SecurityWeek

A member of Silk Typhoon, Xu Zewei is accused of launching cyberattacks against universities in the US.

Over 70 cloned Open VSX extensions are likely sleeper extensions designed to distribute malware.

Agentic AI can be expensive to use, causing further and unpredictable pressure on tight budgets.

Vulnerabilities in Zero Motorcycles electric motorcycles and Yadea electric scooters can pose physical security and safety risks.

A fake RPC server can be used to listen for RPC requests and impersonate the target service to elevate privileges to System.

Federal prosecutors have been conducting a preliminary investigation since mid-February 2026 into alleged cyberattacks on Signal accounts.

The threat detection startup will invest in accelerating its engineering and go-to-market efforts.

The ShinyHunters cybercrime group claimed to have stolen 9 million records containing personal information from Medtronic.

The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.

A code reuse issue enabled comma characters in certificate principals to be interpreted as list separators.

The tech giant found that many indirect prompt injection attempts are harmless, but some malicious exploits have also been identified.

Itron, which serves utilities and cities around the world, discovered unauthorized access to its systems on April 13.

The threat actor infected victims with the Snow malware family – Snowbelt, Snowglaze, and Snowbasin – for persistent access.

A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.

US conducts sweeping crackdown on Southeast Asian cyberscam operations as part of what officials say is a “new theater of war”.