Eduard Kovacs

CVE-2026-9082 can be exploited without authentication for information disclosure, privilege escalation, and remote code execution.

More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’.

The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data.

SecurityWeek spoke with several ICS security experts and companies about their most memorable experiences in the field.

Drupal says attackers may develop an exploit for the vulnerability within hours or days.

 Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.

The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection. 

Several healthcare data breaches impacting hundreds of thousands and even millions were added to the HHS tracker.

The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data. 

Grafana appears to have been targeted by Coinbase Cartel, a cybercrime group linked to ShinyHunters, Scattered Spider, and Lapsus$.

Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.

Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.

The non-bank lender discovered a ransomware attack nearly one year ago, but only recently completed its investigation.

The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.

The vulnerability, tracked as CVE-2026-46300, is similar to the recently disclosed exploits named Dirty Frag and Copy Fail.

The acquisition enables Akamai to expand its Zero Trust portfolio to add protection directly into the browser.

The goal of the guidance, which outlines minimum elements, is to help organizations enhance transparency in AI systems and supply chains. 

The patch was announced as Broadcom is attending the Pwn2Own hacking competition in Berlin this week.

The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential documents.

Microsoft’s MDASH discovered 16 of the Patch Tuesday vulnerabilities, and Palo Alto used Mythos to find dozens of flaws.