Hacker Conversations
From dismantling online games as a child to uncovering real-world vulnerabilities, Katie Paxton-Fear explains how autism, curiosity, and a rejection of ambiguity shaped her...
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Cybercrime
Using fake accounts and synthetic data to lure the hackers, the researchers gathered information on their servers.
Data Breaches
The hacking group Crimson Collective has claimed the theft of personal information pertaining to over 1 million Brightspeed customers.
Privacy
WhatsApp device fingerprinting can be useful in the delivery of sophisticated spyware, but impact is very limited without a zero-day.
Ransomware
Ryan Goldberg and Kevin Martin have admitted being affiliates of the BlackCat/Alphv ransomware group.
Application Security
The worm exposed Trust Wallet’s Developer GitHub secrets, allowing attackers to publish a backdoor extension and steal funds from 2,520 wallets.
Data Breaches
The European Space Agency is conducting an investigation and says external science servers have been compromised.
Funding/M&A
The total disclosed value for all the cybersecurity M&A deals announced in 2025 exceeded $84 billion.
Malware & Threats
The ‘download’ button on the official EmEditor website served a malicious installer.
Vulnerabilities
Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers.
Data Breaches
A hacker named Lovely made public 2.3 million records representing Wired subscriber information.
M&A Tracker
Rumors of a possible buyout surfaced earlier this month, with the official announcement coming just weeks after Armis announced raising $435 million.
Data Breaches
The University of Phoenix is one of the many victims of the recent Oracle EBS hacking campaign attributed to the Cl0p ransomware group.
Vulnerabilities
The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution.
Cloud Security
Millions of developers can now use the secure, production-ready images made by Docker.
Nation-State
Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers.
Vulnerabilities
Tracked as CVE-2025-37164, the critical flaw could allow unauthenticated, remote attackers to execute arbitrary code.
Malware & Threats
The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.
Fraud & Identity Theft
A first-person journey from undetected fraud to defending trust—how life events, neurodiversity, and hard-won insight shaped a former fraudster into a fraud fighter.
Data Breaches
LKQ said the personal information of thousands of individuals was compromised as a result of the hacker attack.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
