SecurityWeek

The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets.

The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.

The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.

The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.

Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.

The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems.

Designed for cybersecurity leaders, this immersive two-day virtual event is your premier destination to discuss, share, and learn innovative risk management and defense strategies defining the modern enterprise.

A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.

Attackers could exploit them for command execution, memory overwrites, and privilege escalation.

Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.

The Series C round will fund international expansion and more autonomous features for the firm’s device security platform. 

The massive drop comes after the company integrated frontier AI models into its product security testing.

Founded by three ex-IDF Unit 8200 intelligence officers, Bay is launched to provide a control plane for AI agents.

Created by Zerto and Kashya veterans, the startup has launched a platform designed to recover whole cloud applications. 

Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy. 

The flaws, CVE-2026-111793 and CVE-2026-20320, let attackers leak sensitive information, including configuration data.

Intel and AMD disclose more than 200 vulnerabilities, including critical flaws in Intel TDX software and numerous AMD graphics bugs.

The security defects could allow attackers to bypass authorization and gain root access to devices.

Apple has patched Bluetooth and AirPlay pairing flaws, iMessage vulnerabilities, and an exploited Brotli bug across its platforms.

CVE-2026-124194 is the Outlook zero-day for which Microsoft says it’s aware of active exploitation.