Compliance
A new CMMC review and reform task force will conduct a comprehensive review of the program.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Hacker Conversations
Once a notorious blackhat hacker, McGraw shares his journey from high school hacking and prison to redemption as a cybersecurity advocate.
M&A Tracker
Significant cybersecurity M&A deals announced by 1Password, Accenture, Cisco, F5, Rubrik, and SailPoint.
Vulnerabilities
Unauthenticated attackers could obtain the broker's confidential OAuth client secret, allowing them to take control of the broker.
Data Breaches
The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider.
Cyberwarfare
Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne.
Phishing
The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages.
Artificial Intelligence
Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution.
Vulnerabilities
Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access.
Vulnerabilities
The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.
Artificial Intelligence
Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.
Data Breaches
The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact.
Network Security
Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors.
Vulnerabilities
Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies...
Cyberwarfare
Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers to reach high-value targets in Israel.
Vulnerabilities
The 16-year-old Januscape flaw affects Linux's KVM hypervisor, allowing attackers to escape virtual machines and potentially execute code on the underlying host.
Supply Chain Security
The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Cybercrime
NetNut rented access to millions of compromised devices, allowing cybercriminals and nation-state actors to mask their identities during attacks.
Artificial Intelligence
The DuneSlide vulnerabilities enable zero-click prompt injection attacks that escape Cursor's sandbox and execute arbitrary code on the underlying operating system.
Mobile & Wireless
The bugs could be exploited to crash Safari, corrupt memory, leak sensitive data, escape the sandbox, and exfiltrate data.
Artificial Intelligence
Vulnerabilities
Supply Chain Security
Data Breaches
Vulnerabilities
Artificial Intelligence
Artificial Intelligence
