SecurityWeek

In December 2025, hackers stole names and passport numbers from the European travel company’s network.

A hacker transferred more than 50 bitcoin from the Bitcoin ATM operator’s wallets after stealing credentials. 

Hackers vowed to revive its efforts against America when the time was right — demonstrating how digital warfare has become ingrained in military conflict.

A total of seven vulnerabilities, most of which can be exploited for DoS attacks, have been patched in OpenSSL.

The vulnerability requires authentication for successful exploitation, but another flaw exposes the Jolokia API without authentication.

The FBI received over 1 million complaints of malicious activity in 2025, with investment, BEC, and tech support scams causing the highest losses.

Signature Healthcare was forced to cancel some services, and pharmacies are unable to fill prescriptions due to the hacker attack.

Focused on persistence, the botnet does not engage in widespread infection and avoids blacklisted IPs and critical infrastructure entities.

The vulnerability allows hackers to upload arbitrary files to a site’s server and achieve remote code execution.

The APT28 threat group exploited vulnerable TP-Link and MikroTik routers to conduct adversary-in-the-middle (AitM) attacks.

Federal agencies warn attackers are manipulating PLC and SCADA systems across multiple sectors, triggering operational disruptions and raising concerns over broader OT targeting.

New AI model drives Project Glasswing, a effort to secure critical software before advanced capabilities fall into the wrong hands.

The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural.

The startup has created a layered security solution aiming to secure AI agents throughout their entire lifecycle.

The improper validation of user-supplied JavaScript code allows attackers to execute arbitrary code and access the file system.

A critical DoS vulnerability in the Framework component of Android has also been fixed with the latest update.

By targeting Grafana’s AI components, attackers can point to external resources and inject indirect prompts to bypass safeguards.

Join the live diagnostic session to expose hidden coverage gaps and shift from flawed tool-level evaluations to a comprehensive, program-level validation discipline.

Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges.

The group is using zero-days, quickly weaponizes fresh bugs, and exfiltrates and encrypts data within days of initial access.