News · SecurityWeek

• 
  SecurityWeek 3 h ago

  Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

  Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks. The post Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison appeared first on SecurityWeek.
• 
  SecurityWeek 4 h ago

  Upwind Security Raises $400 Million at $3.8 Billion Valuation

  The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog The post Upwind Security Raises $400 Million at $3.8 Billion Valuation appeared first on SecurityWeek.
• 
  SecurityWeek 4 h ago

  Chrome and Firefox Updates Patch Over 200 Vulnerabilities

  The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches. The post Chrome and Firefox Updates Patch Over 200 Vulnerabilities appeared first on SecurityWeek.
• 
  SecurityWeek 5 h ago

  TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

  FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers. The post TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices appeared first on SecurityWeek.
• 
  SecurityWeek 6 h ago

  China-Linked Hackers Exploit PHP2Shell to Root Firewalls

  The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization. The post China-Linked Hackers Exploit PHP2Shell to Root Firewalls appeared first on SecurityWeek.
• 
  SecurityWeek 7 h ago

  Long-Hidden Flaws Patched in EPICS Research Facility Control Software

  Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs. The post Long-Hidden Flaws Patched in EPICS Research Facility Control Software appeared first on SecurityWeek.
• 
  SecurityWeek 7 h ago

  Nobody Trusts the Security Questionnaire. We Rely on It Anyway.

  The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies. The post Nobody Trusts the Security Questionnaire. We Rely on It Anyway. appeared first on SecurityWeek.
• 
  SecurityWeek 8 h ago

  Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

  The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems. The post Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise appeared first on SecurityWeek.
• 
  SecurityWeek 9 h ago

  Hackers Start Probing Fresh Oracle EBS Vulnerability

  CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution. The post Hackers Start Probing Fresh Oracle EBS Vulnerability appeared first on SecurityWeek.

  CVE-2026-101767
• 
  SecurityWeek 9 h ago

  CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

  CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit. The post CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

  Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released. The post Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

  A leaked SquareML access key could have been used to access a database containing personal and health information. The post Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  HPE Patches Dozens of Critical Flaws in Networking Products

  Eight max-severity security defects could lead to remote code execution and authentication bypass. The post HPE Patches Dozens of Critical Flaws in Networking Products appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Unexplained DreamHost Incident Prompts Email, FTP Password Resets

  The company says it reacted to an issue affecting some of its systems, including DreamHost webmail. The post Unexplained DreamHost Incident Prompts Email, FTP Password Resets appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

  Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones. The post iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI

  Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses. The post Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  This is Fine: What NetScaler Zero-Days Tell Us About the New Normal

  Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon. The post This is Fine: What NetScaler Zero-Days Tell Us About the New Normal appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

  Running at system boot, it periodically polled the update domain to execute any code served, with full privileges. The post Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

  Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products. The post Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems appeared first on SecurityWeek.
• 
  SecurityWeek Tue 27 Oct

  Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics

  The University of New Mexico Health System told people not to show up at its main hospital in Albuquerque and canceled appointments at more than 30 clinics. The post Cybersecurity Issue Forces a Major New Mexico Hospital to Divert Patients and Close Clinics appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI

  A string of hacking incidents by rogue AI agents also has raised fears the technology will slip free of human control to carry out harmful, life-threatening tasks. The post Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Industrial Vendors Check Products for PHP2Shell Vulnerabilities

  Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities. The post Industrial Vendors Check Products for PHP2Shell Vulnerabilities appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Genesys Hack Exposes Customer Data From Internal Systems

  The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected. The post Genesys Hack Exposes Customer Data From Internal Systems appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Stolen AI Reasoning Could Help China Build Cheaper Rivals

  Xint says a flaw in OpenAI’s compaction process let researchers move reasoning traces between models, potentially making it cheaper to distill a rival AI. The post Stolen AI Reasoning Could Help China Build Cheaper Rivals appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  PHP2Shell Exploitation Moves From Probes to Working Shells

