Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was targeted.

The FBI has officially pinned the $6 billion Binance hack on North Korea’s TraderTraitor as the attackers launder the stolen crypto.

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.

The startup maps how identities, assets and vulnerabilities connect, and uses AI agents to find and fix risky combinations of issues.

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.

Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.

Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

Ivanti vulnerability exploited Ivanti vulnerability exploited

CISA has added CVE-2026-111357 and CVE-2026-118527 to its KEV catalog after the Ivanti VPN flaws were chained in zero-day attacks.

Hacker Hacker

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.

PHP2Shell PHP exploited PHP2Shell PHP exploited

Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.

Top Cybersecurity Headlines

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]

Learn More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More
CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More

Vulnerabilities

Cybercrime

A recent report from Blue Coat Systems, has revealed that the number of malicious networks – or "Malnets" – has tripled in the last six months. Collectively, the Malnets themselves are responsible for millions of attacks each month on systems used at home and the office.

Iranian official Mohammad Reza Golshani, head of the communications and IT of the NIOOC (Nat’l Iranian Offshore Oil Company), said that Israel launched a cyber attack against his company, and was soundly defeated before it could cause any damage.

The Irish version of Google and Yahoo briefly went offline on Tuesday when unknown perpetrators managed to change the sites' Domain Name Server records, according to the IE Domain Registry. A "security incident" on Tuesday resulted in the DNS nameserver records for two "high profile .ie domains" to be changed, IEDR said in a statement on its site Wednesday. There was apparently an "unauthorized access" to a registrar's account which resulted in the change, according to the statement.

Less than two years after being aquired by Intel, McAfee said that it will be laying off a "small percentage" of the now-security division's roughly 7,100 employees, according to a report that was confirmed with SecurityWeek on Thursday.

HyTrust 3.0 Integrates ‘Secondary Approval’ Feature To Safeguard Against Operational Downtime and Internal Security Breaches.At the RSA Europe Conference in London this week, HyTrust, a provider of policy management and access control solutions for virtual environments, released version 3.0 of its HyTrust Appliance.

If you and your co-workers are looking forward to Friday, you are not alone – phishers are looking forward to it as well. In an analysis of phishing schemes between July and August, researchers at Websense found that 38.5 percent of the phishing attacks they detected were conducted on Friday, with Monday (30 percent) and Sunday (10.9 percent) coming in at second and third, respectively. 

SHANGHAI - Chinese telecom firm ZTE, accused by American lawmakers of doing business with Iran and posing a security threat, says US network giant Cisco Systems has ended a cooperation deal with it.

OTTAWA - Canada said Tuesday it had invoked a "national security exception" that could exclude China's Huawei Technologies from a role in helping build its new super secure government network.

WASHINGTON - The US Supreme Court let stand Tuesday an immunity law on wiretapping viewed by government as a useful anti-terror tool but criticized by rights activists as a flagrant abuse of executive power. The top US court declined to review a December 2011 appeals court decision that rejected a lawsuit against AT&T for helping the National Security Agency monitor its customers' phone calls and Internet traffic.

The growth of software activation key generators is linked to the spread of malware, according to findings from Microsoft's latest Security Intelligence report. In volume 13 of the report, which was released Monday, Microsoft reported that Win32/Keygen was the most commonly reported threat family in the first half of 2012. Win32/Keygen, which represents software activation key generators, was detected nearly five million times.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.