SecurityWeek

UK Legal Aid Agency Hack Scope Widens After Forensic Review

Security Week - Thu, 10/15/2026 - 10:22am

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.

Categories: SecurityWeek

Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers

Security Week - Thu, 10/15/2026 - 8:50am

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.

The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek.

Categories: SecurityWeek

CikaBika Bot RAT Uses Discord for C&C

Security Week - Thu, 10/15/2026 - 7:25am

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

The post CikaBika Bot RAT Uses Discord for C&C appeared first on SecurityWeek.

Categories: SecurityWeek

Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies

Security Week - Thu, 10/15/2026 - 6:15am

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.

The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek.

Categories: SecurityWeek

CenterPoint Energy Data Breach Impacts 1 Million Texans

Security Week - Thu, 10/15/2026 - 5:55am

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

The post CenterPoint Energy Data Breach Impacts 1 Million Texans appeared first on SecurityWeek.

Categories: SecurityWeek

CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO

Security Week - Thu, 10/15/2026 - 4:26am

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.

The post CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO appeared first on SecurityWeek.

Categories: SecurityWeek

Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution

Security Week - Thu, 10/15/2026 - 2:59am

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek.

Categories: SecurityWeek

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Security Week - Thu, 10/15/2026 - 2:34am

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.

The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds

Security Week - Wed, 10/14/2026 - 12:00pm

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.

The post AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds appeared first on SecurityWeek.

Categories: SecurityWeek

ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw

Security Week - Wed, 10/14/2026 - 11:15am

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. 

The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.

Categories: SecurityWeek

Harmonic Security Raises $50 Million for Workforce AI Protection

Security Week - Wed, 10/14/2026 - 10:09am

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.

The post Harmonic Security Raises $50 Million for Workforce AI Protection appeared first on SecurityWeek.

Categories: SecurityWeek

Virtual Event Today: Zero Trust Strategies Summit

Security Week - Wed, 10/14/2026 - 9:56am

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

The post Virtual Event Today: Zero Trust Strategies Summit appeared first on SecurityWeek.

Categories: SecurityWeek

Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages

Security Week - Wed, 10/14/2026 - 9:00am

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek.

Categories: SecurityWeek

US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms

Security Week - Wed, 10/14/2026 - 6:55am

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

The post US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms appeared first on SecurityWeek.

Categories: SecurityWeek

Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise

Security Week - Wed, 10/14/2026 - 3:38am

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.

The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.

Categories: SecurityWeek

Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products

Security Week - Wed, 10/14/2026 - 3:26am

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.

The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.

Categories: SecurityWeek

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Security Week - Wed, 10/14/2026 - 3:16am

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.

Categories: SecurityWeek

SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities

Security Week - Wed, 10/14/2026 - 2:12am

The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.

The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek.

Categories: SecurityWeek

Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say

Security Week - Tue, 10/13/2026 - 7:07pm

Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.

The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say appeared first on SecurityWeek.

Categories: SecurityWeek

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

Security Week - Tue, 10/13/2026 - 2:43pm

CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges. 

The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek.

Categories: SecurityWeek

Pages