SecurityWeek

Mikko Hypponen has joined the Finnish anti-drone company Sensofusion as Chief Research Officer after three decades of fighting malware.

The post Mikko Hypponen Leaves Anti-Malware Industry to Fight Against Drones appeared first on SecurityWeek.

With crime-as-a-service lowering the barrier to entry and prosecution lagging behind, enterprise security teams must rethink their strategies to detect and disrupt scams at scale.

The post Why Scamming Can’t Be Stopped—But It Can Be Managed appeared first on SecurityWeek.

A critical command execution vulnerability has been found by a researcher in Instantel Micromate monitoring units. 

The post 1,000 Instantel Industrial Monitoring Devices Possibly Exposed to Hacking appeared first on SecurityWeek.

Microsegmentation provider Zero Networks has raised $55 million in a Series C funding round led by Highland Europe.

The post Zero Networks Raises $55 Million for Microsegmentation Solution appeared first on SecurityWeek.

The incident occurred in March and impacted the personally identifiable information of approximately 4.65% of MainStreet Bancshares’ customers.

The post MainStreet Bank Data Breach Impacts Customer Payment Cards  appeared first on SecurityWeek.

The latest Android updates fix vulnerabilities in Runtime, Framework, System, and third-party components of the mobile OS.

The post Over 30 Vulnerabilities Patched in Android appeared first on SecurityWeek.

Covered organizations in Australia are now required to report ransomware and other cyber extortion payments within three days.

The post Australia Enforces Ransomware Payment Reporting appeared first on SecurityWeek.

Reported by the Google Threat Analysis Group, the vulnerability might have been exploited by commercial spyware.

The post Google Researchers Find New Chrome Zero-Day appeared first on SecurityWeek.

Microsoft and CrowdStrike are running a project that aims to align threat actor names, and Google and Palo Alto Networks will also contribute.

The post Microsoft, CrowdStrike Lead Effort to Map Threat Actor Names appeared first on SecurityWeek.

Luxury brand Cartier disclosed a data breach in which an unauthorized party gained access to its systems and obtained some client information.

The post Cartier Data Breach: Luxury Retailer Warns Customers that Personal Data Was Exposed appeared first on SecurityWeek.

Cryptocurrency mining operation hits exposed Consul dashboards, Docker Engine APIs and Gitea code-hosting instances to push Monero miner.

The post Cryptojackers Caught Mining Monero via Exposed DevOps Infrastructure appeared first on SecurityWeek.

Chipmaker says there are indications from Google Threat Analysis Group that a trio of flaws “may be under limited, targeted exploitation.”

The post Qualcomm Flags Exploitation of Adreno GPU Flaws, Urges OEMs to Patch Urgently appeared first on SecurityWeek.

Exploitation of the vBulletin vulnerability tracked as CVE-2025-48827 and CVE-2025-48828 started shortly after disclosure.

The post vBulletin Vulnerability Exploited in the Wild appeared first on SecurityWeek.

Patterns of concerning behavior led Google to remove trust in certificates from Chunghwa Telecom and Netlock from Chrome.

The post Chrome to Distrust Chunghwa Telecom and Netlock Certificates appeared first on SecurityWeek.

Russian national Vitaly Nikolaevich Kovalev is believed to be the leader of the Conti and TrickBot cybercrime groups.

The post Alleged Conti, TrickBot Gang Leader Unmasked appeared first on SecurityWeek.

The critical flaw, tracked as CVE-2025-20188 (CVSS score of 10/10), allows attackers to execute arbitrary code remotely.

The post Technical Details Published for Critical Cisco IOS XE Vulnerability appeared first on SecurityWeek.

Counter antivirus services such as AVCheck allow cybercriminals to test whether their malware is detected by antivirus products.

The post Counter Antivirus Service AVCheck Shut Down by Law Enforcement appeared first on SecurityWeek.

Elected officials, business executives and other prominent figures in recent weeks received messages from someone impersonating Susie Wiles.

The post US Government Is Investigating Messages Impersonating Trump’s Chief of Staff, Susie Wiles appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: simple PoC code released for Fortinet zero-day, OpenAI O3 disobeys shutdown orders, source code of SilverRAT emerges online.

The post In Other News: PoC for Fortinet Bug, AI Model Subverts Shutdown, RAT Source Code Leaked appeared first on SecurityWeek.

Security researchers flag two phishing campaigns abusing Firebase and Google Apps Script to host malware and fake login pages.

The post Firebase, Google Apps Script Abused in Fresh Phishing Campaigns appeared first on SecurityWeek.