Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

Threat actors are attempting to exploit a high-severity unauthenticated race condition leading to remote code execution.

Drupal says a highly critical Commerce Core access bypass is exploited in the wild and urges store owners to audit their orders.

Malicious code linked to a website monitoring tool was designed to hijack logged-in Polymarket sessions and siphon user funds.

Tracked as CVE-2026-97229, the bug allows unauthenticated attackers to execute arbitrary code on the server.

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.

Google’s new frontier model scored 88.2% on SEC-bench Pro and is rolling out first to vetted cyber defenders via its Fairwind Program.

Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.

Cisco open sourced Project Quarry, a rule language for detecting AI agent attacks that only emerge across sequences of benign actions.

The flaws could lead to arbitrary code execution, authorization bypasses, and privilege escalation.

BAE Systems says no data was extracted and no PII was breached in the incident that disrupted US bankruptcy court notices for weeks.

The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.

Binance hacked Binance hacked

Blockchain analysts link the record crypto theft to North Korean hackers, as Binance probes a possibly compromised engineer laptop.

Are elections secure in the US? Are elections secure in the US?

Unpatched voting machines, unverifiable QR-coded ballots, and AI-driven influence campaigns leave US elections short of secure.

Cisco vulnerability exploited Cisco vulnerability exploited

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

Top Cybersecurity Headlines

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

Upcoming Cybersecurity Events

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[Originally August 19, 2026]

Learn More
Zero Trust Summit Now On-Demand

SecurityWeek’s 2026 Zero Trust Summit will deep-dive into the world of digital identity management and the role of zero-trust principles and associated technologies
[Originally October 14, 2026]

Read More
CISO Forum Virtual Summit

The 2026 Virtual CISO Forum brings together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
[November 10 & 11, 2026 | Virtual]

Read More
Cyber AI and Automation Summit 2026

SecurityWeek’s Cyber AI & Automation Summit pushes the boundaries of security discussions by exploring the implications and applications of predictive AI, machine learning, and automation in modern cybersecurity programs.
[December 8 & 9, 2026 | Virtual]

Read More

Vulnerabilities

Cybercrime

Fraudulent SSL Certificate WarningUS-CERT, Microsoft, Mozilla and other organizations have issued warnings regarding fraudulent (fake) SSL certificates being issued.According to the Comodo Group, Inc., the certificate authority responsible for issuing the fraudulent certificates, a Comodo affiliate RA was compromised on March 15th 2011, resulting in the fraudulent issue of 9 SSL certificates to sites in seven domains.

According to recent scans of than 475 merchant networks, nearly two-thirds of merchant computer systems store unencrypted payment card data. These results come from SecurityMetrics, a provider of PCI Data Security Standard security solutions, and show that these merchants are in violation of the Payment Card Industry Data Security Standard (PCI DSS), leaving them liable to fines and other penalties.

This article is the second in a series describing the hottest commodities found in underground markets. In this column we continue to explore the trending “commodities” in underground markets and how to protect from your data being exchanged in these markets.

Mountain View, CA based Passware, Inc., a provider of password cracking and decryption technology, announced this morning that its software now can harness the power of Amazon Elastic Compute Cloud– a highly scalable cloud computing platform – for accelerated password cracking, without the need to buy expensive hardware.

McAfee announced this morning that it would acquire Sentrigo, a privately held provider of database security solutions.Sentrigo offerings include database security technologies including vulnerability management, database activity monitoring, database audit, and virtual patching.The acquisition would bring together technologies allowing McAfee customers to:

Hacker Posted Video of Himself Compromising a Hospital’s Computer System on YouTubeJesse William McGraw, a former contract security guard at the North Central Medical Plaza in Dallas, who admitted hacking into the hospital’s computer systems, was recently sentenced to 110 months in Federal prison.

NetQin Mobile Inc., a Beijing based provider of mobile security solutions, today announced that a Beta version of NetQin Mobile Anti-virus V4.0 is now available for BlackBerry smartphones.Utilizing a Cloud-based model, NetQin's Mobile Anti-virus V4.0 Beta offers anti-virus security to BlackBerry smartphone users and includes the following features:• Protection against threats: The Anti-virus feature incorporates a cloud-based security scan to help identify and eliminates mobile malware.

Made possible by a sponsorship from Google, the University of Maryland, the alma mater of Google Co-Founder and President Sergey Brin, today announced the creation of a new cybersecurity seminar series that will feature a diverse group of speakers from industry, academia, and government, addressing a broad range of topics related to cybersecurity, including technology, policy, and economics.

It appears that Canada’s Finance, Defense Research and Development departments, as well as the Treasury Board, were hacked in February by what the Canadian government is calling an “unprecedented” and “significant” cyber attack. Although confirmation is pending, the attack seems to be the work of patriot hackers, using computer servers based in China.The Canadian government admitted that if the hackers went all the way they would have accessed the financial information of private citizens.

A former Goldman Sachs programmer responsible for developing programs that power the firm's high-frequency trading systems – a key to millions in profits for the Wall Street giant - was sentenced in Manhattan federal court to 97 months in prison after being found guilty of theft of trade secrets and one count of transportation of stolen property.

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

Cloud Security

Artificial Intelligence

Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.