Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Latest Cybersecurity News

The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.

The cybersecurity startup will use the fresh investment to scale its product, engineering, sales, and marketing teams.

Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.

Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.

Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers.

Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.

The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.

The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.

CISA has also published several advisories describing vulnerabilities in ICS and other OT products.

The security defects could allow unauthenticated attackers to execute arbitrary code remotely and read sensitive data.

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.

supply chain threat supply chain threat

LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.

Cisco vulnerability exploited Cisco vulnerability exploited

CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.

Microsoft Patch Tuesday Microsoft Patch Tuesday

A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.

Top Cybersecurity Headlines

Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.

OpenAI has also announced the expansion of its Daybreak platform to give more organizations access to its AI.

The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

SecurityWeek Industry Experts

More Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.

Register

CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!

Register

Upcoming Cybersecurity Events

AI Risk Summit: Aug 11-12, 2026 (In-Person)

SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]

Learn More
CodeSecCon 2026

SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]

Read More
Attack Surface Management Summit 2026

SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]

Read More
ICS Cybersecurity Conference 2026

SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]

Learn More

Vulnerabilities

Cybercrime

Suppose a friend wants you to meet her cousin Bill at a black tie affair. You don’t have a photo of Bill to help you find him among the five hundred or so people in attendance—you only have your cousin’s description of Bill.

Sunbelt Software today announced the availability of Sunbelt CWSandbox 3.0, an upgraded version of their automated dynamic malware analysis tool. CWSandbox leverages unique behavior analysis technology for the identification of malicious threats like PDF exploits, fake media players and other socially engineered attacks against enterprise or government networks.

PhoneGuard, a provider of mobile security services, today announced availability of its anti-virus software for Android smartphones. Partnering with China based NetQin Technology, PhoneGuard provides a defense against threats including viruses, spyware and malware that target mobile devices.

Anti-virus products scan for malware in two ways. They look for sequences of bits that are found in programs that are known to be “evil” (but which are not commonly found in “good” programs). And they run programs in sandboxes and look for known malicious actions. The first approach only catches known malware instances, while the second can also catch variants of these. Still, many malware agents slip through the cracks undetected...

Event image poster

The leading global conference series for Operations, Control Systems and IT/OT Security professionals to connect on SCADA, DCS PLC and field controller cybersecurity.

Learn More

Application Security

Application Security

The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

Cloud Security

Artificial Intelligence

Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries...

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.