Government
Trump orders a termination of any active security clearances held by Krebs and a suspension of clearances held by individuals at SentinelOne.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
IoT Security
Researchers find vulnerabilities that can be exploited to remotely take control of a Nissan Leaf’s functions, including physical controls.
Data Breaches
Sensata has informed the SEC that shipping, manufacturing and other operations have been impacted by a ransomware attack.
Email Security
The Office of the Comptroller of the Currency (OCC) has disclosed an email security incident in which 100 accounts were compromised for over a...
Malware & Threats
Patch Tuesday: Microsoft ships urgent cover for another WIndows CLFS vulnerability already exploited in the wild.
Mobile & Wireless
Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs.
Artificial Intelligence
Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant.
Vulnerabilities
NIST has marked pre-2018 CVEs in NVD as ‘Deferred’ and will no longer spend resources on enriching them.
Mobile & Wireless
A patch has been released for a serious information disclosure vulnerability affecting a Verizon call filtering application.
Cloud Security
Oracle has confirmed suffering a data breach but the tech giant is apparently trying to downplay the impact of the incident.
Vulnerabilities
Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’.
Artificial Intelligence
DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights.
Email Security
Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox.
Artificial Intelligence
Using the Security Copilot tool, Microsoft discovered 20 critical vulnerabilities in widely deployed open-source bootloaders.
Vulnerabilities
Shadowserver has started seeing exploitation attempts aimed at a CrushFTP vulnerability tracked as CVE-2025-2825 and CVE-2025-31161.
Cybercrime
Check Point has responded to a hacker’s claims of sensitive data theft, confirming an incident but saying that it had limited impact.
Data Breaches
Hacker leaks 270,000 customer tickets allegedly stolen from Samsung Germany using long-compromised credentials.
Vulnerabilities
Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day.
ICS/OT
Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA.
Artificial Intelligence
OpenAI has raised its maximum bug bounty payout to $100,000 (up from $20,000) for high-impact flaws in its infrastructure and products.
Artificial Intelligence
A cybersecurity advisory with technical details and recommendations has been written by the NSA, CISA and other agencies.
Artificial Intelligence
Vulnerabilities
Vulnerabilities
Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.
Vulnerabilities
Application Security
