Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

An authentication bypass and a command injection flaw can be chained for root access on Barracuda’s Email Security Gateway appliances.

The company will invest in agentic data security capabilities and expand its go-to-market organization.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

The most severe is a critical flaw in Framework leading to remote code execution without user interaction.

Binance hacked Binance hacked

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

Meta Muse bug bounty program Meta Muse bug bounty program

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

Botnet Botnet

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.

Top Cybersecurity Headlines

Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

The Open Web Application Security Project (OWASP) announced on Wednesday the availability of version 4 of the OWASP Testing Guide.

WASHINGTON - Apple is rolling out new privacy protections for iPhones and iPads, with a new system that makes it impossible for the company to unlock a device even with a warrant. Apple's privacy terms updated late Wednesday indicate that under its new mobile operating system, iOS 8, the company will not have access to customer passwords.

Palm reading, tarot cards, crystal balls, tea leaves. For thousands of years humans have tried to predict the future with various methods and little success. Today, the desire to predict the future remains strong but increasingly difficult to satisfy; the pace of change has accelerated exponentially and the notion of predicting the future is even more tenuous the further out in time we go.

WASHINGTON - Online piracy of music, films and other content has moved to the Internet cloud, reaping big profits for digital thieves, according to a study released Thursday. The study identified 30 cloud-based "cyberlockers" which operate globally and are hosted in various locations around the world, and which take in some $96 million in annual revenue.

BEIJING - Beijing on Thursday strongly denied a US congressional panel's claim that Chinese government-linked hackers had launched dozens of cyberattacks on American defense contractors, saying the charges were "fabricated out of thin air".

Apple announced on Wednesday the availability of iOS 8, the eighth major release of iOS. The latest version of the mobile operating system comes with fixes for more than 50 security vulnerabilities.

DOHA - A media rights group on Thursday urged Qatar to revoke sections of a new cybercrime law, saying they threaten freedom of expression in the Gulf state. The Committee to Protect Journalists (CPJ) warned that the broad language of the new Anti-Cybercrime Law, which was passed this week, could be used to restrict press freedoms and jail journalists.

Researchers at Palo Alto Networks analyzed a piece of malware targeting owners of jailbroken iPhones that steals the vicitm's Apple ID and password information and makes purchases from the App Store.

WASHINGTON - Chinese hackers believed to be linked to Beijing conducted dozens of cyberattacks on US defense contractors between 2012 and 2013, potentially compromising military operations, a congressional probe warned Wednesday.

Cyber risk intelligence company SurfWatch Labs this week announced the availability of a new application designed to provide C-level executives and board members with clear information on cyber risks faced by their company.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

Sysdig’s platform uses runtime visibility to track AI agent actions and block risky behavior before it reaches production systems.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.