SecurityWeek

The company raised another $35 million as an extension to its previously announced Series C funding round.

The startup will invest in expanding its training categories, optimizing video generation, and growing its partnership ecosystem.

Likely perpetrated by MuddyWater, the attack combined social engineering, persistence, credential harvesting, and data theft.

Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026.

Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise.

The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities.

While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen systems.

Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster.

CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.

The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.

AI red team specialist details his methods for manipulating AI guardrails through jailbreaking and data poisoning, helping developers harden machine learning models.

Dubbed Bleeding Llama, the heap out-of-bounds read issue can be exploited remotely, without authentication.

CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction. 

The most severe of these security defects could allow remote attackers to execute arbitrary code.

Deniss Zolotarjovs was directly involved in extortion strategies and in negotiations with victim companies.

The security defects allow unauthenticated, remote attackers to execute arbitrary code through crafted requests.

The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.

The acquisition strengthens Cisco’s push into identity-centric security for AI and machine access.

The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process. 

Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket.