Featured

More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breach

Data Breaches, Featured, Salesforce, Salesloft, security company hacked /

More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breach 2025-09-05 at 11:51 By Ionut Arghire Proofpoint, SpyCloud, Tanium, and Tenable confirmed that hackers accessed information stored in their Salesforce instances. The post More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breach appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

More Cybersecurity Firms Hit by Salesforce-Salesloft Drift Breach Read More »

Recent SAP S/4HANA Vulnerability Exploited in Attacks

exploited, Featured, SAP, Vulnerabilities /

Recent SAP S/4HANA Vulnerability Exploited in Attacks 2025-09-05 at 11:09 By Eduard Kovacs A critical SAP S/4HANA code injection flaw tracked as CVE-2025-42957 and allowing full system takeover has been exploited in the wild. The post Recent SAP S/4HANA Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Recent SAP S/4HANA Vulnerability Exploited in Attacks Read More »

Apple Seeks Researchers for 2026 iPhone Security Program

apple, Apple Security Research Device, Featured, iPhone, Mobile & Wireless, SRDP /

Apple Seeks Researchers for 2026 iPhone Security Program 2025-09-04 at 18:23 By Eduard Kovacs Security researchers interested in participating in the 2026 Apple Security Research Device program can apply until October 31. The post Apple Seeks Researchers for 2026 iPhone Security Program appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

Apple Seeks Researchers for 2026 iPhone Security Program Read More »

Two Exploited Vulnerabilities Patched in Android

Android, exploited, Featured, Mobile & Wireless, patch, Zero-Day /

Two Exploited Vulnerabilities Patched in Android 2025-09-04 at 11:40 By Ionut Arghire Elevation of privilege flaws in Android Runtime (CVE-2025-48543) and Linux kernel (CVE-2025-38352) have been exploited in targeted attacks. The post Two Exploited Vulnerabilities Patched in Android appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Two Exploited Vulnerabilities Patched in Android Read More »

US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack

CVE-2020-24363, Featured, Network Security, Vulnerabilities /

US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack 2025-09-03 at 22:15 By Ionut Arghire Flaw allows attackers to reset and hijack TP-Link TL-WA855RE devices; CISA urges users to retire discontinued extenders. The post US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack appeared first on SecurityWeek. This article is an

US Cybersecurity Agency Flags Wi-Fi Range Extender Vulnerability Under Active Attack Read More »

WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users

CVE-2025-55177, Featured, Vulnerabilities, WhatsApp, Zero-Day /

WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users 2025-09-02 at 14:48 By Ionut Arghire The vulnerability (CVE-2025-55177) was exploited along an iOS/macOS zero-day in suspected spyware attacks. The post WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users Read More »

Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks

Cloud, cloud security, Featured, Ransomware, Storm-0501 /

Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks 2025-08-29 at 16:25 By Ionut Arghire Storm-0501 has been leveraging cloud-native capabilities for data exfiltration and deletion, without deploying file-encrypting malware. The post Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks appeared first on SecurityWeek. This article

Ransomware Group Exploits Hybrid Cloud Gaps, Gains Full Azure Control in Enterprise Attacks Read More »

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years

China, Cyberwarfare, Featured, Salt Typhoon, Threat Intelligence /

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years 2025-08-28 at 17:21 By Ionut Arghire China-linked APT ‘Salt Typhoon’ exploited known router flaws to maintain persistent access across telecom, government, and military networks, giving Beijing’s intelligence services global surveillance reach. The post China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years appeared first on SecurityWeek.

China’s Salt Typhoon Hacked Critical Infrastructure Globally for Years Read More »

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack

Development, Featured, supply chain, Supply Chain Security, Vulnerabilities /

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack 2025-08-28 at 13:55 By Ionut Arghire With more than 4 million weekly downloads, the Nx build platform became the first known supply chain breach where hackers weaponized AI assistants for data theft. The post Hackers Target Popular Nx Build System in First AI-Weaponized

Hackers Target Popular Nx Build System in First AI-Weaponized Supply Chain Attack Read More »

PromptLock: First AI-Powered Ransomware Emerges

AI, Artificial Intelligence, Featured, Malware, Malware & Threats /

PromptLock: First AI-Powered Ransomware Emerges 2025-08-27 at 14:51 By Ionut Arghire Proof-of-concept ransomware uses AI models to generate attack scripts in real time. The post PromptLock: First AI-Powered Ransomware Emerges appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

PromptLock: First AI-Powered Ransomware Emerges Read More »

OneFlip: An Emerging Threat to AI that Could Make Vehicles Crash and Facial Recognition Fail

