SecurityWeek

An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.

The cybersecurity industry is monitoring the landscape and says many of the big claims made by hacktivist groups remain unverified.

Improper input sanitization in the framework can be exploited through the Shell tool, allowing attackers to modify system files and steal data.

Using low-cost receivers deployed along roads, academic researchers tracked drivers and their movement patterns.

Malicious extensions could hijack the Gemini Live in Chrome feature to spy on users and steal their files.

Malicious websites could open a WebSocket connection to localhost on the OpenClaw gateway port, brute force passwords, and take control of the agent.

The company is one of the many victims of the 2025 Oracle E-Business Suite (EBS) hacking campaign.

Madhu Gottumukkala has been assigned to a new role within the Department of Homeland Security.

The AWS Security Hub Extended plan aims to reduce security tool sprawl by correlating findings across multiple security domains.

Using Windows shortcut files, the APT deployed a new implant, a loader, a propagation tool, and two backdoors.

The internet giant is developing an evolution of the certificates based on Merkle Tree Certificates (MTCs).

Both sides conduct hacking and other attacks, including the deployment of wiper malware, DDoS, and disruptions to critical infrastructure. 

The AI was abused to write exploits, create tools, and automatically exfiltrate over 150GB of data.

Names, addresses, email addresses, phone numbers, and encrypted passwords were compromised in the attack.

OpenAI and Google, along with Elon Musk’s xAI, also have contracts to supply their AI models to the military.

Other noteworthy stories that might have slipped under the radar: cyber valuations surge, OpenAI disrupts malicious AI use, ShinyHunters claims Odido breach.

Hackers stole personal information such as names, email addresses, phone numbers, and other information.

The attacks exploited a post-authentication command injection vulnerability in the endpoint manager’s interface.

The 24-year-old suspect has been accused of trafficking over 26,000 cards from a single brand.

Anthropic said it sought narrow assurances from the Pentagon that Claude won’t be used for mass surveillance of Americans or in fully autonomous weapons.