Artificial Intelligence
The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.
Hi, what are you looking for?
SecurityWeek
All posts tagged "Featured"
ICS/OT
NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Data Breaches
Hackers stole personal, medical, and health insurance information from a company’s data center.
Artificial Intelligence
Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.
Artificial Intelligence
The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.
Vulnerabilities
Tracked as CVE-2026-63077, the critical bug can be exploited without authentication for remote code execution.
Mobile & Wireless
The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.
Cyberwarfare
CrowdStrike co-founder Dmitri Alperovitch discusses how cyber operations support kinetic warfare, signal coming conflicts, and reshape the global battlefield.
Malware & Threats
The malware was designed to steal and exfiltrate secrets, and to propagate itself via stolen NPM and GitHub credentials.
ICS/OT
Georgia has been confirmed as one of the attacked states after Clayton County reported a pump station disruption.
Vulnerabilities
Over 24,000 internet-accessible server-management interfaces disclose authentication hashes before login.
Vulnerabilities
The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.
ICS/OT
The grants will help local governments assess and improve cyber defenses amid a multistate campaign targeting water and wastewater infrastructure.
Data Breaches
The physical security firm says its alarm monitoring and system functionality have not been affected.
ICS/OT
Michigan, South Dakota, and Georgia are reportedly on the list of states whose water systems have been targeted by Iran-linked hackers.
Malware & Threats
Iran has the “geopolitical motivations” and a recent history of targeting water systems, experts pointed out.
Artificial Intelligence
The internet giant has built an agent harness to find vulnerabilities across Chrome’s codebase.
Artificial Intelligence
A security company’s systems were hacked after it installed a malicious Python package deployed by Claude.
ICS/OT
CISA is urging water and wastewater utilities to lock down internet-exposed controllers, days after intrusions hit dozens of Minnesota systems.
Malware & Threats
Israeli company Discover-Tech’s ads allow threat actors to fingerprint and track devices at scale and infect selected targets.
Data Protection
Data Breaches
CISO Conversations
Email Security
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow...
Vulnerabilities
Artificial Intelligence
Vulnerabilities
Vulnerabilities