SecurityWeek

Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack.

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.

Successful exploitation of some of these issues could lead to remote code execution and full device takeover.

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.