Featured

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds 2026-10-14 at 20:00 By Kevin Townsend In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes. The post AI Agents Navigate Unfamiliar […]

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds Read More »

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages 2026-10-14 at 16:00 By Eduard Kovacs Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man. The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages Read More »

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.  The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach 2026-10-13 at 19:01 By Eduard Kovacs Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services. The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on […]

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach Read More »

Refrigeration Controller Hack Spoils Food Across European Supermarkets

Refrigeration Controller Hack Spoils Food Across European Supermarkets 2026-10-13 at 11:28 By Ionut Arghire A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost. The post Refrigeration Controller Hack Spoils Food Across European Supermarkets appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Refrigeration Controller Hack Spoils Food Across European Supermarkets Read More »

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe 2026-10-12 at 13:32 By Eduard Kovacs The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference. The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek. This article is an […]

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe Read More »

Critical SonicWall Vulnerability Exploited Days After Disclosure

Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »

Formula Predicts When AI Chatbots Are at Risk of Turning Bad

Formula Predicts When AI Chatbots Are at Risk of Turning Bad 2026-10-09 at 07:12 By Kevin Townsend Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted. The post Formula Predicts When AI Chatbots Are at Risk of Turning Bad appeared first on […]

Formula Predicts When AI Chatbots Are at Risk of Turning Bad Read More »

Security Awareness Training Isn’t Dead, but It Needs a Rethink

Security Awareness Training Isn’t Dead, but It Needs a Rethink 2026-10-08 at 17:30 By Kevin Townsend All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable. The post Security Awareness Training Isn’t Dead, but It Needs a Rethink appeared first on SecurityWeek. This article is an excerpt from […]

Security Awareness Training Isn’t Dead, but It Needs a Rethink Read More »

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »

FortiBleed Attackers Locking Victims Out of Fortinet Devices

FortiBleed Attackers Locking Victims Out of Fortinet Devices 2026-10-08 at 10:52 By Ionut Arghire Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access. The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

FortiBleed Attackers Locking Victims Out of Fortinet Devices Read More »

Android’s October 2026 Updates Patch 25 Vulnerabilities

Android’s October 2026 Updates Patch 25 Vulnerabilities 2026-10-07 at 09:55 By Ionut Arghire The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation. The post Android’s October 2026 Updates Patch 25 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Android’s October 2026 Updates Patch 25 Vulnerabilities Read More »

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 2026-10-06 at 14:01 By Eduard Kovacs Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 Read More »

Social Engineering Detection Moves Into the Live Conversation

Social Engineering Detection Moves Into the Live Conversation 2026-10-06 at 11:38 By Kevin Townsend Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering. The post Social Engineering Detection Moves Into the Live Conversation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Social Engineering Detection Moves Into the Live Conversation Read More »

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 2026-10-05 at 08:14 By Eduard Kovacs Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek. This article is an […]

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Read More »

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action 2026-10-02 at 11:07 By Ionut Arghire CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action Read More »

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader 2026-10-01 at 17:17 By Eduard Kovacs Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims. The post Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

Police Shut Down KillSec Ransomware, Identify Alleged Teen Leader Read More »

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders 2026-10-01 at 10:52 By Eduard Kovacs The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide. The post Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders appeared first on SecurityWeek. This article is […]

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders Read More »

Scroll to Top