  Attackers successfully exploited the PHP2Shell flaws against honeypots, launching 35 shells from two IP addresses on October 24. The post PHP2Shell Exploitation Moves From Probes to Working Shells appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  953 Online Stores Infected in Long-Lasting Malware Campaign

  Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection. The post 953 Online Stores Infected in Long-Lasting Malware Campaign appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts

  The individuals called victims and persuaded them to install an app and scan their credit cards to loot their bank accounts. The post Dutch Police Arrest Two Over NFC Relay Attacks That Drained $400,000+ From Bank Accounts appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages

  An out-of-bounds write in Google’s Brotli decoder affects Node.js, .NET, PowerShell, and Python packages, and can lead to code execution. The post Node2Shell: Brotli Flaw Triggers Patching Across Microsoft, Node.js, Python Packages appeared first on SecurityWeek.
• 
  SecurityWeek Mon 26 Oct

  Mythos 5 Ignored Real-World Harm in July Attack

  The model engaged in severe overreach and dishonesty, creating fake identities and submitting malicious code on GitHub. The post Mythos 5 Ignored Real-World Harm in July Attack appeared first on SecurityWeek.
• 
  SecurityWeek Sun 25 Oct

  Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave

  Founded in 2025 by Unit 8200 alumni, Tel Aviv-based Mave uses AI agents to investigate alerts across existing security stacks. The post Former Unit 8200 Officers Raise $34 Million for Agentic SecOps Startup Mave appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware

  Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe. The post In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

  Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet. The post Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

  The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments. The post China APT Uses AI Pentest Tool Artex in ConnectWise Attacks appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  Attackers Exploit Third Arista VCO Zero-Day in Four Months

  The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges. The post Attackers Exploit Third Arista VCO Zero-Day in Four Months appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  11 Million Impacted by Capcom Data Breach

  The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts. The post 11 Million Impacted by Capcom Data Breach appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’

  In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders. The post Quest Diagnostics Data Breach Exposed ‘Certain Patient Records’ appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  LiteLLM Compromised in Fresh Supply Chain Attack

  Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker. The post LiteLLM Compromised in Fresh Supply Chain Attack appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  Atlassian Patches 75 Flaws in Data Center and Server Products

  Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components. The post Atlassian Patches 75 Flaws in Data Center and Server Products appeared first on SecurityWeek.
• 
  SecurityWeek Fri 23 Oct

  Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016

  After a three-month lull, Prince of Persia hid a Tornado C&C server on US shared hosting, its first US-based server since 2016. The post Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Hacker Conversations: Corey Thuen and the Evil Bit

  Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t. The post Hacker Conversations: Corey Thuen and the Evil Bit appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

  The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East. The post Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Signal Vulnerability Lets Malicious Callers Block Hang-Ups

  Affecting the open source calling library RingRTC, the bug prevented calls from ending properly. The post Signal Vulnerability Lets Malicious Callers Block Hang-Ups appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Tech and Security Companies Respond to PHP2Shell Vulnerabilities

  Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching. The post Tech and Security Companies Respond to PHP2Shell Vulnerabilities appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Splunk, SolarWinds Release Fresh Security Updates

  Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information. The post Splunk, SolarWinds Release Fresh Security Updates appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Cisco Patches 34 Vulnerabilities Across Multiple Products

  Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks. The post Cisco Patches 34 Vulnerabilities Across Multiple Products appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  PHP2Shell Exploitation Started Days Before Patches

  Initial attempts were observed on October 17, and mass activity began shortly after patches were released. The post PHP2Shell Exploitation Started Days Before Patches appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

  Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches. The post Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU appeared first on SecurityWeek.
• 
  SecurityWeek Thu 22 Oct

  Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

  The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019. The post Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook appeared first on SecurityWeek.
• 
  SecurityWeek 21 Oct

  Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

  Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis. The post Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections appeared first on SecurityWeek.
• 
  SecurityWeek 21 Oct

  PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

  Several cybersecurity companies saw exploitation attempts of CVE-2026-109618 and CVE-2026-109619 before PHP released the patches. The post PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors appeared first on SecurityWeek.

  CVE-2026-109618, CVE-2026-109619

Older