Cybercrime
Thalha Jubair and Owen Flowers were charged in the UK and the US with hacking critical infrastructure organizations.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Artificial Intelligence
OpenAI has fixed this zero-click attack method called ShadowLeak by researchers.
Vulnerabilities
An exploited type confusion in the V8 JavaScript engine tracked as CVE-2025-10585 was found by Google Threat Analysis Group this week.
Data Breaches
Venture capital firm Insight Partners says the data breach disclosed in February 2025 impacts over 12,000 people.
Application Security
The packages were injected with malicious code to harvest secrets, dump them to a public repository, and make private repositories public.
Cybercrime
The notorious cybercrime groups claim they are going dark, but experts believe they will continue their activities.
Artificial Intelligence
Researchers show how a crafted calendar invite can trigger ChatGPT to exfiltrate sensitive emails.
Vulnerabilities
Apple has announced major mobile and desktop platform releases and addressed an exploited bug in older platforms.
Network Security
Fifteen years after its debut, Zero Trust remains the gold standard in cybersecurity theory — but its uneven implementation leaves organizations both stronger and...
Mobile & Wireless
Reported by Meta and WhatsApp, the vulnerability leads to remote code execution and was likely exploited by a spyware vendor.
Vulnerabilities
KioSoft was notified about a serious NFC card vulnerability in 2023 and only recently claimed to have released a patch.
Artificial Intelligence
Researchers exploited K2 Think’s built-in explainability to dismantle its safety guardrails, raising new questions about whether transparency and security in AI can truly coexist.
IoT Security
Oligo Security has shared details on an Apple CarPlay attack that hackers may be able to launch without any interaction.
Data Breaches
After announcing that the cyberattack-caused disruption to factories would continue, Jaguar Land Rover is now confirming a data breach.
Mobile & Wireless
Apple’s new Memory Integrity Enforcement (MIE) brings always-on memory-safety protection covering key attack surfaces — including the kernel and over 70 userland processes.
Application Security
Designed to intercept cryptocurrency transactions, the malicious code reached 10% of cloud environments.
Vulnerabilities
Microsoft has released patches for dozens of flaws in Windows and other products, including ones with ‘exploitation more likely’ rating.
Funding/M&A
The industrial cybersecurity firm will become a wholly owned subsidiary of Mitsubishi Electric.
Nation-State
China’s APT41 sent out malicious emails on behalf of Rep. John Moolenaar to collect information ahead of US-China trade talks.
Data Breaches
The list of impacted cybersecurity firms has been expanded to include BeyondTrust, Bugcrowd, CyberArk, Cato Networks, JFrog, and Rubrik.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
CVE-2026-19478 can be exploited without authentication to modify or delete public projects and user data.
Application Security
Cybersecurity Funding
