Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

A US court sentenced Syrian hacker Ahmad Umar Agha to 42 months for pro-Assad attacks on media, businesses, and government entities.

Over 22.6 million exposed instances are potentially affected by the critical PHP flaws that have been targeted for over a week.

Noteworthy stories that might have slipped under the radar: Iran eyed in military freezer hacks, Copenhagen University breach, AI-powered malware.

As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.

It allowed customers to host hack-for-hire services, supported ransomware and infostealer operators, and accepted crypto payments.

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.

Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program.

Drupal Drupal

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Polymarket hacked Polymarket hacked

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

GitLab GitLab

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

Top Cybersecurity Headlines

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]

Learn More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More
CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More

Vulnerabilities

Cybercrime

At RSA Conference Europe 2012 in London, RSA, The Security Division of EMC, on Tuesday introduced “Distributed Credential Protection,” new authentication technology designed to protect passwords and other credentials stored in databases from cyber attacks. RSA Distributed Credential Protection (DCP) allows customers to split authentication credentials between two points, providing a bump in protection to an often-targeted access point.

Cisco Systems has severed ties with ZTE Corp, after a Reuters investigation turned up evidence that the company’s technology was likely being sold to Iran. An internal investigation, which Cisco will not comment on, has caused enough concern that it was determined a clean break was needed.

WASHINGTON - Chinese tech giant Huawei on Monday called a congressional report warning of security risks from its telecom equipment "an exercise in China-bashing" as US lawmakers held firm to their allegations.

Symantec has pulled back some of the covers from the Proxybox botnet. Symantec researchers revealed that their monitoring of the botnet's command-and-control server during the last few months shows the botnet controller tries to keep the size of the botnet at around 40,000 active users at any given time. The threat is comprised of three components: a dropper, the payload and a rootkit.

Late Sunday, a report surfaced from the US House Intelligence Committee, compiled after nearly a yearlong investigation, that said two Chinese telecom equipment makers "cannot be trusted" to be free of influence from Beijing and could be used to undermine US national security.

Crime may not always pay, but it is always costly. At least that is the case for companies in the U.S., according to a new HP-commissioned report from the Ponemon Institute. In an analysis of attacks impacting 56 sample companies during the first seven months of the year, researchers discovered the financial impact of cyber attacks has increased nearly 40 percent since 2010.

GENEVA - The United States will oppose any major revision to 24-year-old global telecommunications regulations at an international conference in December, the head of the US delegation said Monday, insisting the Internet must remain free and open.

New Offerings Help Better Manage and Secure Corporate and Personal Mobile Devices Across The Enterprise Verizon has expanded its portfolio of “Enterprise Mobility as a Service” offerings to provide additional support for managing a wide range of applications, access options and devices, including smartphones, tablets and laptops.

In case you were not aware, October is National Cyber Security Awareness Month, an initiative designed to “engage and educate public and private sector partners through events and initiatives with the goal of raising awareness about cybersecurity.” 

BEIJING - Beijing on Monday urged Washington to "set aside prejudices" after a draft Congressional report said Chinese telecom firms Huawei and ZTE were security threats that should be banned from business in the US.

NullCrew, known for their attack against the University of Cambridge last month, as well as Sony’s mobile division, has now targeted one of the U.K.’s largest mobile operators, leaking email addresses and database schemas.

Michael W. Baxter, 62, a former network engineer for Verizon Wireless, took advantage of flaws in the company’s procurement process to obtain access to millions of dollars in Cisco equipment, which he then sold in order to fund what authorities call a lavish lifestyle.

Committee Says Chinese Telcoms Failed to Provide Adequate Answers On Relationship With Chinese GovernmentWASHINGTON - Chinese telecom giants Huawei and ZTE pose a security threat to the United States and should be barred from US contracts and acquisitions, a yearlong congressional investigation has concluded.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.