Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

A federal grand jury indicted two Canadian men for hijacking university supercomputers to secretly mine Electroneum cryptocurrency.

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

The browser update resolves dozens of memory safety bugs and incorrect/missing authorization issues.

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

In recent months, North Korea has accelerated its weapons tests in a likely bid to increase its leverage in potential diplomacy with the US.

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

The most severe is a critical flaw in Framework leading to remote code execution without user interaction.

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.

The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity.

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.

Binance hacked Binance hacked

Binance’s first incident report traces the record theft to a months-long campaign that compromised three engineers’ computers.

Meta Muse bug bounty program Meta Muse bug bounty program

A $300,000 award went to a pre-launch flaw that exposed conversations and tokens on internal Muse test VMs used by Meta staff.

Botnet Botnet

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.

Top Cybersecurity Headlines

Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

Chinese Group Believed Responsible for Community Health Systems Attack That Exposed Personal Information of 4.5 Million PatientsCommunity Health Systems, Inc., one of the largest hospital operators in the United States, has suffered a data breach that affects millions of individuals, the organization revealed on Monday.

It’s no surprise to anyone reading this that advanced malware is destructive, deceitful and resource-draining. But, what was a surprise to me was that the average cost of an attack for U.S. businesses in 2013 was a mind-boggling $11.6 million. Equally disturbing was the fact that 67 percent of security professionals in the U.S. do not have technology to fight advanced malware.

A recent security bulletin released by Microsoft as part of the August 2014 Patch Tuesday can lead to a crash on some systems, the company said in a knowledge base article.

In an attacker's ideal world, he or she would infect a desktop, steal the user's RDP password and move smoothly across the network to the RDP server and immediately gain access. In real life however, things can get a little more complicated. 

The report of the largest known harvest of Internet credentials, an estimated 1.2 billion passwords, names and personal information from 420,000 web sites by a group of Russian hackers, is but the latest incident in a surging tide of global cybercrime.

WASHINGTON - The National Security Agency is developing a tool that can detect cyberattacks from an adversary by analyzing Internet traffic and respond automatically, a leaked document showed. Wired magazine revealed the existence of the program called MonsterMind in an article following a series of interviews with former NSA contractor Edward Snowden.

WARSAW - Ukrainian hackers hostile to the government claimed Thursday to have launched a cyber attack against the websites of Poland's presidency and the Warsaw Stock Exchange. The hacker group Cyber Berkut said it blocked the sites, both down on Thursday afternoon, in response to what it said were Poland's actions as "sponsors of fascism in Ukraine".

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.