SecurityWeek

WideField will accelerate Agentic SOC capabilities by expanding the lens on threat investigation to include identity, credentials, sessions, and blast radius.

Law enforcement and private partners took down 106 SocGholish C&C servers and domains as part of Operation Endgame.

CISA has given federal agencies only three days to patch CVE-2026-20253, which can be exploited for unauthenticated remote code execution.

These servers are regularly targeted by China-linked UNC6508 for initial access and backdoor deployment.

The deal values industrial cybersecurity giant Dragos at $3.25 billion, and runZero and NetRise will operate under Dragos.

Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.

The Israeli startup provides sovereign AI and cyber defenses for governments and critical infrastructure.

Splunk patched an OS command injection in AI Toolkit, while Atlassian fixed dozens of flaws in third-party dependencies.

The Android malware allows its operators to take control of infected devices and harvest sensitive information.

Insufficient validation of user input allows an attacker to gain access to the underlying OS and elevate their privileges to root.

Critical flaws in NGINX could allow remote, unauthenticated attackers to cause a restart and potentially execute arbitrary code.

Israel-based Entro specializes in non-human identity and credential security solutions, and it will enable SailPoint to enhance its products.

Kodak told SecurityWeek it believes there is no threat to its systems or operations as a result of the cybersecurity incident.

Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses.

Apono specializes in just-in-time access governance technology for humans, machines, and AI agents.

Tenet aims to detect and stop dangerous AI agentic behavior in real time.

The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products.

The attackers deployed a new Go-based backdoor that uses Microsoft Teams servers for command-and-control.

The public PoC code exploits a race condition in Microsoft Defender to spawn a command prompt with System privileges.

Oracle has released its June 2026 Critical Security Patch Update to fix vulnerabilities in Communications, EBS, Enterprise Manager and other products.