Vulnerabilities
The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
Artificial Intelligence
The Daybreak initiative will provide subsidized AI cyber capabilities, training and technical assistance, though OpenAI has disclosed few details about costs and eligibility.
Vulnerabilities
Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor.
Cybercrime
Cybercriminals are offering digital scans of US and Canadian driver’s licenses, likely stolen from IDScan.net.
Artificial Intelligence
The designation applies when a model can independently find and exploit zero-day vulnerabilities across many well-defended systems.
Malware & Threats
The shutdown operation involved peer list manipulation and Sality payload URL takedown.
Vulnerabilities
The vulnerabilities CVE-2026-83549 and CVE-2026-83548 can be chained for unauthenticated remote code execution.
Artificial Intelligence
Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models.
Vulnerabilities
Exploitation of the authentication bypass vulnerability CVE-2026-82329 started just days after its public disclosure.
Vulnerabilities
CISA has added the vulnerabilities tracked as CVE-2026-82078 and CVE-2026-81578 to its KEV catalog.
Data Breaches
The ShinyHunters extortion group has claimed the theft of 284 million records from the company’s systems.
Data Breaches
The Rhysida ransomware group has claimed the exfiltration of over 5TB of data, including personal information and credentials.
Vulnerabilities
PaperCut has released a second emergency patch for the exploited vulnerabilities, which are now tracked as CVE-2026-82078 and CVE-2026-81578.
Data Breaches
A cyberattack caused disruptions at the toy and game giant earlier this year and the company is now disclosing a data breach.
Artificial Intelligence
CISA has added the exploited flaw, CVE-2026-53362, to its KEV catalog, alongside a JFrog vulnerability exploited by OpenAI agents.
Artificial Intelligence
Nearly 130 tech and cybersecurity companies back a collective call to boost cyber defenses as AI-enabled attacks grow more sophisticated.
Artificial Intelligence
New research shows that country-of-origin labels can obscure an AI model’s upstream dependencies, inherited behaviors and potential security risks.
Vulnerabilities
A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.
Artificial Intelligence
New training environments will teach AI models to distrust instructions arriving from other agents outside sanctioned channels.
Nation-State
The operation focused on a group named QTFY, which offers hacking services to the Chinese government and others.
Malware & Threats
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
Data Protection
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities