians new controls over contacts, group participation, and how the app is used. These accounts are limited to messaging and calling and do not include access to

WhatsApp is giving parents peace of mind over their kids’ privacy Read More »

Stop fixing OT security with IT thinking

CISO, cybersecurity, Don't miss, Endpoint Security, Features, Hot stuff, IIoT, Internet of Things, manufacturing sector, News, opinion, strategy / SecurityTicks

Stop fixing OT security with IT thinking 2026-03-12 at 08:35 By Mirko Zorz In this Help Net Security interview, Ejona Preçi, Group CISO at Lindal Group, discusses the specific cybersecurity challenges in manufacturing environments. The conversation covers why standard IT security practices break down on shop floors, where PLCs and decade-old firmware were never designed

Stop fixing OT security with IT thinking Read More »

Does Anthropic deserve the trust of the cybersecurity community?

Anthropic, Artificial Intelligence, Compliance, cybersecurity, Don't miss, Expert analysis, Hot stuff, Looking Glass Public Relations, News, opinion / SecurityTicks

Does Anthropic deserve the trust of the cybersecurity community? 2026-03-12 at 08:35 By Help Net Security The cybersecurity industry runs on trust. The belief that when a vendor says they will behave a certain way, they will, that critical CVEs are in fact critical, or when companies say they’re GDPR compliant, they really are. But

Does Anthropic deserve the trust of the cybersecurity community? Read More »

Agentic attack chains advance as infostealers flood criminal markets

agentic AI, Artificial Intelligence, attacks, CISO, cyber risk, Don't miss, Flashpoint, News, report, survey, Threat Intelligence, threats / SecurityTicks

Agentic attack chains advance as infostealers flood criminal markets 2026-03-12 at 08:35 By Mirko Zorz Cybercriminals spent much of 2025 automating their operations, shifting from one-off attacks to systems that can run entire intrusion cycles with minimal human input. Data collected from criminal forums, illicit marketplaces, and underground chat services shows a threat environment where

Agentic attack chains advance as infostealers flood criminal markets Read More »

Wireless vulnerabilities are doubling every few years

Bastille, Bluetooth, cybersecurity, News, report, wireless / SecurityTicks

Wireless vulnerabilities are doubling every few years 2026-03-12 at 07:00 By Anamarija Pogorelec Wireless vulnerabilities are being disclosed at a rate that has no precedent in the fifteen-year history of systematic tracking. In 2025, researchers published 937 new wireless-related CVEs, an average of 2.5 per day, according to a threat report from Bastille Networks based

Wireless vulnerabilities are doubling every few years Read More »

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites

access controls, access management, data theft, Don't miss, Hot stuff, misconfiguration, News, Salesforce / SecurityTicks

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites 2026-03-11 at 20:28 By Zeljka Zorz Salesforce customers have, once again, been targeted by the ShinyHunters group – or, at least, it’s what the group claims. Attackers modified and abused benign tool On Saturday, Saleforce confirmed that its security team has identified an attack campaign by

ShinyHunters claims new campaign targeting Salesforce Experience Cloud sites Read More »

Researchers uncover AI-powered vishing platform

AI, Artificial Intelligence, Don't miss, Hot stuff, Mirage Security, News, scams, threats, vishing / SecurityTicks

Researchers uncover AI-powered vishing platform 2026-03-11 at 20:28 By Zeljka Zorz A vishing-as-a-service platform that helps scammers carry out so-called “press 1” scams is misusing text-to-speech (TTS) capabilities provided by AI voice technology company ElevenLabs, Mirage Security researchers claim. How “press 1” vishing scams work For “press 1” scams, fraudsters spoof phone numbers of trusted

Researchers uncover AI-powered vishing platform Read More »

Meta turns to AI to sniff out scams on Facebook, Messenger and WhatsApp

Artificial Intelligence, cybersecurity, Facebook, Facebook Messenger, Meta, News, scams, WhatsApp / SecurityTicks

Meta turns to AI to sniff out scams on Facebook, Messenger and WhatsApp 2026-03-11 at 18:31 By Anamarija Pogorelec Meta’s new tools on Facebook, Messenger, and WhatsApp protect users from scams. They use advanced AI systems to analyze text, images, and surrounding context and identify sophisticated scam patterns. Facebook alerts for suspicious friend requests (Source:

Meta turns to AI to sniff out scams on Facebook, Messenger and WhatsApp Read More »

Anthropic forms institute to study long-term AI risks facing society

Anthropic, Artificial Intelligence, News / SecurityTicks

Anthropic forms institute to study long-term AI risks facing society 2026-03-11 at 18:31 By Sinisa Markovic Anthropic has established the Anthropic Institute, a research unit focused on studying the societal effects of AI and informing policy responses to risks from more advanced systems. “In the five years since Anthropic began, AI progress has moved incredibly

Anthropic forms institute to study long-term AI risks facing society Read More »

Microsoft patches 80+ vulnerabilities, six flagged as “more likely” to be exploited

Don't miss, Hot stuff, Immersive, Microsoft, MS Office, MS SQL Server, NCSC-NL, News, Outlook, Rapid7, security update, Trend Micro, vulnerability, Windows / SecurityTicks

Microsoft patches 80+ vulnerabilities, six flagged as “more likely” to be exploited 2026-03-11 at 12:31 By Zeljka Zorz On March 2026 Patch Tuesday, Microsoft addressed 80+ vulnerabilities affecting its software and cloud services. Of these, two were publicly disclosed, but not actively exploited. Privilege escalation vulnerabilities abound The two publicly disclosed flaws are CVE-2026-21262, a

Microsoft patches 80+ vulnerabilities, six flagged as “more likely” to be exploited Read More »