SecurityWeek

Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.

Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.

Hackers stole personal, medical, and health insurance information from a company’s data center.

The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.

(Video) In this podcast, we share insights from Edna Conway, a recognized leader in cybersecurity and supply chain resilience with over 40 years of experience in the field.

An attacker could self-register, sign in for board-level API access, and import a new company for code execution.

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.

Maksim Silnikau was the creator and administrator of the ransomware group and involved in Angler EK’s distribution.

Patches were rolled out for two dozen vulnerabilities, including one with public proof-of-concept (PoC) code.

Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.

Many companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.

CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and reshape the global battlefield.

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.

Hackers stole personal information, medical records, and financial information from the organization’s server.

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.