An alleged key figure in the ShinyHunters cybercrime group has been arrested in the Netherlands, and - in a sinister twist - the 24-year-old suspect is also being investigated for attempting to arrange two murders.
Read more in my article on the Hot for Security blog.
Three independent labs, three standout results: a perfect score, top certification, and every threat stopped before it ran.
The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme.
The post Treasury Blacklists Most-Wanted ATM Malware Developer and His Network appeared first on SecurityWeek.
It was discovered that KCoreAddons incorrectly handled shell argument
quoting in KShell::quoteArgs. The parsing did not adequately handle shell
metacharacters, which could lead to a shell escape. An attacker could
possibly use this issue to execute arbitrary commands in applications that
relied on t...
Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon breach.
OpenAI on Wednesday said it identified and disrupted a coordinated distillation campaign that was designed to illicitly extract protected reasoning from its artificial intelligence (AI) models.
A "core cluster of the activity," going back to the first week of July, has been attributed to individual...
The Information Commission replaces the Information Commissioner, putting statutory powers under collective control
The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.
The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical authentication bypass flaw impacting Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities (KEV), following reports of active exploitation.
The vulnerability, tracked as CVE-2026-76504 (CVS...
Hackers exploit Citrix NetScaler zero-day to deploy web shells Attackers have been exploiting the Citrix NetScaler zero-day CVE-2026-88772 since at least early September to gain root access, deploy custom web shells and tunneling malware, steal credentials, and move into internal networks at governm...
For the fifth time this year, Cisco revealed attackers have exploited a vulnerability (CVE-2026-76504) in its SD-WAN solution in zero-day attacks. The vendor’s incident responders became aware of active exploitation of this vulnerability in September 2026, after getting pinged and resolving a Cisco...
Discover what agencies should expect from a digital forensics partner and how MSAB puts transparency, accountability and long-term commitment at the heart of its work.
What really frustrates an adversary? Eight Cisco Talos researchers share practical ways to make their next move slower and riskier. From deception and behavioral detection to breaking attack dependencies and resisting manufactured urgency.
The app that comes with your car may be sharing what it knows about you with some of the biggest tech companies. Northeastern University researchers tested 21 vehicles and 30 carmaker apps and found some sending vehicle identification numbers (VINs), email addresses, phone numbers or location data t...
The Pentagon's Defense Manpower Data Center (DMDC) is notifying millions of military service members that hackers stole their data after breaching the Pentagon's human resources management system in October 2025. [...]
Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.
The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek.
PwC finds global security leaders are most concerned about attacks on AI systems
In an exclusive interview with WIRED, Paragon Solutions CEO Andrew Boyd reveals the limits of the company’s promise to keep bad actors from abusing its powerful espionage tool.
The servicing update for ESET Endpoint Security and ESET Endpoint Antivirus for Windows version 13.1 has been released. The build version is 13.1.2036.0.
Younger workers often overlooked for senior roles due to historical issues and fears they’ll get pregnant, says survey