Latest News

Digital.ai’s latest threat report warns that agentic AI has erased the distinction between emerging and primary targets, enabling attackers to strike mobile apps within hours of release across every industry.

1Password says AI coding agents should never hold persistent secrets, introducing a just-in-time credential model for OpenAI Codex designed to keep credentials out of prompts, code repositories, and model context.

The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data.

A compromised maintainer account was used to publish malicious package versions across the @antv namespace.

As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.

SecurityWeek spoke with several ICS security experts and companies about their most memorable experiences in the field.

Don't miss this virtual event as we explore how to cut through alert fatigue, leverage AI and unified platforms to accelerate investigations, and apply actionable threat intelligence.

The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.

Verizon’s 2026 DBIR finds vulnerability exploitation has overtaken credential abuse as the leading breach vector, as AI accelerates attacks, patching delays worsen, and ransomware and third-party compromises continue to surge.

Drupal says attackers may develop an exploit for the vulnerability within hours or days.

 Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.

Attackers are increasingly abusing Microsoft’s decades-old MSHTA utility to stealthily deliver stealers, loaders, and persistent malware through phishing, fake software downloads, and LOLBIN-based attack chains.

The security defect can be exploited remotely, without authentication, to execute arbitrary code and leak sensitive information.

The stolen credit card data was released as a free download, allegedly in response to seller misconduct.

The organizations best prepared to face disruption are those that align security, continuity and risk management around what the business cannot afford to lose.