Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Anne Arundel Dermatology said hackers had access to its systems for three months and may have stolen personal and health information. 

A settlement has been reached in the class action brought by investors against Meta over the Cambridge Analytica incident, but details have not been shared.

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world defense strategies in cloud security.

Cybersecurity startup Empirical Security has raised $12 million in seed funding for its vulnerability management platform. 

Karen Serobovich Vardanyan pleaded not guilty to charges related to his alleged role in the Ryuk ransomware operation.

Deployed on mobile devices confiscated by Chinese law enforcement, Massistant can collect user information, files, and location.

An $8 billion class action investors’ lawsuit against Meta stemming from the 2018 privacy scandal involving the Cambridge Analytica political consulting firm.

Four CVEs disclosed at the Pwn2Own Berlin 2025 hacking competition have been patched in VMware products.

Cisco has released patches for multiple vulnerabilities, including a critical flaw in Cisco ISE that leads to remote code execution (RCE).

Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.

More than 1,000 suspects were arrested in raids in at least five provinces between Monday and Wednesday, according to Information Minister Neth Pheaktra and police.

People on the Move

Kenna Security co-founder Ed Bellis has joined Empirical Security as Chief Executive Officer.

Robert Shaker II has joined application security firm ActiveState as Chief Product and Technology Officer.

MorganFranklin Cyber has promoted Nick Stallone and Ferdinand Hamada into newly created roles.

Jessica Newman has joined Sophos as General Manager of Global Cyber Insurance.

Breach and attack simulation solutions provider AttackIQ has appointed Pete Luban as Field Chief Information Security Officer.

More People On The Move
Oracle patches Oracle patches

Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.

UNFI Cyberattack UNFI Cyberattack

Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.

US National Guard hacked by China US National Guard hacked by China

Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.

Top Cybersecurity Headlines

DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.

A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake. 

Louis Vuitton customers in the UK, South Korea, Turkey and possibly other countries are being notified of a data breach.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

This online session will explore resilience planning in response to geopolitical tensions and help CISOs navigate the current state of federal cybersecurity initiatives.

Register

Join the summit to explore critical threats to public cloud infrastructure, APIs, and identity systems through discussions, case studies, and insights into emerging technologies like AI and LLMs.

Register

Upcoming Cybersecurity Events

The AI Risk Summit brings together security and risk management executives, AI researchers, policy makers, software developers and influential business and government stakeholders. [August 19-20, 2025 | Ritz-Carlton, Half Moon Bay]

Learn More

SecurityWeek’s CISO Forum Summer Summit & Golf Classic will take place August 19-20 at the Ritz-Carlton, Half Moon Bay, CA. (www.cisoforum.com)

Learn More

The Threat Detection & Incident Response Summit delves into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization. [May 21, 2025 – Virtual]

Learn More

SecurityWeek’s Cloud and Data Security Summit returns with a deliberate focus on exposed attack surfaces and weaknesses in public cloud infrastructure and APIs. [July 16, 2025 – Virtual]

Learn More

Vulnerabilities

Cybercrime

Core Security, maker of penetration testers used by “red teams” to identify security vulnerabilities, today announced beta availability of a fully automated testing solution with the ability to continuously test and measure the overall security standing of an enterprise.

(ISC)2, the large not-for-profit information security professionals organization, today announced that Devon Bryan, CISSP, deputy associate chief information officer for cybersecurity for the U.S. Internal Revenue Service (IRS), has been selected as the new co-chair of the (ISC)2 U.S. Government Advisory Board (GAB) for Cyber Security.

According to a recent survey conducted by security information and event management company NetForensics, the perceived need for protection against network threats is going up, while the resources available to deal with the problem are headed in the opposite direction.

Governments and utilities involved in building the United States’ “smart” power grids of the future are also constructing some of the most attractive targets imaginable for potential adversaries in a cyber warfare scenario.

Adoption of Android, an open source mobile device platform, is growing and millions of Android devices are being put into use every month, many of those with access to corporate networks. While many can argue that users have been waiting to upgrade to Apple’s latest iPhone 4 (launching this week), in the first part of 2010 Android based smartphones outsold iPhones for first time since its inception.

Attendees at the public ICANN meeting in Brussels today heard from over two dozen companies that have implemented or are planning to support DNSSEC, the next-generation standard protocol for secured domain names. It is clearer than ever before that DNSSEC is becoming a reality.

Apple has added a new paragraph to its privacy policy which, depending on your viewpoint, may usher in a new era of amazing convenience and relevance to the mobile experience, or bring society one step closer to an Orwellian future where governments and corporations can track your every move.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

RevEng.ai has raised $4.15 million in seed funding for an AI platform that automatically detects malicious code and vulnerabilities in software.

Cloud Security

Cloud Security

Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world...

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.