Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.

Attackers could exploit the security defects to execute arbitrary code and access or tamper with data.

The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.

Security teams must treat autonomous agents as highly privileged identities.

The AI giant is logging customers out of their accounts and removing payment data to prevent unauthorized Claude usage.

Named KindaRails2Shell, the arbitrary file read flaw allows attackers to extract secrets and execute arbitrary code remotely.

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.

FulcrumSec says it stole over 80 GB of data from Manchester Airports Group and plans to leak it online.

The ruling is part of Anthropic’s legal battle against the Pentagon after the government labeled the company as a supply chain risk earlier this year.

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.

Noteworthy stories that might have slipped under the radar: Manchester Airports Group cyberattack, Carhartt breach data was partly fake, U.S. Bank responds to ransomware gang’s claims.

Berlin ransomware data breach Berlin ransomware data breach

The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.

PaperCut zero-day exploited PaperCut zero-day exploited

PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.

Hasbro cyberattack Hasbro cyberattack

A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.

Top Cybersecurity Headlines

CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.

Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophisticated. 

New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potential security risks.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

In this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.

Register

Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.

Register

Upcoming Cybersecurity Events

AI Risk Summit: Aug 11-12, 2026 (In-Person)

SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]

Learn More
CodeSecCon 2026

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]

Read More
Attack Surface Management Summit 2026

SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]

Read More
ICS Cybersecurity Conference 2026

SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]

Learn More

Vulnerabilities

Cybercrime

Danish private equity firm Dansk Kapitalanlæg has acquired a 31 percent stake in Copenhagen based IT security company, Secunia.Secunia provides on vulnerability intelligence and vulnerability management tools to help companies secure applications and networks.

Worldwide revenue for mobile security client software grew 16% between the first and second quarter of 2010, according to Infonetics Research, a market research firm.Infonetics' Security Client Software report provides regional and worldwide market size, select market share, forecasts through 2014, and analysis for security client software for consumer and enterprise desktops/laptops, and for mobile security clients, including data protection clients for smartphones.Some excerpts from its updated 2010 report:

WhiteHat Security, a provider of website risk management solutions, unveiled its Threat Research Center (TRC) this week. The company has assembled a team of website security gurus to operate as an extension of an organization's information security team.

HP’s acquisition of ArcSight has been completed and ArcSight is now officially a subsidiary of HP. HP paid approximately $1.5 billion for the company, shelling out $43.50 per share in cash.

BAE Systems has named Paul Falkler to lead its Cyber Security Solutions business area. Falkler comes to BAE from SAIC, where he served as vice president of Strategic Development. At SAIC, he led the development of a portfolio of cyber security services while also overseeing cyber-related acquisitions.

Pennsylvania’s Chief Information Officer Brenda Orth will resign, effective October 31, according to an announcement made today.The commonwealth's chief technology officer, Tony Encinias, will serve as interim chief information officer while retaining his current position. Brenda Orth was appointed in January 2008. She previously served as chief technology officer for the commonwealth.

Rapid7, a Boston, Massachusetts based provider of vulnerability management and penetration testing solutions, today announced the availability of Metasploit Pro, its new software targeted to security professionals in enterprises, government agencies and consulting firms who need to test the security of networks.

The industrialized hackers are intent on one goal--making money. They also know the basic rules of the business of increasing revenues while cutting costs. (Part IV In a Series on Cybercrime.

Ridge Global names former US-CERT Director and former Director of the National Cyber Security Division at the Department of Homeland Security to Board of AdvisorsRidge Global, the security and risk management services company founded by Tom Ridge, nation's first secretary of Homeland Security and former governor of Pennsylvania, today announced is has named Amit Yoran, CEO of Netwitness Corporation, to the company's board of advisors.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.

Cloud Security

Cloud Security

A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.