SecurityWeek

Physicist Neil Johnson explores how fundamental laws of nature could explain why AI sometimes fails—and what to do about it.

The post The Root of AI Hallucinations: Physics Theory Digs Into the ‘Attention’ Flaw appeared first on SecurityWeek.

Hackers exploited a vulnerability in Cetus Protocol, a liquidity provider on the SUI blockchain.

The post $223 Million Stolen in Cetus Protocol Hack appeared first on SecurityWeek.

Zscaler signals a big push into the security-operations market with the announcement of plans to buy Denver-based Red Canary.

The post Zscaler to Acquire MDR Specialist Red Canary appeared first on SecurityWeek.

Sina Gholinejad pleaded guilty to computer-fraud and wire-fraud-conspiracy charges linked to the Robbinhood ransomware hit on Baltimore.

The post Iranian Man Pleads Guilty to Role in Baltimore Ransomware Attack appeared first on SecurityWeek.

Sophos warns that a DragonForce ransomware operator chained three vulnerabilities in SimpleHelp to target a managed service provider.

The post DragonForce Ransomware Hackers Exploiting SimpleHelp Vulnerabilities appeared first on SecurityWeek.

Microsoft flags a new Kremlin hacking team buying stolen usernames and passwords from infostealer markets for use in cyberespionage attacks. 

The post Russian Government Hackers Caught Buying Passwords from Cybercriminals appeared first on SecurityWeek.

Security firm Socket warns flags a campaign targeting NPM users with tens of malicious packages that can hijack system information.

The post Ongoing Campaign Uses 60 NPM Packages to Steal Data appeared first on SecurityWeek.

The agencies said that the group, which they called Laundry Bear, is actively trying to steal sensitive data from EU and NATO countries and is “extremely likely Russian state supported.”

The post Dutch Intelligence Agencies Say Russian Hackers Stole Police Data in Cyberattack appeared first on SecurityWeek.

As cloud security spending surges to $111 billion, new data highlights Microsoft's dominance, the U.S. market's outsized role, and Google's strategic acquisition of Wiz.

The post Inside the $111 Billion Cloud Security Market: Acquisition, Expansion, and Where to Aim Next appeared first on SecurityWeek.

The FBI warns US law firms that the Silent Ransom Group (SRG) has been constantly targeting the legal industry.

The post Law Firms Warned of Silent Ransom Group Attacks appeared first on SecurityWeek.

Nova Scotia Power has finally admitted that the recent cyberattack was a ransomware attack, but it hasn’t paid the hackers.

The post Nova Scotia Power Confirms Ransomware Attack, 280k Notified of Data Breach appeared first on SecurityWeek.

Signal said the privacy feature is on by default for every Windows 11 user to block Microsoft from taking screenshots for Windows Recall.

The post Signal Adds Screenshot-Blocker to Thwart ‘Windows Recall’  appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: serious vulnerabilities found in a Volkswagen app, Australian hacker DR32 sentenced in the US, and Immersive launches OT security training solution.

The post In Other News: Volkswagen App Hacked, DR32 Sentenced, New OT Security Solution appeared first on SecurityWeek.

Russian national Rustam Gallyamov was indicted in the US for his leading role in the development and distribution of Qakbot malware.

The post Russian Qakbot Gang Leader Indicted in US appeared first on SecurityWeek.

CISA warns companies of a widespread campaign targeting a Commvault vulnerability to hack Azure environments.

The post Companies Warned of Commvault Vulnerability Exploitation appeared first on SecurityWeek.

A Chinese threat actor exploited a zero-day vulnerability in Trimble Cityworks to hack local government entities in the US.

The post Cityworks Zero-Day Exploited by Chinese Hackers in US Local Government Attacks appeared first on SecurityWeek.

The DanaBot botnet ensnared over 300,000 devices and caused more than $50 million in damages before being disrupted.

The post DanaBot Botnet Disrupted, 16 Suspects Charged appeared first on SecurityWeek.

A Chinese espionage group has been chaining two recent Ivanti EPMM vulnerabilities in attacks against organizations in multiple critical sectors.

The post Chinese Spies Exploit Ivanti Vulnerabilities Against Critical Sectors appeared first on SecurityWeek.

Akamai documents a privilege escalation flaw in Windows Server 2025 after Redmond declines to ship an immediate patch.

The post Akamai, Microsoft Disagree on Severity of Unpatched ‘BadSuccessor’ Flaw appeared first on SecurityWeek.

Marlboro-Chesterfield Pathology has been targeted by the SafePay ransomware group, which stole personal information from its systems.

The post Marlboro-Chesterfield Pathology Data Breach Impacts 235,000 People appeared first on SecurityWeek.