SecurityWeek

The critical unsafe deserialization flaw allows attackers to execute arbitrary code remotely, without authentication.

The malware-as-a-service operation launches legitimate browsers on an invisible desktop, giving attackers persistent and covert remote access to compromised Windows systems.

The Nvidia-led coalition aims to give defenders more open tools for testing, auditing and protecting AI models and agents.

The Anubis cybercrime group has taken credit for the attack and is threatening to leak data.

The company plans to expand its research team, open new offices in Rome and San Francisco, and acquire new clients.

The new Mobile Security Exposure Center creates SBOMs for enterprise mobile apps to uncover vulnerable components, dependencies and hidden risks.

A threat actor has been using the compromised appliances to target the Microsoft 365 accounts of traveling corporate employees.

Binary-based vulnerability scanning, penetration testing, and exploit generation are blocked in Opus 5.

In May 2026, hackers stole personal and dental health information from DentaQuest’s computer network.

The PEAR ransomware group claimed to have stolen 3 TB of information from the medical business management company.

A researcher has explained how an attacker could exploit these vulnerabilities to target industrial organizations.

Noteworthy stories that might have slipped under the radar: Siemens ROX II industrial switch vulnerabilities, Russian Zimbra webmail espionage campaign, Stadler Rail ransomware extortion attempt.

The company has raised a total of $49 million in funding, including from Battery Ventures, Accel and Foundation Capital.

Industry professionals debate whether it represents a lab containment failure or an unprecedented agentic capability milestone.

A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it.