A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.
CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.
Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophisticated.
For twenty-five years, “data” in security meant logs and events. But logs are a lossy representation of reality.
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterJoin as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
Register
SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
-
Noteworthy stories that might have slipped under the radar: Manchester Airports Group cyberattack, Carhartt breach data was partly fake, U.S. Bank responds to ransomware… (August 28, 2026)
-
CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents. (August 28, 2026)
-
A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations. (August 28, 2026)
-
CISA is urging government agencies to immediately patch the Citrix NetScaler vulnerability tracked as CVE-2026-8452. (August 27, 2026)
-
Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison. (August 27, 2026)
-
The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders. (August 27, 2026)
-
The pro-Russian hacker group Server Killers claimed responsibility for the attack. (August 27, 2026)
-
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. (August 24, 2026)
