Featured

Notepad++ Supply Chain Hack Conducted by China via Hosting Provider

Featured, Notepad++, supply chain attack, Supply Chain Security /

Notepad++ Supply Chain Hack Conducted by China via Hosting Provider 2026-02-02 at 11:20 By Eduard Kovacs The likely state-sponsored threat actor had access to the hosting provider for months and targeted only certain Notepad++ customers. The post Notepad++ Supply Chain Hack Conducted by China via Hosting Provider appeared first on SecurityWeek. This article is an […]

Notepad++ Supply Chain Hack Conducted by China via Hosting Provider Read More »

eScan Antivirus Delivers Malware in Supply Chain Attack

antivirus, eScan, Featured, Malware, Malware & Threats, supply chain, supply chain attack, Supply Chain Security /

eScan Antivirus Delivers Malware in Supply Chain Attack 2026-01-31 at 17:24 By Ionut Arghire Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers. The post eScan Antivirus Delivers Malware in Supply Chain Attack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

eScan Antivirus Delivers Malware in Supply Chain Attack Read More »

2024 VMware Flaw Now in Attackers’ Crosshairs

exploited, Featured, VMWare, Vulnerabilities, vulnerability /

2024 VMware Flaw Now in Attackers’ Crosshairs 2026-01-26 at 07:36 By Ionut Arghire The critical-severity vulnerability can be exploited via crafted network packets for remote code execution. The post 2024 VMware Flaw Now in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

2024 VMware Flaw Now in Attackers’ Crosshairs Read More »

Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026

Featured, Pwn2Own, Vulnerabilities, vulnerability /

Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026 2026-01-23 at 13:33 By Eduard Kovacs Pwn2Own participants disclosed a total of 76 vulnerabilities during the three-day event.  The post Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026 appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Infotainment, EV Charger Exploits Earn Hackers $1M at Pwn2Own Automotive 2026 Read More »

Old Attack, New Speed: Researchers Optimize Page Cache Exploits

Endpoint Security, Featured, Linux, page cache /

Old Attack, New Speed: Researchers Optimize Page Cache Exploits 2026-01-22 at 17:22 By Eduard Kovacs A team of researchers from the Graz University of Technology in Austria has revived page Linux page cache attacks. The post Old Attack, New Speed: Researchers Optimize Page Cache Exploits appeared first on SecurityWeek. This article is an excerpt from […]

Old Attack, New Speed: Researchers Optimize Page Cache Exploits Read More »

Hackers Targeting Cisco Unified CM Zero-Day 

Cisco, Featured, Vulnerabilities, vulnerability, Zero-Day /

Hackers Targeting Cisco Unified CM Zero-Day  2026-01-22 at 11:07 By Eduard Kovacs Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution. The post Hackers Targeting Cisco Unified CM Zero-Day  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Hackers Targeting Cisco Unified CM Zero-Day  Read More »

Oracle’s First 2026 CPU Delivers 337 New Security Patches

Featured, Oracle, Oracle CPU, Vulnerabilities, vulnerability /

Oracle’s First 2026 CPU Delivers 337 New Security Patches 2026-01-21 at 12:53 By Ionut Arghire Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products. The post Oracle’s First 2026 CPU Delivers 337 New Security Patches appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Oracle’s First 2026 CPU Delivers 337 New Security Patches Read More »

Weaponized Invite Enabled Calendar Data Theft via Google Gemini

AI, Artificial Intelligence, calendar, Featured, Gemini /

Weaponized Invite Enabled Calendar Data Theft via Google Gemini 2026-01-20 at 13:17 By Ionut Arghire A simple payload allowed attackers to create a new event leaking summaries of the victim’s private meetings. The post Weaponized Invite Enabled Calendar Data Theft via Google Gemini appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Weaponized Invite Enabled Calendar Data Theft via Google Gemini Read More »

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout

blackout, cyberattack, disruption, Featured, Government, ICS, ICS/OT, Nation-State, power grid, power outage, Venezuela /

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout 2026-01-19 at 14:49 By Eduard Kovacs US officials told The New York Times that cyberattacks were used to turn off the lights in Caracas and disrupt air defense radars. The post New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout appeared first on SecurityWeek. This article […]

New Reports Reinforce Cyberattack’s Role in Maduro Capture Blackout Read More »

