Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet.

The trio, who have nicknames that include “Rocky Balboa,” “Superman Cash” and “Fat Boy,” often targeted the companies’ accounting departments.

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.

Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.

SSH vulnerability SSH vulnerability

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

Linux Linux

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

Switch vulnerability exploited Switch vulnerability exploited

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

Top Cybersecurity Headlines

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

The PCI Security Standards Council (PCI SSC) has released the latest version of the PCI Data Security Standard (PCI DSS) with an eye towards addressing security concerns related to the Secure Sockets Layer (SSL) protocol.

Iran poses a growing threat to America's computer networks and has launched increasingly sophisticated digital attacks and spying on US targets, according to a new report released Thursday.

Cyber extortions have taken on multiple forms – encrypting data and holding it hostage, stealing data and threatening exposure, and denying access to data.

IBM on Thursday launched a new threat intelligence sharing platform that allows enterprise security teams and researchers to collaborate on security incidents and sift through troves of cyber threat intelligence data.

With less than three weeks to go until Suits and Spooks London 2015 kicks off, the agenda is nearly finalized. Our first 2-day international event will host experts in cyber warfare, intelligence, advanced persistent threats, sophisticated malware, and political issues.

Google has patched a vulnerability in YouTube that could have been exploited to copy any comment from one video to another, researchers revealed on Wednesday.The security hole was identified by Egypt-based researchers Ibrahim El-Sayed and Ahmed Aboul-Ela while analyzing the comment approval feature in YouTube.

Dropbox is the latest major company to turn to the power of the hacker community in an effort to ensure that its services are vulnerability-free.The online file sharing giant announced on Wednesday the launch of a bug bounty program via the HackerOne platform.

Two hundred and ninety-five – that is the combined total of days attackers were actively exploiting the five most targeted zero-days last year before they were patched, according to a new report from Symantec.

Prakash Panjwani Named CEO at WatchGuard Technologies Seattled-based network security firm WatchGuard Technologies announced on Wednesday that Prakash Panjwani has been named Chief Executive Officer (CEO) of the company.

Hellsing APT Strikes Back After Being Targeted by the Naikon GroupA small cyber espionage group might have remained under the radar, but their activities were exposed when they decided to retaliate against an attack launched by a different advanced persistent threat (APT) group.

Hackers bypassed insufficient safeguards to make off with data on 100,000 contacts held on French state TV computers, broadcasters said Wednesday. The attack occurred Tuesday and involved the theft of "a limited amount of personal data (names, postal and e-mail addresses and/or telephone numbers)," France Televisions said in a statement.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.