Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.

The acquisitions will add AI agent observability and automated AI security testing capabilities to the CrowdStrike Falcon platform.

The most severe is a critical flaw in Framework leading to remote code execution without user interaction.

Multiple attacks from the same IP address attempted to deploy various payloads, including a Linux bot and webshells.

The U.K. will likely face AI cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity.

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.

The NATO CCDCOE exercise in Estonia introduces AI agents and OpenAI Daybreak into joint cyber and kinetic operations training.

Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

The Florida Department of Education says SSNs and other personal data may have been exposed in a breach of its financial aid website.

Hackers accessed its online shopping platform and stole customers’ personal and payment card information.

The top payout is for high-impact architectural research demonstrating full administrative control.

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.

Botnet Botnet

The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.

Supermarket refrigerator hacked Supermarket refrigerator hacked

Attackers again tampered with internet-exposed refrigeration controllers, this time at stores in Belgium, Sweden, Ireland and beyond.

2026 cybersecurity M&A 2026 cybersecurity M&A

Significant cybersecurity deals were announced by Absolute Security, Aikido, Anthropic, Cohere, Hex-Rays, and Proofpoint.

Top Cybersecurity Headlines

The extension performed host reconnaissance and attempted to create a reverse SSH tunnel.

The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
CISO Forum 2026 Year-End Review Virtual Roundtable

SecurityWeek’s CISO Forum 2026 Year-End Virtual Roundtable will reflect on a landmark year in security and discuss how to fortify your enterprise strategy for 2027.
[December 2, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More

Vulnerabilities

Cybercrime

Costin Raiu of Kaspersky Lab's global research and analysis team joins the podcast and talks to Ryan Naraine about the global implications of the

It is no secret that small-to-medium sized businesses (SMBs) have very different ways of using IT when compared with large enterprises. Virtualization, public cloud, and mobile are expanding the gap, but in surprising ways. Many folks in IT have the conceit that enterprises lead the way by investing in new, cutting-edge technology. That technology then trickles-down to SMBs.

Microsoft on Thursday rolled out the option for customers to enable multi-factor authentication its Windows Azure cloud service. Designed to bring increased access security and convenience for IT and end users, the new multi-Factor authentication option adds an additional layer of security for users signing in to the cloud service.

Cybercrime is a business, and in the case of the SSNDOB service, business is booming. According to a seven-month investigation by security reporter Brian Krebs, an identity theft service known as SSNDOB [SSNDOB.MS] has compromised computers at some of the largest consumer and business data aggregators in the United States.

WASHINGTON - The National Security Agency eavesdropped on civil rights icon Martin Luther King and heavyweight boxer Muhammad Ali as well as other leading critics of the Vietnam War in a secret program later deemed "disreputable," declassified documents revealed Wednesday.

WASHINGTON - The US Air Force has test flown an F-16 fighter jet without a pilot on board for the first time, in the latest sign of the military's increasing reliance on drones.

SAN FRANCISCO  - Twitter on Wednesday launched a system for emergency alerts which can help spread critical information when other lines of communication are down. The popular messaging service said its Twitter Alerts could be useful in natural disasters or other emergencies when traditional channels may be overloaded or unavailable.

Software giant Oracle said on Wednesday that it now offers a “complete Identity Governance solution” that lets organizations balance the objectives of access, security, and compliance, while enabling user self services to reduce total cost of ownership.

Arbor Networks and other service providers have reported that Sudan essentially dropped off the Internet on Wednesday. According to data from Arbor Networks, Internet traffic from Sudan dropped off starting around 9am EST on Wednesday.

These days, everything’s “smart.” Everything’s “connected.” Cars, watches, thermostats, power meters, home security systems, glucose meters, toilets, you name it. On the one hand, this Internet of Things is amazing. These devices are cool. They’re convenient. They’re capable of remote control. Some of them can even save you money. It’s an explosion of ingenuity.

The Cloud Security Alliance (CSA) has teamed up with BSI, an organization that provides standard-based solutions and services, and has announced a new third party certification program designed to assess the security of cloud service providers.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.