Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices.
The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers.
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard.
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents.
RegisterJoin as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
Register
SecurityWeek’s AI Risk Summit is the leading conference where technology, security, and risk leaders converge with AI researchers, developers, and policy makers shaping the future of enterprise AI.
[August 11-12, 2026 | In-Person]
SecurityWeek’s CodeSecCon 2026 will bring together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
[August 19, 2026 | Virtual]
SecurityWeek’s 2026 Attack Surface Management Summit will evaluate how organizations can protect corporate assets and reduce their attack surface in a modern security program.
[September 16, 2026 | Virtual]
SecurityWeek’s ICS Cybersecurity Conference celebrates its 25th anniversary in Nashville. Join the largest and longest-running event series focused on industrial cybersecurity.
[October 6-8, 2026 | In-Person]
-
CVE-2026-61979 and CVE-2026-15981 are authentication bypass vulnerabilities affecting the MiniOrange SAML 2.0 SSO plugin. (August 25, 2026)
-
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk. (August 25, 2026)
-
The vulnerability is tracked as CVE-2026-21962 and it has been widely exploited by threat actors against WebLogic servers. (August 25, 2026)
-
More than 200 vulnerabilities have been patched to date this year, compared to only 16 in 2025 and 22 in 2024. (August 24, 2026)
-
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. (August 24, 2026)
-
Juan Manuel Gouveia-Aguilera has been sentenced to 8 years in prison for his role in an ATM jackpotting scheme that caused millions in losses. (August 24, 2026)
-
We all know they’re watching us. But we don’t know who they are, nor why nor how they are doing it. (August 20, 2026)
-
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers. (August 12, 2026)
