Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.
CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.
CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
Where your developers sit on the AI adoption scale has a real impact on how you are addressing security risk.
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.
As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
Register
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]
SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]
The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]
SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]
-
The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. (October 28, 2026)
-
FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. (October 28, 2026)
-
The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. (October 28, 2026)
-
Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. (October 28, 2026)
-
Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. (October 28, 2026)
-
The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts. (October 26, 2026)
-
The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. (October 20, 2026)
-
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. (October 14, 2026)
