SecurityWeek

China-linked UNC3886 targeted all four major telecom providers, but did not disrupt services or access customer information.

Quantickle is a browser-based tool designed for creating visual representations of threat research.

The funding was raised over Series A and seed funding rounds for its supply chain security solution.

As only data exfiltration for extortion no longer delivers ROI, ransomware gangs may increasingly encrypting data for additional leverage.

The Series B funding round brings the cybersecurity startup’s total raised to $60 million.

Significant cybersecurity M&A deals announced by CrowdStrike, Infoblox, JumpCloud, LevelBlue, OneSpan, and Radware.

Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.

SmarterTools says customers were impacted after hackers compromised a data center used for quality control testing.

The KEV list is useful but largely misunderstood. KEVology explains what it is, and how best to use it.

The signs of a cyberattack were identified on systems EU's main executive body uses for mobile device management.

Edge devices that are no longer supported have been targeted in attacks by state-sponsored hackers, the US says.

Potential breach at Flickr exposes usernames, email addresses, IP addresses, and activity data.

Living off the AI isn’t a hypothetical but a natural continuation of the tradecraft we’ve all been defending against, now mapped onto assistants, agents, and MCP.

Other noteworthy stories that might have slipped under the radar: AT&T and Verizon response to Salt Typhoon, AI agents solve security challenges, man arrested in Poland for DDos Attacks.

The startup aims to unify SOC, GRC, IAM, vulnerability management, IT, and business operations through its Agentic OS platform.

Used since at least 2019, DKnife has been targeting the desktop, mobile, and IoT devices of Chinese users.

The news comes after the Department of Energy conducted its annual Liberty Eclipse cybersecurity exercise.

The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.

CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.

Zscaler says the acquisition will allow customers to embed lightweight extensions into any browser, providing increased security and eliminating the need for third-party browsers.