Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Data Breaches
Hackers stole personal, medical, and health insurance information from a company’s data center.
Artificial Intelligence
Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.
Artificial Intelligence
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
Vulnerabilities
Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.
Mobile & Wireless
The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
Cyberwarfare
CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and reshape the global battlefield.
Malware & Threats
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials.
ICS/OT
Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption.
Vulnerabilities
Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login.
Vulnerabilities
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
ICS/OT
The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater infrastructure.
Data Breaches
The physical security firm says its alarm monitoring and system functionality have not been affected.
ICS/OT
Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.
Malware & Threats
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out.
Artificial Intelligence
The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase.
Artificial Intelligence
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude.
ICS/OT
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
Identity & Access
The deal extends Okta's reach beyond identity management and into the realm of security operations, positioning the company to compete more directly on identity...
Vulnerabilities
The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
