SecurityWeek

The company has yet to determine the full scope, nature, and impact of the incident.

Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts.

Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).

AI infrastructure introduces new security risks that traditional data center designs were never built to handle.

The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency. 

The startup has built an AI-powered Identity Operating System that governs all identities across an organization’s environment.

The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges.

Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code.

Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures.

Signed by Microsoft, the vulnerable UEFI shim bootloaders could be abused on any system, regardless of the OS.

The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability.

The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.

An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.

Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days.

Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.

The suspects and their companies were previously sanctioned by the United States and its allies.

A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code.

The new program stems from an AI-focused Executive Order signed by President Trump on June 2.

The company has rolled out a fix and is restoring access for Storage Zones Controller customers who apply it.

The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT.