SecurityWeek

Four vulnerabilities have been fixed in the latest release of Veeam Backup & Replication.

2025 was the strongest year for cybersecurity funding since the 2021 peak, according to Pinpoint Search Group.

The critical-severity vulnerability allows unauthenticated, remote attackers to execute arbitrary shell commands.

Threat actors spoof legitimate domains to make their phishing emails appear to have been sent internally.

From dismantling online games as a child to uncovering real-world vulnerabilities, Katie Paxton-Fear explains how autism, curiosity, and a rejection of ambiguity shaped her path into ethical hacking.

We can’t outpace the adversary by trying to stop every attack, but we can outlast them by engineering systems and culture to take a punch and try to quickly rebound.

Using fake accounts and synthetic data to lure the hackers, the researchers gathered information on their servers.

The flaw is tracked as CVE-2025-54957 and its existence came to light in October 2025 after it was discovered by Google researchers.

Fake Booking reservation cancellations and fake BSODs trick victims into executing malicious code leading to RAT infections.

The initial access broker (IAB) relies on credentials exfiltrated using information stealers to hack organizations.

The VPN company has conducted an investigation after a threat actor claimed to have hacked its systems. 

Significant cybersecurity M&A deals announced by Akamai, Red Hat, Checkmarx, Silent Push, and ServiceNow.

Flights across Greece were impacted for several hours after noise was reported on multiple air traffic communication channels.

The hacking group Crimson Collective has claimed the theft of personal information pertaining to over 1 million Brightspeed customers.

Hackers have compromised a file transfer system at Sedgwick’s subsidiary that serves government agencies.

With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.

The 2-million-device-strong botnet allows monetization through DDoS attacks, app installs, and the selling of proxy bandwidth.

WhatsApp device fingerprinting can be useful in the delivery of sophisticated spyware, but impact is very limited without a zero-day.

The deal involved aerospace and defense specialist Emcore Corp. selling its computer chips and wafer fabrication operation.

Ryan Goldberg and Kevin Martin have admitted being affiliates of the BlackCat/Alphv ransomware group.