SecurityWeek

Hackers Steal 1.8 Million Records From Nikkei

Security Week - Tue, 10/20/2026 - 6:35am

The compromised information includes names, addresses, email addresses, phone numbers, and dates of birth.

The post Hackers Steal 1.8 Million Records From Nikkei appeared first on SecurityWeek.

Categories: SecurityWeek

970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach

Security Week - Tue, 10/20/2026 - 5:33am

Paradigm Healthcare Services detected an intrusion in October 2025, but it took nearly a year to start notifying affected individuals.

The post 970,000 Medi-Cal Members Affected by Paradigm Healthcare Data Breach appeared first on SecurityWeek.

Categories: SecurityWeek

Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks

Security Week - Mon, 10/19/2026 - 2:15pm

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.

The post Siemens Software Center Vulnerability Exploited in ClickFix Malware Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw

Security Week - Mon, 10/19/2026 - 11:47am

Critical flaws impact the Entity List and Field UI modules, and exploit paths exist with contributed modules.

The post Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw appeared first on SecurityWeek.

Categories: SecurityWeek

Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack

Security Week - Mon, 10/19/2026 - 11:20am

Hackers injected malware into Rank Math PRO version 3.0.123 packages distributed between October 15 and October 16.

The post Rank Math PRO WordPress Plugin Compromised in Supply Chain Attack appeared first on SecurityWeek.

Categories: SecurityWeek

ConnectWise Suspends Cloud Services in Response to Cyberattack

Security Week - Mon, 10/19/2026 - 9:16am

The services remain unavailable as the company continues remediation and security validation.

The post ConnectWise Suspends Cloud Services in Response to Cyberattack appeared first on SecurityWeek.

Categories: SecurityWeek

Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure

Security Week - Mon, 10/19/2026 - 8:44am

Threat actors have been observed delivering cryptocurrency miners and proxy software.

The post Plex2Shell Exploit Chain Weaponized Against Plex Servers Hours After Disclosure appeared first on SecurityWeek.

Categories: SecurityWeek

One Compromised Login Exposed Millions of California Students’ Records

Security Week - Mon, 10/19/2026 - 7:55am

Intruders used compromised credentials to access an ETS SFTP server, copying records of California students back to 2006.

The post One Compromised Login Exposed Millions of California Students’ Records appeared first on SecurityWeek.

Categories: SecurityWeek

Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack

Security Week - Mon, 10/19/2026 - 7:13am

The persistent, stealthy FortiGate implant was deployed against a telecommunications organization.

The post Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack appeared first on SecurityWeek.

Categories: SecurityWeek

MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks

Security Week - Mon, 10/19/2026 - 5:37am

Defenders get 15 new detection strategies, six for Enterprise and nine for ICS, backed by 38 analytics.

The post MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Anthropic Acquires Confidential AI Startup Opaque Systems

Security Week - Mon, 10/19/2026 - 3:45am

Opaque Systems has developed technology that lets AI systems use sensitive data while keeping it protected by the underlying hardware.

The post Anthropic Acquires Confidential AI Startup Opaque Systems appeared first on SecurityWeek.

Categories: SecurityWeek

Pages