Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program.

Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.

Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions.

The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation.

BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.

The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

An exploited flaw in the Remote Access SSL VPN service lets unauthenticated attackers remotely force ASA and FTD firewalls to reload.

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.

The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog

Are elections secure in the US? Are elections secure in the US?

Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.

Cisco vulnerability exploited Cisco vulnerability exploited

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

VMware VMware

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.

Top Cybersecurity Headlines

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.

CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]

Learn More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More
CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More

Vulnerabilities

Cybercrime

TRICARE Breach Potentially Puts 4.9 Million Individuals at RiskA massive data breach that could potentially affect 4.9 million individuals who received services from TRICARE, a provider of health care services to active and retired military personnel, was disclosed this week.

IT security talent is in high demand across government agencies and private companies, with a shortage of resources among the federal agencies that is creating a challenge in managing successful cybersecurity operations. Last year, the U.S. Cyber Command, which was scheduled to be “fully operational” by October 1st, missed its deadline, primarily due to the challenge of finding qualified personnel.

Juniper Networks today announced new enhancements to its Junos Pulse Mobile Security Suite, bringing new mobile device management and security controls, as well as an API to allow service providers and OEMs to integrate with the platform.

Along with the widely anticipated “Kindle Fire” tablet announced today, Amazon introduced a Cloud-Accelerated Web Browser that boosts the power of the tablet by using the computing power of Amazon Web Services cloud services, something Amazon is describing as a “split browser” architecture.

Dealing with the Aftermath of a Breach Is Challenging, but there are Things you Can do to Keep Things from Going from Bad to WorseBreaking into an enterprise’s digital vault is half the battle; the other part is getting away clean. If the arrest rates for hacking are any indication, that second part has become something of a science in the cyber-underground.

Despite the risk of steep fines and increased transaction fees, many businesses are still failing to maintain compliance with the Payment Card Industry Data Security Standard (PCI DSS). That’s according to a new report today from Verizon, showing that for the second year in a row, many businesses are struggling to comply with payment card security standards and putting consumers' information at risk.

Following customer outrage and privacy concerns over a policy to continue tracking drivers with GPS technology even after they have cancelled service, OnStar today said it has reversed its proposed policy changes and won’t be keeping a data connection to customers’ vehicles after the OnStar service is canceled.

Microsoft Crushes Another Botnet: "Operation b79" Neutralizes Kelihos BotnetMicrosoft today announced it has taken down the notorious Kelihos botnet, scoring yet another legal victory in the battle against the botnet business.

Like all computers, automobiles can be hacked and compromised. As auto manufacturers continue to rush new features to market, security cannot continue to be an afterthought.If you’ve watched Gone in Sixty Seconds or played the video game, you’ve seen how easily a car can be hotwired—especially older models. Just pry open the steering column, connect the battery wires and touch the starter wires together. Vroom!

Perimeter E-Security Offers Hosted Log Management Solution with Simple Pricing ModelLog Management, including Security Information Event Management (SIEM) is considered essential when it comes to IT best practices, and for regulated industries it’s a requirement when it comes to compliance. Log management isn’t very complex in theory, but managing increasingly complex networks, and an ever-growing number of applications and virtual servers, log management can pose a challenge for many organizations.

A malware attack targeting MySQL.com was detected today redirecting users to malicious sites hosting a notorious crimeware kit.According to researchers at Armorize, the Oracle-owned Website was compromised today but has since been cleaned up. While the attack was underway, users who visited the site were infected and redirected to a site hosting the BlackHole exploit kit.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.