SecurityWeek

Tied to a fresh Checkmarx supply chain attack claimed by TeamPCP, the incident references the Shai-Hulud worm.

The Israel-based company, which just emerged from stealth mode, was founded by cloud and security experts from RSA, McAfee, and Unity.

The company will use the investment to accelerate product development and grow go-to-market efforts.

360 Digital Security Group claims to have uncovered 1,000 vulnerabilities using AI, including at the Tianfu Cup hacking contest.

The company will hire new talent and expand operations across the US and other allied countries.

New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.

The company is notifying My Rituals members that hackers downloaded part of their data, including names and addresses.

Palo Alto Networks has developed Zealot, a multi-agent penetration testing PoC capable of reconnaissance, exploitation, and exfiltration. 

Apple rolled out the security patches for dozens of iPhone and iPad models and generations.

The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict.

Dubbed Lotus Wiper, the malware targets recovery mechanisms, overwrites drives, and systematically deletes files.

The exploitation of the command injection vulnerability started one year after public disclosure and PoC exploit code publication.

Researcher says the missing piece is a governance-driven intelligence layer that turns SBOM and VEX data into explainable security decisions.

All the flaws could have also been found by an elite human researcher, according to Mozilla.

The campaigns focus on financial organizations, including cryptocurrency, venture capital, and blockchain entities.

Researchers discovered a remote code execution vulnerability and cybercriminals are using its reputation to deliver malware.

The company released 481 new security patches across 28 product families, including over 300 fixes for remotely exploitable, unauthenticated flaws.

Angelo Martino of Florida has pleaded guilty to collaborating with the BlackCat cybercrime group while working as a ransomware negotiator.