Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.

Noteworthy stories that might have slipped under the radar: Manchester Airports Group cyberattack, Carhartt breach data was partly fake, U.S. Bank responds to ransomware gang’s claims.

The Bureau of Alcohol, Tobacco, Firearms and Explosives has described it as a ‘major incident’ and it’s conducting an investigation with the DOJ.

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.

Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophisticated. 

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potential security risks.

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.

The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.

Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.

New training environments will teach AI models to distrust instructions arriving from other agents outside sanctioned channels.

The identity security company beat quarterly expectations and raised its outlook as enterprises face growing pressure to secure AI agents and other non-human identities.

SecurityWeek talks to Chris Wheeler, CISO at Resilience, about his journey from the Navy to becoming a cybersecurity leader.

The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.

Hasbro cyberattack Hasbro cyberattack

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.

Linux vulnerability Linux vulnerability

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.

AI AI

Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophisticated. 

Top Cybersecurity Headlines

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potential security risks.

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.

New training environments will teach AI models to distrust instructions arriving from other agents outside sanctioned channels.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

Upcoming Cybersecurity Events

AI Risk Summit: Aug 11-12, 2026 (In-Person)

SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]

Learn More
CodeSecCon 2026

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]

Read More
Attack Surface Management Summit 2026

SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]

Read More
ICS Cybersecurity Conference 2026

SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]

Learn More

Vulnerabilities

Cybercrime

Zscaler, a provider of cloud based security solutions, today unveiled Zscaler Mobile, a service designed to protect mobile devices from the ever-increasing number of threats to mobile devices. Combined with Zscaler's existing Web and email cloud security services, Zscaler Mobile enforces the same policy for users wherever they go, across all their devices. The platform supports leading smartphones and tablets including iPhone, iPad and Android devices.

Dell announced new Enterprise Mobility Services today, a line of services and solutions to help address strategic pain points that enterprises and CIOs are experiencing as critical challenges to their business as the work force becomes increasingly mobile. The new services and solutions announced today include:

EMC today announced that it has named Thomas P. Heiser as president of RSA, the Security Division of EMC. Heiser, a 26 year veteran of EMC and most recently serving as RSA's Chief Operating Officer, will continue day-to-day leadership of the division.

Many are familiar with the popular T.V. series’ fictional account of the NCIS (Naval Criminal Investigative Service). Real-life NCIS Acting Special Agent Kirk Greffin has been cracking down on white-collar crime, government corruption and contractor fraud. Greffen states, “A $10 million heist is a major crime, whether the money is taken with a gun or with a keyboard. Fraud victimizes every taxpayer. It wastes billions of tax dollars and erodes public confidence.

With an estimated one trillion devices that will be connected to the Internet by 2015, security vulnerabilities are emerging that companies need to address. Recognizing this trend, IBM today announced initiatives to extend security to the growing number of mobile and instrumented devices beyond an organization’s own walls, such as smartphones, ATMs, retail kiosks, traffic systems, meters, buildings and sensors.

VASCO Data Security, a provider of software security authentication solutions, today announced that VASCO's DIGIPASS authentication technology can now utilize the embedded token of Intel® Identity Protection Technology (Intel® IPT), allowing customers to deploy two-factor authentication without the need to roll-out software or hardware devices to end-users.

Report Shows Organizations Continue to Lack Communication and Understanding of Data and Application Security Strategies. A trio comprised of Application Security, Inc., Unisphere Research, and the Oracle Applications Users Group (OAUG) today released its 2011 Data Security report, “Managing Information in Insecure Times.”

Governance, Risk and Compliance (GRC) solutions provider Agiliance today announced the launch of Agiliance Continuous Compliance Service™ (CCS) for PCI, a cloud-based solution that manages the entire PCI life cycle.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.

Cloud Security

Cloud Security

A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.