Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
The vulnerability tracked as CVE-2026-58231 can be exploited to execute arbitrary code and compromise internal components.
Supply Chain Security
Over 95% of the affected companies were exposed before the malicious LiteLLM packages were published.
Data Breaches
The hackers published the allegedly stolen information, including names, addresses, email addresses, and phone numbers.
Vulnerabilities
The security defect is described as an SQL injection that could allow attackers to achieve remote code execution.
Vulnerabilities
The first exploitation attempts targeting CVE-2026-71362 were observed shortly after Adobe released patches.
Government
Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.
Malware & Threats
Researchers observed the novel campaign exploiting unauthenticated guest access to quietly enumerate and exfiltrate exposed data from both platforms.
Cybercrime
Affecting European contract logistics operations at eight Ceva warehouses, the incident caused shipment delays for multiple customers.
Supply Chain Security
LiteLLM was compromised through the Trivy hack and abused to distribute information-stealing malware to its users.
Vulnerabilities
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
Vulnerabilities
A use-after-free in the afd.sys Windows kernel-mode driver has been exploited to gain SYSTEM privileges.
Vulnerabilities
Impacting Zoom annotation, the bug could be exploited by a meeting participant to execute code on another participant’s machine.
Artificial Intelligence
OpenAI has also announced the expansion of its Daybreak platform to give more organizations access to its AI.
Application Security
The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.
Artificial Intelligence
The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold.
ICS/OT
CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.
Vulnerabilities
The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.
Artificial Intelligence
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
ICS/OT
NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
