Security Week

The move targeted people and entities accused of links to an online spying network that the EU claims targeted governments and carried out sabotage operations against critical infrastructure.

The post EU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying Campaign appeared first on SecurityWeek.

Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution.

The post Organizations Warned of Exploited Joomla Extension Vulnerabilities appeared first on SecurityWeek.

The company notified customers to manually shut down their servers while it is investigating a credible threat.

The post Progress Prompts ShareFile Storage Zone Controller Shutdown Amid Security Concerns appeared first on SecurityWeek.

The WorldLeaks extortion group claimed to have stolen 720 GB of data from the healthcare testing and laboratory services provider.

The post Centers Laboratory Data Breach Affects 540,000 Individuals appeared first on SecurityWeek.

Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members.

The post Ghost Accounts Abuse GitHub API in Mass Recon Campaign appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO.

The post In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops appeared first on SecurityWeek.

Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group.

The post Third US Security Expert Sentenced to Prison for Helping Ransomware Gang appeared first on SecurityWeek.

Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne.

The post China, India-Linked Hackers Both Targeted Same Pakistani Police Force appeared first on SecurityWeek.

The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages.

The post Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers appeared first on SecurityWeek.

The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command.

The post GigaWiper Combines Multiple Malware for System-Level Sabotage appeared first on SecurityWeek.

Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution.

The post ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism appeared first on SecurityWeek.

A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware.

The post Network of 200 GitHub Repositories Used for Malware Infection appeared first on SecurityWeek.

The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform.

The post QIZ Security Raises $17 Million for Cryptographic Governance Platform appeared first on SecurityWeek.

Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK.

The post UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge appeared first on SecurityWeek.

Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software.

The post Palo Alto Networks Patches 13 Vulnerabilities appeared first on SecurityWeek.

Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs.

The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek.

Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access.

The post 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google appeared first on SecurityWeek.

The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update.

The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek.

Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data.

The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on SecurityWeek.

Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval.

The post AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique appeared first on SecurityWeek.