SecurityWeek

A leaked SquareML access key could have been used to access a database containing personal and health information.

Eight max-severity security defects could lead to remote code execution and authentication bypass.

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail.

Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.

Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.

Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.

Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.

The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics.

A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks.

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI.

Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24.

Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.