SecurityWeek

A hacker claims to have stolen the information of 2 million Origin Energy customers and is threatening to leak it. 

The post Data Breach Confirmed After Australian Energy Giant Origin Is Hacked appeared first on SecurityWeek.

AgentForger allows an attacker to create, insert and remotely control an invisible autonomous AI agent inside a victim organization.

The post OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider appeared first on SecurityWeek.

You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.

The post Is Patching Dead? Vulnerability Management in the Post-Mythos Era appeared first on SecurityWeek.

Threat actors used credentials obtained from other companies to hack into Chick-fil-A One accounts.

The post Chick-fil-A Accounts Get Fried in Credential Stuffing Attack appeared first on SecurityWeek.

The latest investment round brings the total raised by Abstract to nearly $50 million.

The post Abstract Raises $25 Million to Expand Composable Security Operations Platform appeared first on SecurityWeek.

SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot.

The post Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models appeared first on SecurityWeek.

Hackers recently obtained non-sensitive customer information and other documents from the company.

The post Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses appeared first on SecurityWeek.

He replaces Guy Rosen, who announced his retirement from the company after 13 years.

The post Assaf Keren Appointed New CISO of Meta appeared first on SecurityWeek.

The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations.

The post New Check Point Zero-Day Vulnerability Exploited in the Wild appeared first on SecurityWeek.

An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers.

The post US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices appeared first on SecurityWeek.

Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms. 

The post Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts appeared first on SecurityWeek.

Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability.

The post Palo Alto Networks to Acquire Observability Platform Provider Embrace appeared first on SecurityWeek.

An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts.

The post Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft appeared first on SecurityWeek.

Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.

The post When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover appeared first on SecurityWeek.

The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform.

The post StrongestLayer Raises $4.1 Million in Seed Funding Extension appeared first on SecurityWeek.

Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues.

The post Vibe-Coded Apps Riddled With Exploitable Security Flaws appeared first on SecurityWeek.

CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access.

The post Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks appeared first on SecurityWeek.

Using AI, the startup provides adaptive prevention through environment mapping, risk analysis, and automated policy enforcement.

The post Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation appeared first on SecurityWeek.

Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI.

The post Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates appeared first on SecurityWeek.

The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary.

The post Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife appeared first on SecurityWeek.