Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Codenamed Eastwood, the operation targeted the so-called NoName057(16) group, which was identified as being behind a series of DDoS on municipalities and organizations linked to a NATO summit.

Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.

A threat actor that may be financially motivated is targeting SonicWall devices with a backdoor and user-mode rootkit.

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world defense strategies in cloud security.

Compumedics has been targeted by the VanHelsing ransomware group, which stole files from the company’s systems.

iCOUNTER, which helps organizations defend against targeted attacks, has launched under the helm of former Mandiant president and COO John Watters.

Google refused to share any details on how its Big Sleep AI foiled efforts to exploit a SQLite vulnerability in the wild.

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

Cameron John Wagenius pleaded guilty to charges related to hacking into US telecommunications companies.

Italian company Exein has raised €70 million (~$81 million) in a Series C funding round led by Balderton.

Google has released a Chrome 138 security update that patches a zero-day, the fifth resolved in the browser this year.

People on the Move

Robert Shaker II has joined application security firm ActiveState as Chief Product and Technology Officer.

MorganFranklin Cyber has promoted Nick Stallone and Ferdinand Hamada into newly created roles.

Jessica Newman has joined Sophos as General Manager of Global Cyber Insurance.

Breach and attack simulation solutions provider AttackIQ has appointed Pete Luban as Field Chief Information Security Officer.

Silobreaker announced the appointment of Geoff Brown as its new Chief Executive Officer.

More People On The Move
US National Guard hacked by China US National Guard hacked by China

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

Belk ransomware attack Belk ransomware attack

DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.

Train hacking Train hacking

A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake. 

Top Cybersecurity Headlines

Louis Vuitton customers in the UK, South Korea, Turkey and possibly other countries are being notified of a data breach.

The latest release of the xAI LLM, Grok-4, has already fallen to a sophisticated jailbreak.

Since August 2015, Google has delivered a constant stream of monthly security patches for Android. Until July 2025.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

This online session will explore resilience planning in response to geopolitical tensions and help CISOs navigate the current state of federal cybersecurity initiatives.

Register

Join the summit to explore critical threats to public cloud infrastructure, APIs, and identity systems through discussions, case studies, and insights into emerging technologies like AI and LLMs.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

SAN FRANCISCO - A tweaked version of Microsoft's Windows operating system which restores the "Start" button missed by users and updates other features will be available on October 18, the company said Wednesday.

BANGKOK - Thai villagers on Wednesday apologized for mistaking a Google worker for a government snoop as he carried out mapping for the Internet giant's "Street View" program in a remote area. The man was stopped by villagers at Sa Iap, in northern Thailand, on Tuesday as he drove through in a marked Google car with a camera attached to a turret.

Creepiness is a negative visceral reaction, like something crawling on your skin. It can be triggered when you feel your personal privacy is violated. Companies don’t want to make you feel creepy… but they do. And if they do so a lot, you go buy elsewhere. So it’s important not to be creepy. But what is creepy, changes.

Microsoft released fixes for 23 security vulnerabilities today including critical patches for Internet Explorer and Windows. The fixes are spread across eight security bulletins. Three of them – covering issues in Internet Explorer (IE), Exchange and Windows – are rated 'Critical.' The remaining five are classified as 'Important.'

In one of the biggest blockbuster movies of the 1990’s, Armageddon, there is a scene shortly after they discover the existence of the killer asteroid on a path towards Earth where Dan Truman (played by Billy Bob Thornton) says something to the effect of “for years people have been questioning the need for NASA, let’s show them that their money was not wasted.”

SEOUL - North Korea, one of the most isolated and censored societies on the planet, has unveiled what it says is a domestically-produced smartphone. Industry analysts say the "Arirang", built around Google's Android OS, is likely manufactured in neighboring China, however.

NEW YORK CITY - A New York regulator announced a probe into virtual currencies like Bitcoin Monday, saying they could be used by drug traffickers and gun runners and threaten US national security.

Google announced on Monday that it has paid out more than $2,000,000 in rewards for vulnerabilities found in its products as part of its security reward initiatives. Since introducing a rewards program for security flaws found in its Chromium and Google Web properties, Google said that it has rewarded and fixed more than 2,000 reports of security flaws.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.

Cloud Security

Cloud Security

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world...

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.