Artificial Intelligence, Featured, OneFlip /

OneFlip: An Emerging Threat to AI that Could Make Vehicles Crash and Facial Recognition Fail 2025-08-25 at 20:17 By Kevin Townsend Researchers unveil OneFlip, a Rowhammer-based attack that flips a single bit in neural network weights to stealthily backdoor AI systems without degrading performance. The post OneFlip: An Emerging Threat to AI that Could Make

OneFlip: An Emerging Threat to AI that Could Make Vehicles Crash and Facial Recognition Fail Read More »

Farmers Insurance Data Breach Impacts Over 1 Million People

data breach, Data Breaches, Farmers Insurance, Featured, Insurance /

Farmers Insurance Data Breach Impacts Over 1 Million People 2025-08-25 at 09:35 By Eduard Kovacs Farmers New World Life Insurance and Farmers Group have filed separate data breach notifications with state authorities.  The post Farmers Insurance Data Breach Impacts Over 1 Million People appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Farmers Insurance Data Breach Impacts Over 1 Million People Read More »

Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects

cybercrime, Featured, Interpol, Tracking & Law Enforcement /

Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects 2025-08-22 at 19:04 By Associated Press Dubbed Operation Serengeti 2.0, the operation took place between June and August. The post Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects appeared first on SecurityWeek. This article is

Large Interpol Cybercrime Crackdown in Africa Leads to the Arrest of Over 1,200 Suspects Read More »

GPT-5 Has a Vulnerability: Its Router Can Send You to Older, Less Safe Models

Artificial Intelligence, ChatGPT, Featured, jailbreak /

GPT-5 Has a Vulnerability: Its Router Can Send You to Older, Less Safe Models 2025-08-20 at 17:52 By Kevin Townsend Instead of GPT-5 Pro, your query could be quietly redirected to an older, weaker model, opening the door to jailbreaks, hallucinations, and unsafe outputs. The post GPT-5 Has a Vulnerability: Its Router Can Send You

GPT-5 Has a Vulnerability: Its Router Can Send You to Older, Less Safe Models Read More »

Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield

Featured, Government, ICS/OT, space /

Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield 2025-08-19 at 08:35 By Associated Press From hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security. The post Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space

Hijacked Satellites and Orbiting Space Weapons: In the 21st Century, Space Is the New Battlefield Read More »

US Seizes $2.8 Million From Zeppelin Ransomware Operator

charged, Cryptocurrency, cybercrime, Featured, Ransomware, seized, Zeppelin /

US Seizes $2.8 Million From Zeppelin Ransomware Operator 2025-08-18 at 14:06 By Ionut Arghire The US has indicted Zeppelin ransomware operator Ianis Antropenko, seizing over $2.8 million in cryptocurrency from his wallet. The post US Seizes $2.8 Million From Zeppelin Ransomware Operator appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

US Seizes $2.8 Million From Zeppelin Ransomware Operator Read More »

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event)

Application Security, Featured, Vulnerabilities, vulnerability /

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) 2025-08-16 at 16:58 By SecurityWeek News CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. The post Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) appeared

Watch Now: CodeSecCon – Where Software Security’s Next Chapter Unfolds (Virtual Event) Read More »

Tight Cybersecurity Budgets Accelerate the Shift to AI-Driven Defense

budget, CISO Strategy, Featured, Management & Strategy /

Tight Cybersecurity Budgets Accelerate the Shift to AI-Driven Defense 2025-08-15 at 13:07 By Kevin Townsend With cybersecurity budgets strained, organizations are turning to AI-powered automation to plug staffing gaps, maintain defenses, and survive escalating threats. The post Tight Cybersecurity Budgets Accelerate the Shift to AI-Driven Defense appeared first on SecurityWeek. This article is an excerpt

Tight Cybersecurity Budgets Accelerate the Shift to AI-Driven Defense Read More »

Passkey Login Bypassed via WebAuthn Process Manipulation

Authentication Bypass, browser extension, Featured, Identity & Access, passkey /

Passkey Login Bypassed via WebAuthn Process Manipulation 2025-08-14 at 12:21 By Eduard Kovacs Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.  The post Passkey Login Bypassed via WebAuthn Process Manipulation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Passkey Login Bypassed via WebAuthn Process Manipulation Read More »

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia

Chipmaker Patch Tuesday, CPU, Featured, patch, Patch Tuesday, Vulnerabilities, vulnerability /

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia 2025-08-13 at 15:35 By Eduard Kovacs Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products. The post Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View

Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia Read More »

Scroll to Top