SecurityWeek

Hadrian offers an agentic offensive security platform that allows defenders to operate at the same speed as attackers.

The post Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform appeared first on SecurityWeek.

The Japanese chip testing giant said hackers stole personal information from its servers in the February 2026 cyberattack.

The post Advantest Discloses Data Breach Months After Ransomware Attack appeared first on SecurityWeek.

Four critical-severity use-after-free defects were fixed in Chromecast, Browser, Navigation, and Track.

The post Chrome 155 Update Patches 247 Vulnerabilities appeared first on SecurityWeek.

Anthropic is integrating the CVP and Project Glasswing into a single offering, with three levels of access to its most capable AI models.

The post Anthropic Introduces 3-Tier Cyber Verification Program for AI Access appeared first on SecurityWeek.

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users.

The post ASOS Confirms Cyberattack, Data Breach appeared first on SecurityWeek.

Wikimedia looked into whether its own websites had seen activity like that disclosed by other organizations

The post Wikimedia Says Rogue OpenAI Agents Tried to Turn Its Tools Into Proxies appeared first on SecurityWeek.

The patches resolve a critical vulnerability in Android’s System component that could lead to privilege escalation.

The post Android’s October 2026 Updates Patch 25 Vulnerabilities appeared first on SecurityWeek.

Unauthenticated attackers could exploit the flaw to access specific files in the web application root directory.

The post Atlassian Patches Critical Vulnerability Affecting 8 Products appeared first on SecurityWeek.

The Arizona Supreme Court said the information was copied for people dating back as far as 30 years.

The post Personal Information for Over 1 Million People Stolen in a Cyberattack on Arizona’s Court System appeared first on SecurityWeek.

The FBI has removed an Accenture contractor over a data breach that exposed personal information of thousands of bureau employees.

The post FBI Blames Contractor’s Missed Patch for ShinyHunters Breach appeared first on SecurityWeek.

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026.

The post FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware appeared first on SecurityWeek.

Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.

The post Apple to Tighten Full Disk Access Controls in macOS Amid AI Risks appeared first on SecurityWeek.

Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind.

The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.

Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign.

The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek.

Hackers abused a company’s lawful access to the CPR system to steal the personal information of registered citizens.

The post 8.8 Million Impacted by Data Breach at Denmark’s Central Person Register appeared first on SecurityWeek.

Companies are pouring time and dollars into security awareness training, but little evidence shows it actually works against social engineering.

The post Social Engineering Detection Moves Into the Live Conversation appeared first on SecurityWeek.

Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).

The post Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports appeared first on SecurityWeek.

ClingSTUN operates as a back-connect proxy backdoor, sets up persistence, and contains exploits for self-propagation.

The post Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws appeared first on SecurityWeek.

Hackers stole patient information from Clover Health Investments and AngMar Management Services in July.

The post 250,000 Impacted by Data Breaches at New Jersey, Texas Healthcare Firms appeared first on SecurityWeek.

CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE.

The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  appeared first on SecurityWeek.