SecurityWeek

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.

Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.

Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures.

Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says.

PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.

Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction.

The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its public launch.

The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme.

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.

Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.

The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.

The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide.

An FTC spokesperson confirmed the investigation but declined further comment.

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.

WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.

Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.