Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

The CitrixBleed 2 vulnerability in NetScaler may expose organizations to compromise even if patches have been applied.

Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices.

Wiz researchers discovered NVIDIAScape, an Nvidia Container Toolkit flaw that can be exploited for full control of the host machine.

Anne Arundel Dermatology said hackers had access to its systems for three months and may have stolen personal and health information. 

A settlement has been reached in the class action brought by investors against Meta over the Cambridge Analytica incident, but details have not been shared.

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world defense strategies in cloud security.

Cybersecurity startup Empirical Security has raised $12 million in seed funding for its vulnerability management platform. 

Karen Serobovich Vardanyan pleaded not guilty to charges related to his alleged role in the Ryuk ransomware operation.

Deployed on mobile devices confiscated by Chinese law enforcement, Massistant can collect user information, files, and location.

An $8 billion class action investors’ lawsuit against Meta stemming from the 2018 privacy scandal involving the Cambridge Analytica political consulting firm.

Four CVEs disclosed at the Pwn2Own Berlin 2025 hacking competition have been patched in VMware products.

People on the Move

Kenna Security co-founder Ed Bellis has joined Empirical Security as Chief Executive Officer.

Robert Shaker II has joined application security firm ActiveState as Chief Product and Technology Officer.

MorganFranklin Cyber has promoted Nick Stallone and Ferdinand Hamada into newly created roles.

Jessica Newman has joined Sophos as General Manager of Global Cyber Insurance.

Breach and attack simulation solutions provider AttackIQ has appointed Pete Luban as Field Chief Information Security Officer.

More People On The Move
Badbox 2 botnet lawsuit by Google Badbox 2 botnet lawsuit by Google

Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices.

Oracle patches Oracle patches

Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.

UNFI Cyberattack UNFI Cyberattack

Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.

Top Cybersecurity Headlines

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.

A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake. 

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

This online session will explore resilience planning in response to geopolitical tensions and help CISOs navigate the current state of federal cybersecurity initiatives.

Register

Join the summit to explore critical threats to public cloud infrastructure, APIs, and identity systems through discussions, case studies, and insights into emerging technologies like AI and LLMs.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

Do these firms really care about McAfee shareholders, or is this just an attempt to rake in some cash for the firms themselves?Intel, the world’s largest computer chipmaker, will pay $48 per share in cash for McAfee – a whopping 60 percent premium over McAfee's $29.93 closing price on Wednesday, and one that’s in line with other recent valuations in software and tech deals.

Intel on Thursday said it has entered into a definitive agreement to buy McAfee, the computer security software company, for $7.68 billion in cash, puchasing of all of the company’s common stock at $48 per share. McAfee shares closed at $29.93 at the end of trading on Wednesday.

Top 10 Most Dangerous Celebrities OnlineLooking for some hot photos or gossip on your favorite celebrity? Be careful. If you’re looking to dig up some dirt on Cameron Diaz there is a ten percent chance you’ll end up on a malicious site, according to McAfee.

The second quarter Phishing Trends Report from Internet security provider IID  (Internet Identity) indicates that there has been a significant switch in the tactics of cyber criminals, with at least one major gang shifting its entire focus away from phishing to Zeus malware, often referred to as man-in-the-browser malware.

HP to Acquire Fortify SoftwareHP (NYSE:HPQ) announced today that it has signed a definitive agreement to acquire Fortify Software, a privately held software security assurance company based in San Mateo, California.

Entrust IdentityGuard 9.3 Released - Adds Out-of-Band AuthenticationIdentity-based security provider Entrust has announced the immediate availability of out-of-band authentication via its new mobile application, IdentityGuard Mobile. The application is now a component of the company’s Entrust IdentityGuard 9.3 layered security system for mobile devices.

"Contrary to any rumors, the security architecture is the same around the world and RIM truly has no ability to provide its customers’ encryption keys." Authorities in India, in and effort to keep militants and spies off its mobile networks, is demanding access to email and messaging services provided by Research In Motion, maker of BlackBerry.India has given Research In Motion a deadline of August 31st to comply with a request to gain access to encrypted BlackBerry messaging services within...

Mobile Virus Authors Expected to see Android Systems as a Growing TargetGoogle's Android mobile OS has been declared the fastest growing mobile platform according to recent reports, with over 160,000 Android devices being activated every day. This astronomical growth is credited to a friendly user interface and openness of the platform.However, Android's openness has turned its online app store, Android Market, into a breeding ground for malicious applications capable of stealing sensitive user information from the mobile phones. 

Top Five Worst DNS Security IncidentsPreserving Internet security is often an iterative process, with defenders aware that they must be responsive as well as proactive in order to stay one step ahead of would-be attackers. Software developers must respond to vulnerabilities discovered in their code, anti-virus service providers must respond to new variants of malware, and enterprises must repair the holes in their networks when they are found; Promptly.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.

Cloud Security

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.