Mobile & Wireless
Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Artificial Intelligence
Experimental Sec-Gemini v1 touts a combination of Google’s Gemini LLM capabilities with real-time security data and tooling from Mandiant.
Vulnerabilities
NIST has marked pre-2018 CVEs in NVD as ‘Deferred’ and will no longer spend resources on enriching them.
Mobile & Wireless
A patch has been released for a serious information disclosure vulnerability affecting a Verizon call filtering application.
Cloud Security
Oracle has confirmed suffering a data breach but the tech giant is apparently trying to downplay the impact of the incident.
Vulnerabilities
Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’.
Artificial Intelligence
DeepMind found that current AI frameworks are ad hoc, not systematic, and fail to provide defenders with useful insights.
Email Security
Gmail now allows enterprise users to send end-to-end encrypted emails to colleagues, and will soon allow sending to any inbox.
Artificial Intelligence
Using the Security Copilot tool, Microsoft discovered 20 critical vulnerabilities in widely deployed open-source bootloaders.
Vulnerabilities
Shadowserver has started seeing exploitation attempts aimed at a CrushFTP vulnerability tracked as CVE-2025-2825 and CVE-2025-31161.
Cybercrime
Check Point has responded to a hacker’s claims of sensitive data theft, confirming an incident but saying that it had limited impact.
Data Breaches
Hacker leaks 270,000 customer tickets allegedly stolen from Samsung Germany using long-compromised credentials.
Vulnerabilities
Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day.
ICS/OT
Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA.
Artificial Intelligence
OpenAI has raised its maximum bug bounty payout to $100,000 (up from $20,000) for high-impact flaws in its infrastructure and products.
Cyberwarfare
The vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia.
Hacker Conversations
Frank Trezza is fairly typical of most hackers. Early pranks sometimes leading to something more serious.
Cloud Security
Critical remote code execution vulnerabilities found by Wiz researchers in Ingress NGINX Controller for Kubernetes.
Government
The FCC is investigating whether Chinese firms such as Huawei, ZTE and China Telecom are still operating in the US.
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Data Protection
The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities
