Data Breaches
Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.
Malware & Threats
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
Data Breaches
Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.
Data Breaches
Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.
Vulnerabilities
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.
Compliance
Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI.
Vulnerabilities
The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server.
Ransomware
The company has yet to determine the full scope, nature, and impact of the incident.
Artificial Intelligence
AI infrastructure introduces new security risks that traditional data center designs were never built to handle.
Endpoint Security
The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.
Artificial Intelligence
An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically.
Endpoint Security
Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products.
Artificial Intelligence
The new program stems from an AI-focused Executive Order signed by President Trump on June 2.
Vulnerabilities
SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution.
Vulnerabilities
Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed.
Cybercrime
The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid.
Artificial Intelligence
A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions.
Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Hacker Conversations
Once a notorious blackhat hacker, McGraw shares his journey from high school hacking and prison to redemption as a cybersecurity advocate.
Vulnerabilities
Threat actors gained root access to the vulnerable systems and deployed a Monero miner.
Supply Chain Security
Data Breaches
Vulnerabilities
Vulnerabilities
Data Breaches
Hackers used compromised credentials to access enterprise and personal tax-related data.
Artificial Intelligence
Artificial Intelligence
Data Breaches
