Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.

The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were remotely hacked.

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.

Ryan Davis went from hacking his school’s network to running security at New Charter Technologies. What worries him now is shadow AI.

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

OpenAI says its Critical-rated cyber model met fewer hidden task goals when work was framed as AI safety research, often silently.

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.

The company will invest in agentic data security capabilities and expand its go-to-market organization.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

Linux Linux

An unreleased OpenAI cyber model found and exploited 948 distinct Linux kernel privilege escalation bugs for about $1.2 million.

Switch vulnerability exploited Switch vulnerability exploited

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

Russia APT Blizzard Russia APT Blizzard

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

Top Cybersecurity Headlines

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

Apple, Google, and Facebook are playing a game of high-stakes global brinksmanship around who has rights to control their data, which impacts their European growth prospects, business models, and ultimately stock valuations.

The Federal Bureau of Investigation (FBI) is looking for experienced and certified experts that could become cyber special agents, the agency announced on Monday.

Trend Micro researchers have come across a 64-bit version of Havex, a remote access tool (RAT) that has been used in cyber espionage campaigns aimed at industrial control systems (ICS).

The prevailing narrative for the recent devastating cyber-attack against entertainment giant Sony sounds like a script: a small country angry about a movie about to be released sends a group of elite hackers to stop the film release. But some experts don't believe that's what happened.

A top South Korean official offered Monday to hold high-level talks with North Korea in January, as Pyongyang battles growing pressure over human rights and a cyber row with the US. Ryoo Kihl-Jae, the South's unification minister in charge of North Korean affairs, said he was willing to meet in Seoul or the North's capital Pyongyang for the rare high-level talks.

The official website of the Internet Systems Consortium (ISC) was hacked just before Christmas and set up to serve malware to visitors, researchers at security firm Cyphort reported.

People who know me know that I love to ask questions. In fact, people sometimes ask me: “Why do you always answer a question with a question?” To this I reply: “Why not?”

2014 was a very busy year for hackers. For those keeping a tally of data breaches, the year offered no respite.

According to a new market research report from MarketsandMarkets, the global Industrial Control System (ICS) Security Market is estimated to reach $8.73 billion in 2019. Estimated to be $6.18 billion in 2014, the increase represents an estimated Compound Annual Growth Rate (CAGR) of 7.2% from 2014 to 2019.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.