SecurityWeek

Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains.

The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek.

The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.

The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.

Midnight Mimosa is the name given to a malware campaign primarily running preinstalled on low-cost Android devices.

The post Pre-Baked Firmware Malware Hits Budget Android Devices in 150+ Countries appeared first on SecurityWeek.

Flax Typhoon and other APTs used MicroScan and FishHub to scan and hack US and foreign critical infrastructure.

The post US Disrupts Chinese State-Sponsored Hacking Tools appeared first on SecurityWeek.

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

The post Anthropic Fast-Tracks AI Bug Reports to OSS Maintainers, Taps 11 Firms for OT Security appeared first on SecurityWeek.

The security defect, tracked as CVE-2026-107406, could lead to remote code execution or denial-of-service.

The post Citrix Urges Immediate Patching of Critical NetScaler Vulnerability appeared first on SecurityWeek.

$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding tools.

The post Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own appeared first on SecurityWeek.

Researchers from George Washington University have published a paper examining whether the time and cause of AI going rogue can be predicted.

The post Formula Predicts When AI Chatbots Are at Risk of Turning Bad appeared first on SecurityWeek.

The security defects could lead to unauthorized access, information leaks, privilege escalation, DoS attacks, and remote code execution.

The post Cisco Patches a Dozen Critical Vulnerabilities appeared first on SecurityWeek.

All enterprises conduct security awareness training for their employees. But whether this has tangible benefits is debatable.

The post Security Awareness Training Isn’t Dead, but It Needs a Rethink appeared first on SecurityWeek.

Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products.

The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek.

Zhang Yu was charged alongside Xu Zewei, who was extradited from Italy to the US in April 2026.

The post US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward appeared first on SecurityWeek.

Critical and high-severity vulnerabilities could allow attackers to bypass authentication, execute arbitrary code, and elevate their privileges.

The post SonicWall and Splunk Patch Critical Vulnerabilities appeared first on SecurityWeek.

The cybersecurity startup will invest in product innovation, agentic research, and employee base expansion.

The post Rein Security Raises $25 Million to Guard AI Agents at Runtime appeared first on SecurityWeek.

SEC Consult has published technical details on vulnerabilities mentioned in a complaint filed by several US states.

The post TP-Link Faces State Lawsuits and New Scrutiny Over ISP Router Flaws appeared first on SecurityWeek.

Zohar Pinhasi was paying ransoms to obtain decryption keys and then charging victims substantially more for remediation.

The post Fake Decryption Tools Masked $11M Markup in Ransomware Recovery Scheme appeared first on SecurityWeek.

The figure is far higher than the counts that surfaced in earlier filings and patient notifications.

The post Oracle Health Data Breach Tally Climbs to Nearly 20 Million appeared first on SecurityWeek.

Attackers are creating new accounts and deleting existing ones and passwords to prevent legitimate access.

The post FortiBleed Attackers Locking Victims Out of Fortinet Devices appeared first on SecurityWeek.

Southern Company is notifying customers that their utility account information was accessed by hackers.

The post Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts appeared first on SecurityWeek.

The individual was detained in May and has been extradited to Germany to face hacking charges.

The post Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany appeared first on SecurityWeek.