SecurityWeek

TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products.

Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.

More than half (56%) of the 400,000 vulnerabilities IBM X-Force tracked in 2025 required no authentication before exploitation.

The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries. 

The four security defects could be exploited for remote code execution but require administrative privileges.

UFP Technologies appears to have been targeted in a ransomware attack that involved data theft and file-encrypting malware.

Peter Williams was sentenced to 87 months in prison for selling cyber exploits to a Russian broker.

Hackers claim to have stolen personally identifiable information and internal corporate data from the automotive firm.

SecurityWeek’s M&A data indicates that today's market is more disciplined, and it seems to favor GRC, data protection, and identity.

The high-end casino and hotel operator has admitted that employee data was stolen by ShinyHunters.

The company will expand its AI-based analysis capabilities, grow its employee base, and scale deployments.

Britain’s data privacy watchdog slapped online forum Reddit on Tuesday with a fine worth nearly $20 million for failures involving children’s personal information.

The stocks of major cybersecurity companies have fallen sharply over fears that AI is disrupting the industry.

The company says the attackers accessed internal business systems such as Zendesk and Salesforce.

Written in C++ and Python, the malware exfiltrates system information, browser data, and steals files.

Broadcom has patched several vulnerabilities in VMware Aria Operations, including high-severity flaws.

Timothy Youngblood was CISO at Dell, CISO at Kimberley-Clark, VP & CISO at McDonald’s, and SVP, CSO & Product Security Officer at T-Mobile.

The malicious code propagates like a worm, poisons AI assistants, exfiltrates secrets, and contains a destructive dead switch.

Attackers can inject malicious instructions in a GitHub Issue that are automatically processed by Copilot when launching a Codespace from that issue.

The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.