Malware & Threats
More details emerged on the ToolShell zero-day attacks targeting SharePoint servers, but confusion remains over the vulnerabilities.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Vulnerabilities
Microsoft has started releasing updates to fix the exploited SharePoint zero-days tracked as CVE-2025-53770 and CVE-2025-53771.
Vulnerabilities
Hackers are exploiting a zero-day vulnerability in CrushFTP to gain administrative privileges on vulnerable servers via HTTPS.
Threat Intelligence
Enterprises running SharePoint servers should not wait for a fix for CVE-2025-53770 and should commence threat hunting to search for compromise immediately.
Fraud & Identity Theft
With generative AI enabling fraud-as-a-service at scale, legacy defenses are crumbling. The next wave of cybercrime is faster, smarter, and terrifyingly synthetic.
Malware & Threats
Google has filed a lawsuit against the Badbox 2.0 botnet operators, after identifying over 10 million infected Android devices.
Cloud Security
Wiz researchers discovered NVIDIAScape, an Nvidia Container Toolkit flaw that can be exploited for full control of the host machine.
Vulnerabilities
Oracle’s July 2025 Critical Patch Update contains 309 security patches that address approximately 200 unique CVEs.
Cyber Insurance
Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.
Nation-State
Chinese hacking group Salt Typhoon targeted a National Guard unit’s network and tapped into communications with other units.
Data Breaches
DragonForce says it stole more than 150 gigabytes of data from US department store chain Belk in a May cyberattack.
ICS/OT
A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake.
Data Breaches
Louis Vuitton customers in the UK, South Korea, Turkey and possibly other countries are being notified of a data breach.
Artificial Intelligence
The latest release of the xAI LLM, Grok-4, has already fallen to a sophisticated jailbreak.
Mobile & Wireless
Since August 2015, Google has delivered a constant stream of monthly security patches for Android. Until July 2025.
Mobile & Wireless
Details have been disclosed for an eSIM hacking method that could impact many, but the industry is taking action.
IoT Security
PCA Cyber Security has discovered critical vulnerabilities in the BlueSDK Bluetooth stack that could have allowed remote code execution on car systems.
Data Breaches
Nippon Steel Solutions has disclosed a data breach that resulted from the exploitation of a zero-day in network equipment.
Nation-State
Xu Zewei has been arrested on charges that he is a member of the Chinese state-sponsored hacking group Hafnium (Silk Typhoon).
Artificial Intelligence
As organizations rush to adopt agentic AI, security leaders must confront the growing risk of invisible threats and new attack vectors.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