Cybersecurity Firms React to China’s Reported Software Ban

Ban, China, Featured, Government, Risk Management, security products /

Cybersecurity Firms React to China’s Reported Software Ban 2026-01-16 at 13:57 By Eduard Kovacs China has more than 5,000 cybersecurity companies and all the top 20 firms are working with the government.  The post Cybersecurity Firms React to China’s Reported Software Ban appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Cybersecurity Firms React to China’s Reported Software Ban Read More »

New StackWarp Attack Threatens Confidential VMs on AMD Processors

Amd, AMD-SEV, CPU, CPU vulnerability, Endpoint Security, Featured, StackWarp, Vulnerabilities, vulnerability /

New StackWarp Attack Threatens Confidential VMs on AMD Processors 2026-01-15 at 20:27 By Eduard Kovacs Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs. The post New StackWarp Attack Threatens Confidential VMs on AMD Processors appeared first on SecurityWeek. This article is an excerpt from […]

New StackWarp Attack Threatens Confidential VMs on AMD Processors Read More »

Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits

Featured, intellexa, Malware & Threats, Pegasus, Predator, spyware, threat detection /

Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits 2026-01-14 at 16:03 By Kevin Townsend The Predator spyware is more sophisticated and dangerous than previously realized. The post Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits Read More »

CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million

Acquisition, CrowdStrike, Featured, Funding/M&A, M&A Tracker /

CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million 2026-01-13 at 23:15 By Mike Lennon News of the move to acquire Seraphic comes less than a week after CrowdStrike announced an agreement to acquire identity security startup SGNL for $740 million. The post CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million appeared […]

CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million Read More »

Cyber Insights 2026: External Attack Surface Management

attack surface management, CyberInsights2025, CyberInsights2026, Featured, Network Security /

Cyber Insights 2026: External Attack Surface Management 2026-01-13 at 20:08 By Kevin Townsend AI will assist companies in finding their external attack surface, but it will also assist bad actors in locating and attacking the weak points. The post Cyber Insights 2026: External Attack Surface Management appeared first on SecurityWeek. This article is an excerpt […]

Cyber Insights 2026: External Attack Surface Management Read More »

Cyber Fraud Overtakes Ransomware as Top CEO Concern: WEF 

AI, CISO, Featured, Management & Strategy, report, WEF /

Cyber Fraud Overtakes Ransomware as Top CEO Concern: WEF  2026-01-13 at 11:04 By Eduard Kovacs Ransomware remains the biggest concern for CISOs in 2026, according to WEF’s Global Cybersecurity Outlook 2026 report. The post Cyber Fraud Overtakes Ransomware as Top CEO Concern: WEF  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Cyber Fraud Overtakes Ransomware as Top CEO Concern: WEF  Read More »

Cyber Insights 2026: What CISOs Can Expect in 2026 and Beyond

CISO, CISO Strategy, CyberInsights2025, CyberInsights2026, Featured, Management & Strategy /

Cyber Insights 2026: What CISOs Can Expect in 2026 and Beyond 2026-01-12 at 17:29 By Kevin Townsend Here we examine the CISO Outlook for 2026, with the purpose of evaluating what is happening now and preparing leaders for what lies ahead in 2026 and beyond. The post Cyber Insights 2026: What CISOs Can Expect in […]

Cyber Insights 2026: What CISOs Can Expect in 2026 and Beyond Read More »

CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over

CISA, CISA KEV, Featured, Vulnerabilities, vulnerability /

CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over 2026-01-09 at 15:44 By Ionut Arghire The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog. The post CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over appeared first on SecurityWeek. This article is an excerpt from […]

CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over Read More »

CrowdStrike to Buy Identity Security Firm SGNL for $740 Million in Cash

Acquisition, CrowdStrike, Feature, Featured, Funding/M&A, SGNL /

CrowdStrike to Buy Identity Security Firm SGNL for $740 Million in Cash 2026-01-08 at 17:56 By Mike Lennon The deal aims to bolster CrowdStrike’s Falcon platform with “continuous identity” protection to secure human and AI-driven access in real-time. The post CrowdStrike to Buy Identity Security Firm SGNL for $740 Million in Cash appeared first on […]

CrowdStrike to Buy Identity Security Firm SGNL for $740 Million in Cash Read More »

Scroll to Top