Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.

Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.

Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.

Hacker Hacker

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.

PHP2Shell PHP exploited PHP2Shell PHP exploited

Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.

Drupal Drupal

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Top Cybersecurity Headlines

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]

Learn More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More
CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More

Vulnerabilities

Cybercrime

Enterprise software firm NetIQ announced updates its Change Guardian product on Tuesday, which now has the ability to detect and respond to potential threats in real time through intelligent alerting of unauthorized access and changes to critical files, systems, and applications, the company said.

Mocana, a San Francisco-based company that focuses on mobile and smart device security solutions, unveiled new capabilities and security features to its security solution for protecting mobile apps from data leaks and other threats.

ForgeRock, a San Francisco, California-based open source identity and access management (IAM) solutions provider, announced on Tuesday that it has raised $15 million through a Series B round of financing, bringing the company’s total funding to-date to $22 million.

Scaling a company or even just a critical application within a company can be as scary as it is exciting. For starters, often you really don’t know when the hockey stick type growth will occur. Even the largest companies can’t always predict when demand will take off. Take a healthcare SaaS provider, for example.

WASHINGTON - Backers of a cybersecurity bill which stalled in Congress last year offered changes Monday in an effort to ease concerns of privacy and civil liberties activists.

WASHINGTON - WikiLeaks on Monday launched a searchable archive containing 1.7 million US State Department documents from 1973-6 that had long been in the public domain, billing it as a victory for transparency.

Network security firm Sourcefire on Monday announced that it has appointed John Becker as its new Chief Executive Officer, taking over for Martin Roesch who has served as interim Chief Executive Officer since June 2012 after John Burris took a medical leave of absence to undergo a series of treatments for colon cancer.

BadB, a man with deep ties to the carding community, notorious for his connections to CarderPlanet before authorities shut it down in 2004, was sentenced to 88 months in prison last week for trafficking in stolen credit cards.

A new report from McAfee outlines the growing risks in the sales and commerce industry, due in part to the mix of legacy and newer Point of Sale (POS) systems, in addition to secondary market hardware. Overall, McAfee’s point is that businesses need to focus on more than just PCI DSS compliance.

There is a shift going on in the security business. It’s been a slow-moving wave for a while now – a shift from reactive to proactive. In the long view, you can see that the pendulum has swung back and forth a few times.

Veracode, known for their application security testing offerings, has released their annual report on the state of software security, which focuses on software vulnerability trends and predictions.

JERUSALEM - A mass cyber attack by hacker groups targeting Israel which began Saturday continued on Monday, but the damage was negligible, the Shin Bet domestic security agency said. "As of noon on Monday, the state of alert continues and the efforts and activity to prevent the cyber attacks that began on Saturday night are ongoing," the agency said in a statement.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.