Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands.

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses.

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.

The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.

The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet.

The trio, who have nicknames that include “Rocky Balboa,” “Superman Cash” and “Fat Boy,” often targeted the companies’ accounting departments.

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

White House cybersecurity White House cybersecurity

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

SSH vulnerability SSH vulnerability

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

Linux Linux

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

Top Cybersecurity Headlines

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

Hacking Team, a controversial Italy-based company that develops and sells surveillance technology to governments worldwide, has been breached. The attackers have leaked hundreds of gigabytes of sensitive information allegedly obtained from the company’s systems.

Aside from listening in on Brazilian President Dilma Rousseff's phone calls, US spies also targeted top political and financial officials, according to new information released by WikiLeaks on Saturday. The whistle-blowing website published a National Security Agency list of 29 Brazilian government phone numbers that the American spy group monitored.

The Industrial Control System Information Sharing and Analysis Center (ICS-ISAC) announced this week that it would merge with Webster University's Cyberspace Research Institute (CRI). 

The ad fraud Trojan known as Kovter has been updating Adobe Flash Player and Microsoft Internet Explorer on infected systems, most likely in an effort to keep other malware out.The French security researcher known as Kafeine discovered this new Kovter trick when he noticed that some of his virtual machines were attempting to download the latest version of Flash Player.

Cyber risk intelligence startup SurfWatch Labs has launched a new service that provides customers with customized research and intelligence from the Dark Web. For $100,000 per year, the company says customers can get focused, in-depth research and analysis of the their high level threat and risk environment from places on the Web not indexed by popular search engines.

While conducting security tests on its products, Cisco identified a serious vulnerability in the Cisco Unified Communications Domain Manager (CDM) platform software that can be exploited to take full control of affected systems. The company has released software updates to address the issue.

Recently I attended Gartner’s Security and Risk Management Summit outside Washington, D.C. Early in the week, I had a discussion with a security professional who asked me, skeptically, if mobile threats were actually something he had to worry about. He explained that mobile malware and mobile breaches were small blips on the security threat horizon.

The creators of Plex, the popular suite of software and services used for organizing and streaming digital media, are advising customers to change their passwords after a hacker breached at least one of the company’s servers.

Trump Hotel Collection is working to determine if its payment systems have been breached by cybercriminals after several U.S. banks identified fraudulent activity on cards used at the company’s hotel properties.

Telecom giant Level 3 Communications announced on Wednesday that it has paid an undisclosed cash sum to acquire Black Lotus, a provider of Distributed Denial of Service (DDoS) mitigation services.

German telecom giant Deutsche Telekom has teamed up with Intel Security on a joint research project to develop and deploy honey pots that can be embedded in any device, including smartphones and other connected (IoT) devices.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.