SecurityWeek

SimSpace provides realistic cyber ranges where organizations can test attack preparedness and validate defenses.

A new class of Mirai-based DDoS botnets have been launching massive attacks, but their inability to spoof traffic enables device remediation.

Sublime Security’s Series C funding round brings the total raised by the company to more than $240 million.

Data allegedly stolen from the companies has been made available for download on the Cl0p ransomware leak website.

The email addresses were pulled from various sources and 16.4 million of them were not present in previous data breaches.

The hackers stole information from a file transfer solution and the country’s power supply was not affected.

Chainguard has raised $636 million in the past six months alone for its software supply chain security solutions. 

The malicious Smishing Triad domains were used to collect sensitive information, including Social Security numbers.

All new extensions will be required to declare their data collection practices in their manifest file using a specific key.

Roughly 9 million exploit attempts were observed this month as mass exploitation of the critical vulnerabilities recommenced.

Coveware has attributed the drop to large enterprises increasingly refusing to pay up and smaller amounts paid by mid-market firms.

The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.

WhatsApp told SecurityWeek that the two low-impact vulnerabilities cannot be used for arbitrary code execution. 

Researchers have discovered that a prompt can be disguised as an url, and accepted by Atlas as an url in the omnibox.

CVE-2025-59287 allows a remote, unauthenticated attacker to execute arbitrary code and a PoC exploit is available.