SecurityWeek

The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.

The post Adobe Patches 140 Vulnerabilities Across 10 Products appeared first on SecurityWeek.

Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities. 

The post Google Partially Reverses Chrome Bug Bounty Cuts appeared first on SecurityWeek.

Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.

The post Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach appeared first on SecurityWeek.

Experiments show cheap TV boxes can run capable AI models, and small models may soon be able to spread across such devices on their own.

The post Small AI Models May Soon Be Able to Self-Replicate on IoT Devices, Anthropic Warns appeared first on SecurityWeek.

Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.

The post XWorm RAT Evolves Into Surveillance Platform appeared first on SecurityWeek.

IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.

The post AI Turns Familiar Cyberattacks Into a Race Against Time appeared first on SecurityWeek.

A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.

The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek.

The company says it took some of its systems offline to contain a security issue within its network.

The post Cyberattack Prompts Ahold Delhaize to Disconnect Systems appeared first on SecurityWeek.

A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.

The post Refrigeration Controller Hack Spoils Food Across European Supermarkets appeared first on SecurityWeek.

The all-stock deal brings Elisity’s least-privilege access technology into IonQ’s security portfolio.

The post IonQ to Acquire Zero Trust Firm Elisity for Up to $1.3 Billion appeared first on SecurityWeek.

The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites.

The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek.

The outage hit the main Ubuntu and Canonical websites, including the Ubuntu blog and developer portal.

The post Canonical Websites Disrupted in Second DDoS Attack This Year appeared first on SecurityWeek.

Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.

The post Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US appeared first on SecurityWeek.

Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.

The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.

The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.

The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek.

CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.

The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.

Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.

The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.

The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the company’s servers.

The post Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison appeared first on SecurityWeek.

The ChatGPT maker said the researchers "violated clear policies on handling sensitive information.”

The post OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Tensorlake npm SDK compromised, Empire Market co-founder gets 40 years, exposed NVIDIA GPU monitors leak telemetry.

The post In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years appeared first on SecurityWeek.