SecurityWeek

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack.

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.

Successful exploitation of some of these issues could lead to remote code execution and full device takeover.

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. 

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.