SecurityWeek

Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

The post NightmareStresser DDoS Service Disrupted in International Operation appeared first on SecurityWeek.

Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.

CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.

The post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.

The company will use the funding to accelerate platform development and expand its presence in key enterprise markets.

The post MIND Secures $72 Million for AI-Powered DLP appeared first on SecurityWeek.

Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

The post Cyberattacks on Two Oil Tankers Prompt Coast Guard, FBI to Board Vessels appeared first on SecurityWeek.

OpenAI published a framework for disclosing model misalignment alongside six reports describing problematic behavior.

The post OpenAI Says Its Models Searched GitHub for Leaked API Keys During Training appeared first on SecurityWeek.

The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.

The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek.

Revolut allegedly fed customer information to hackers impersonating an Italian government agency for five months.

The post Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom appeared first on SecurityWeek.

The company plans to expand into continuous cybersecurity, offering security testing across applications and infrastructure.

The post Comp AI Raises $34 Million for AI-Native Compliance and Security appeared first on SecurityWeek.

Attackers could exploit the flaws to increase resource usage, trigger an unexpected program exit, or terminate the named process.

The post ISC Patches 14 Vulnerabilities in BIND 9 Security Update appeared first on SecurityWeek.

Research shows attacks on manufacturers rose 40% in early 2026, as ransomware groups increasingly exploit the supply-chain disruption caused by operational shutdowns.

The post Ransomware Attacks on Manufacturers Surge as Supply Chain Risk Grows appeared first on SecurityWeek.

The vulnerabilities may lead to root access, command execution, bypasses, SQL injection, and remote code execution.  

The post Cisco Fixes Dozens of Flaws Across FMC, ISE and Nexus Dashboard appeared first on SecurityWeek.

Complementing Zero Trust models, decoys enable organizations to detect, observe, and block malicious activity in their environments.

The post CISA Releases Cyber Decoy Guidance to Strengthen Critical Infrastructure Defenses appeared first on SecurityWeek.

New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.

The post AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals appeared first on SecurityWeek.

Remote, unauthenticated attackers can exploit the vulnerability to bypass authentication via crafted requests.

The post Active Exploitation Triggers Emergency Patch for Cisco ISE Zero-Day appeared first on SecurityWeek.

Spanish regulators say an AI agent chained together a successful login, vulnerability discovery, and access to personal data in a potential milestone for autonomous cyberattacks.

The post First Agentic AI Data Breach Reported to Spanish Regulator appeared first on SecurityWeek.

Join SecurityWeek today for a virtual summit exploring the strategies and tools organizations need to discover, prioritize, and defend their expanding attack surfaces.

The post Virtual Event Today: Attack Surface Management Summit appeared first on SecurityWeek.

Ursula von der Leyen warns that advanced AI could unleash hacking on an unprecedented scale as Europe prepares new protections against social media’s “capture” of children.

The post EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media appeared first on SecurityWeek.

The company provides a standard for AI systems, testing them against risks such as jailbreaks, prompt injections, and unauthorized actions.

The post AIUC Raises $40 Million to Certify Enterprise AI Agents appeared first on SecurityWeek.