SecurityWeek

Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.

The post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.

US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.

The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware appeared first on SecurityWeek.

Vulnerabilities in The Events Calendar can provide attackers with remote code execution capabilities.

The post Unauthenticated RCE Flaws Could Expose 200,000+ WordPress Sites to Takeover appeared first on SecurityWeek.

The company will use the new capital to expand its vulnerability operations platform and support international growth.

The post Hackuity Raises $19 Million for AI-Powered Vulnerability Management appeared first on SecurityWeek.

In June 2026, hackers accessed files containing patients’ names, contact information, diagnosis details, and health insurance information.

The post 280,000 Impacted by Premier Medical Group Data Breach appeared first on SecurityWeek.

Google resolved 42 security defects in Chrome, and Mozilla fixed 73 bugs in Firefox.

The post Chrome, Firefox Updates Patch 115 Vulnerabilities appeared first on SecurityWeek.

CVE-2026-87886 is a high-severity insecure file permissions flaw that can lead to local privilege escalation.

The post Acronis Patches Exploited Vulnerability in cPanel Backup Plugin appeared first on SecurityWeek.

The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.

The post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek.

The security updates resolve over 800 vulnerabilities across 17 product families, including over 100 critical-severity flaws.

The post Oracle Patches 800+ Vulnerabilities in September 2026 Security Update appeared first on SecurityWeek.

Microsoft agreed to adopt guardrails and privacy standards for its AI in schools, as negotiated with the American Federation of Teachers.

The post Microsoft Commits to Sweeping AI Privacy Rules for Students. Will Other Tech Giants Follow? appeared first on SecurityWeek.

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.

The post “We Think the Security Control Is Working” Is No Longer Good Enough appeared first on SecurityWeek.

AI-assisted researchers flooded Vercel with reports, forcing the company to automate vulnerability triage.

The post $1 Million Sandbox Challenge Uncovers Linux Kernel Flaws appeared first on SecurityWeek.

The cybersecurity startup is building a proprietary foundation model and plans to accelerate global expansion.

The post Exein Secures $270M at $1.7B Valuation for Physical AI Security appeared first on SecurityWeek.

A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems.

The post Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data appeared first on SecurityWeek.

The hackers staged numerous scripts for reconnaissance and CVE probing, along with brute-force utilities and privilege escalation tools.

The post Thai Broadband Provider Hacked via Fortinet Vulnerability appeared first on SecurityWeek.

The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.

The post OpenAI Investigates Report Linking AI Agents to RubyGems Attack appeared first on SecurityWeek.

Hackers exploited a vulnerability in a VPN product to steal the personal information of roughly 240,000 people.

The post 240,000 Hit by Data Breach at Japan’s Digital Agency appeared first on SecurityWeek.

The updates resolve kernel vulnerabilities that could lead to memory corruption, privilege escalation, system termination, and information leaks.

The post Apple Patches 200 Vulnerabilities With New iOS 27, macOS Golden Gate 27 Releases  appeared first on SecurityWeek.

The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability.

The post Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints appeared first on SecurityWeek.

Ads led to a ClickFix page designed to trick macOS and Windows users into installing malware.

The post Hacked HBO Max Reddit Account Used for Malware Delivery via ClickFix Attack appeared first on SecurityWeek.