Application Security
Fake automated commits injected GitHub Actions workflows containing payloads to steal credentials, CI secrets, keys, and tokens.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Network Security
The stealthy vulnerability impacts roughly 88 million domains and can be exploited to bypass DNS filtering and hide command-and-control traffic.
Vulnerabilities
Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites.
Vulnerabilities
CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.
Vulnerabilities
The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition.
Artificial Intelligence
More than 200 vulnerabilities patched in recent Chrome releases are marked as ‘reported by Google’.
Artificial Intelligence
The researcher who found it says the vulnerability could have been chained with a prompt injection to exfiltrate data.
ICS/OT
SecurityWeek spoke with several ICS security experts and companies about their most memorable experiences in the field.
Data Breaches
The TeamPCP hacking group accessed the repositories after a GitHub employee installed a poisoned VS Code extension.
Malware & Threats
Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.
ICS/OT
The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection.
Data Breaches
The hackers claimed to have stolen more than 600,000 Salesforce records, including personal information and corporate data.
Vulnerabilities
The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.
Artificial Intelligence
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.
Email Security
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.
Artificial Intelligence
Two employee devices were compromised in the attack, and credential material was stolen from OpenAI code repositories.
Vulnerabilities
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.
Artificial Intelligence
Independent benchmarking finds Mythos highly effective for source code audits, reverse engineering, and native-code analysis, though its exploit validation and reasoning capabilities remain inconsistent.
Artificial Intelligence
The goal of the guidance, which outlines minimum elements, is to help organizations enhance transparency in AI systems and supply chains.
Data Breaches
The Nitrogen ransomware group claims to have hacked the company’s systems, stealing 8TB of data, including confidential documents.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
