Vulnerabilities
Initially disclosed as a high-severity denial-of-service (DoS), the bug was reclassified as a critical RCE issue.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Cybercrime
The group that it was making available for download emails and other documents from Patel’s account.
Management & Strategy
A summary of the announcements made by vendors on the third and fourth days of the RSAC 2026 Conference.
Incident Response
Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.
Nation-State
The state-sponsored threat actor deployed kernel implants and passive backdoors enabling long-term, high-level espionage.
Disaster Recovery
The computer giants have announced new security capabilities for PCs and printers.
Artificial Intelligence
PwC finds AI is amplifying speed and scale of attacks, as identity theft evolves into a cybercriminal supply chain.
Endpoint Security
Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5.
Application Security
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.
Government
CESER’s Project Armor is a five year initiative to harden the US critical energy infrastructure, including strengthening energy systems ‘to prevent and recover from...
Management & Strategy
A summary of the announcements made by vendors on the first day of the RSAC 2026 Conference.
Vulnerabilities
An out-of-bounds read vulnerability can be exploited remotely without authentication to read sensitive information from memory.
Malware & Threats
The FBI has published an alert describing the malware used by Iranian government hackers.
Management & Strategy
A summary of the announcements made by vendors in the days leading up to the RSAC 2026 Conference.
Cybercrime
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.
Phishing
Attack volumes are back to pre-disruption levels, and the adversary tactics have remained unchanged.
Vulnerabilities
CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild.
Vulnerabilities
The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.
Data Breaches
Between late December 2025 and mid-January 2026, hackers stole personal and health plan information from Navia’s environment.
Artificial Intelligence
Because attacker-supplied flow data is used in public flows, the bug leads to unauthenticated remote code execution.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
