SecurityWeek

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.

Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.

The company will invest in agentic data security capabilities and expand its go-to-market organization.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.