Security Week

A misconfigured test server containing engineering material, including internal configurations, was accessed by threat actors.

The post Surfshark Systems Targeted by Hackers appeared first on SecurityWeek.

Anthropic reveals how criminal groups are increasingly targeting AI vendors' own infrastructure, including to steal a pre-release Claude model.

The post Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion appeared first on SecurityWeek.

A Russian threat actor used AI to build, test, and deploy exploits against hundreds of organizations worldwide.

The post PaperCut Flaws Exploited in AI-Powered Attacks appeared first on SecurityWeek.

Mandiant founder and cybersecurity veteran brings more than 30 years of public and private sector experience to Amazon’s board.

The post Mandiant Founder Kevin Mandia Joins Amazon Board appeared first on SecurityWeek.

Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa.

The post Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 appeared first on SecurityWeek.

Both Anthropic and OpenAI have seen high-profile resignations in recent years that were tied to safety concerns.

The post Anthropic Researcher Resigns With Warning About the Dangers of AI Development appeared first on SecurityWeek.

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox.

The post Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster appeared first on SecurityWeek.

Deceptive apps in Early Access are being used by dishonest developers for their own benefit.

The post Deceptive Android Apps Exploit Google Play Early Access to Evade Reviews appeared first on SecurityWeek.

Join the webinar for a focused, 20-minute discussion on Frontier Pace Governance, an approach to balancing automation, policy, and business risk as IT operations accelerate.

The post Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation appeared first on SecurityWeek.

Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.

The post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek.

Anthropic is most concerned about Claude Mythos 5’s reckless behavior after recent incidents in which real systems were hacked.

The post Widened Scan Turns Up Fourth Rogue Claude Cyber Incident appeared first on SecurityWeek.

In June 2026, hackers stole personal, health, and insurance information from AdaptHealth’s systems.

The post 4.1 Million Impacted by AdaptHealth Data Breach appeared first on SecurityWeek.

Cisco and CISA have flagged exploitation of CVE-2026-20079, a vulnerability disclosed in March 2026.

The post Organizations Warned of Cisco Secure FMC Exploitation appeared first on SecurityWeek.

The exploit provides full System privileges on Windows machines running the September 2026 patches.

The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek.

The high-severity, unauthenticated vulnerability tracked as CVE-2025-25249 was patched in January 2026.

The post Fortinet Code Execution Flaw Exploited in PivotC2 RAT Attacks appeared first on SecurityWeek.

The company will increase its US market presence and will expand its engineering and go-to-market teams.

The post HelmGuard Raises $7.3 Million for Agentic GRC and Security appeared first on SecurityWeek.

Criminal and state-sponsored adversaries are increasingly using AI to automate and scale their attacks, according to GTIG.

The post AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns appeared first on SecurityWeek.

The security updates resolve critical flaws across Android’s Framework, System, and Kernel components.

The post Android’s September 2026 Updates Patch 180 Vulnerabilities appeared first on SecurityWeek.

Major chipmakers announced patches for vulnerabilities recently discovered in their products.

The post Chipmaker Patch Tuesday: Nvidia, AMD, Arm Issue Security Advisories appeared first on SecurityWeek.

The critical, unauthenticated bugs allow attackers to bypass authentication and proxy a user’s browser traffic.

The post Fortinet Patches Critical Vulnerabilities in FortiMonitorOnSight, Chrome Extension appeared first on SecurityWeek.