Android’s December 2025 Updates Patch Two Zero-Days 2025-12-02 at 15:15 By Ionut Arghire Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks. The post Android’s December 2025 Updates Patch Two Zero-Days appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]
Android’s December 2025 Updates Patch Two Zero-Days Read More »
Facial Recognition’s Trust Problem 2025-12-01 at 21:01 By Kevin Townsend Two technologies — one for public safety, one for controlled entry — show why trust in facial recognition must be earned, not assumed. The post Facial Recognition’s Trust Problem appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Facial Recognition’s Trust Problem Read More »
CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack 2025-12-01 at 13:14 By Eduard Kovacs CISA has added CVE-2021-26829 to its Known Exploited Vulnerabilities (KEV) catalog. The post CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack Read More »
OpenAI User Data Exposed in Mixpanel Hack 2025-11-27 at 14:42 By Eduard Kovacs Multiple Mixpanel customers were impacted by a recent cyberattack targeting the product analytics company. The post OpenAI User Data Exposed in Mixpanel Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
OpenAI User Data Exposed in Mixpanel Hack Read More »
Dartmouth College Confirms Data Theft in Oracle Hack 2025-11-26 at 10:15 By Eduard Kovacs Dartmouth College has disclosed a data breach after cybercriminals leaked over 226 Gb of files stolen from the university. The post Dartmouth College Confirms Data Theft in Oracle Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
Dartmouth College Confirms Data Theft in Oracle Hack Read More »
Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims 2025-11-24 at 15:40 By Eduard Kovacs More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers. The post Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims appeared first on SecurityWeek. This article is an excerpt
Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims Read More »
SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability 2025-11-21 at 13:20 By Eduard Kovacs SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake. The post SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability appeared first on SecurityWeek. This
SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability Read More »
Recent 7-Zip Vulnerability Exploited in Attacks 2025-11-20 at 13:09 By Ionut Arghire A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists. The post Recent 7-Zip Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Recent 7-Zip Vulnerability Exploited in Attacks Read More »
Palo Alto Networks to Acquire Observability Platform Chronosphere in $3.35 Billion Deal 2025-11-20 at 04:32 By SecurityWeek News The move to acquire Chronosphere is the latest of several acquisitions in recent years and follows a massive $25 billion deal to acquire CyberArk. The post Palo Alto Networks to Acquire Observability Platform Chronosphere in $3.35 Billion
Palo Alto Networks to Acquire Observability Platform Chronosphere in $3.35 Billion Deal Read More »
Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes 2025-11-19 at 20:16 By Eduard Kovacs Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks. The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared first on SecurityWeek. This
Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week 2025-11-19 at 11:49 By Ionut Arghire An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system. The post Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Fortinet Discloses Second Exploited FortiWeb Zero-Day in a Week Read More »
Cloudflare Outage Not Caused by Cyberattack 2025-11-18 at 20:17 By Eduard Kovacs Major online services such as ChatGPT, X, and Shopify were disrupted in a, as well as transit and city services. The post Cloudflare Outage Not Caused by Cyberattack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Cloudflare Outage Not Caused by Cyberattack Read More »
Logitech Confirms Data Breach Following Designation as Oracle Hack Victim 2025-11-17 at 13:10 By Eduard Kovacs Logitech was listed on the Cl0p ransomware leak website in early November, but its disclosure does not mention Oracle. The post Logitech Confirms Data Breach Following Designation as Oracle Hack Victim appeared first on SecurityWeek. This article is an
Logitech Confirms Data Breach Following Designation as Oracle Hack Victim Read More »
Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability 2025-11-14 at 23:49 By Ionut Arghire Security firms say the flaw has been actively exploited for weeks, even as Fortinet quietly shipped fixes and CISA added the bug to its KEV catalog. The post Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability appeared first on SecurityWeek. This
Fortinet Confirms Active Exploitation of Critical FortiWeb Vulnerability Read More »
Google Says Chinese ‘Lighthouse’ Phishing Kit Disrupted Following Lawsuit 2025-11-14 at 10:30 By Eduard Kovacs The cybercriminals informed customers that their cloud server was shut down due to complaints. The post Google Says Chinese ‘Lighthouse’ Phishing Kit Disrupted Following Lawsuit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Google Says Chinese ‘Lighthouse’ Phishing Kit Disrupted Following Lawsuit Read More »
Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon 2025-11-13 at 11:57 By Ionut Arghire Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days. The post Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon appeared first on SecurityWeek. This article is an excerpt from SecurityWeek
Cisco ISE, CitrixBleed 2 Vulnerabilities Exploited as Zero-Days: Amazon Read More »
Virtual Event Today: CISO Forum 2025 Virtual Summit 2025-11-12 at 18:16 By SecurityWeek News From the evolving role of AI to the realities of cloud risk and governance, the CISO Forum Virtual Summit brings together CISOs, researchers, and innovators to share practical insights and strategies. The post Virtual Event Today: CISO Forum 2025 Virtual Summit
Virtual Event Today: CISO Forum 2025 Virtual Summit Read More »
Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit 2025-11-12 at 15:02 By Eduard Kovacs Google is targeting the threat group known as Smishing Triad, which used over 194,000 malicious domains in a campaign. The post Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View
Google Sues Chinese Cybercriminals Behind ‘Lighthouse’ Phishing Kit Read More »
Microsoft Patches Actively Exploited Windows Kernel Zero-Day 2025-11-11 at 23:07 By Eduard Kovacs Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products. The post Microsoft Patches Actively Exploited Windows Kernel Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source
Microsoft Patches Actively Exploited Windows Kernel Zero-Day Read More »
‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics 2025-11-11 at 14:10 By Ionut Arghire Attackers intercepting network traffic can determine the conversation topic with a chatbot despite end-to-end encrypted communication. The post ‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original
‘Whisper Leak’ LLM Side-Channel Attack Infers User Prompt Topics Read More »