SecurityWeek

Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation

Security Week - Thu, 10/01/2026 - 7:40am

The Series B brings the AI-powered offensive security startup’s total funding to roughly $445 million only seven months after its public launch.

The post Kevin Mandia’s Armadin Raises $255 Million at $2.5 Billion Valuation appeared first on SecurityWeek.

Categories: SecurityWeek

Treasury Blacklists Most-Wanted ATM Malware Developer and His Network

Security Week - Thu, 10/01/2026 - 6:51am

The US government continues its crackdown on Tren de Aragua over its ATM jackpotting scheme.

The post Treasury Blacklists Most-Wanted ATM Malware Developer and His Network appeared first on SecurityWeek.

Categories: SecurityWeek

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

Security Week - Thu, 10/01/2026 - 6:42am

The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root.

The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek.

Categories: SecurityWeek

500,000 Active Credentials Left Exposed on GitHub

Security Week - Thu, 10/01/2026 - 5:43am

Roughly 200,000 of the credentials were exposed after GitHub enabled push protections by default.

The post 500,000 Active Credentials Left Exposed on GitHub appeared first on SecurityWeek.

Categories: SecurityWeek

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Security Week - Thu, 10/01/2026 - 4:26am

The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges.

The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders

Security Week - Thu, 10/01/2026 - 3:52am

The company says its new frontier AI model found a critical vulnerability in software used by hospitals worldwide.

The post Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders appeared first on SecurityWeek.

Categories: SecurityWeek

FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers

Security Week - Wed, 09/30/2026 - 7:43pm

An FTC spokesperson confirmed the investigation but declined further comment.

The post FTC is Investigating OpenAI and Anthropic Over Possible risks to Consumers appeared first on SecurityWeek.

Categories: SecurityWeek

Google: AI Is Changing the Pace and Profile of Vulnerability Discovery

Security Week - Wed, 09/30/2026 - 10:05am

Google’s analysis found that AI-discovered vulnerabilities are more likely to enable remote code execution.

The post Google: AI Is Changing the Pace and Profile of Vulnerability Discovery appeared first on SecurityWeek.

Categories: SecurityWeek

WatchGuard Patches Critical Fireware OS Code Injection Vulnerability

Security Week - Wed, 09/30/2026 - 9:16am

WatchGuard has rolled out patches for 15 code execution, DoS, authorization, and path traversal bugs in Fireware OS.

The post WatchGuard Patches Critical Fireware OS Code Injection Vulnerability appeared first on SecurityWeek.

Categories: SecurityWeek

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Security Week - Wed, 09/30/2026 - 8:48am

Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772.

The post Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

Chrome, Firefox Updates Patch Over 100 Vulnerabilities

Security Week - Wed, 09/30/2026 - 8:16am

Some of the flaws could allow remote attackers to execute arbitrary code or escape the browser sandbox.

The post Chrome, Firefox Updates Patch Over 100 Vulnerabilities appeared first on SecurityWeek.

Categories: SecurityWeek

Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit

Security Week - Wed, 09/30/2026 - 7:19am

Attacks by autonomous AI agents are moving out of the lab and into the courtroom, raising unsettled questions about who is liable for what agents do.

The post Anthropic Flags AI Agent Liability Risks as OpenAI Faces Hacking Lawsuit appeared first on SecurityWeek.

Categories: SecurityWeek

Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks

Security Week - Wed, 09/30/2026 - 6:59am

The state-sponsored group has launched larger-scale phishing campaigns to deploy the CosmicPulse backdoor.

The post Russian APT Star Blizzard Uses ‘RedFlick’ Infection Chain in Recent Attacks appeared first on SecurityWeek.

Categories: SecurityWeek

ShinyHunters Defiant After FBI Calls on Members to Come Forward

Security Week - Wed, 09/30/2026 - 6:20am

In the wake of a suspected leader’s arrest, ShinyHunters says it never intended to publish data stolen from the FBI.

The post ShinyHunters Defiant After FBI Calls on Members to Come Forward appeared first on SecurityWeek.

Categories: SecurityWeek

High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

Security Week - Wed, 09/30/2026 - 2:55am

Roughly a dozen vulnerabilities have been patched in each of the open source cryptographic libraries. 

The post High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL appeared first on SecurityWeek.

Categories: SecurityWeek

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development

Security Week - Tue, 09/29/2026 - 9:48pm

The accord opened the door to future regulation but focused on four voluntary steps for the companies to take.

The post Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development appeared first on SecurityWeek.

Categories: SecurityWeek

OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference

Security Week - Tue, 09/29/2026 - 4:14pm

Altman made a slew of product announcements and updates, including the company’s new agents, called Dots.

The post OpenAI CEO Announces New AI Agent and Avoids Mention of Security Concerns at Developer Conference appeared first on SecurityWeek.

Categories: SecurityWeek

DARPA Selects Xint to Use AI in Securing Military Messaging Apps

Security Week - Tue, 09/29/2026 - 1:24pm

The AIxCC competition winner will analyze messaging app code and compiled binaries for vulnerabilities, with technology that could also help commercial customers secure their software.

The post DARPA Selects Xint to Use AI in Securing Military Messaging Apps appeared first on SecurityWeek.

Categories: SecurityWeek

New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks

Security Week - Tue, 09/29/2026 - 1:00pm

Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel

The post New Spectre v2 Variant Exposes Intel, AMD, Arm CPUs to Data Leaks appeared first on SecurityWeek.

Categories: SecurityWeek

RemoteThreat Launches With $7 Million for Offensive Operations Platform

Security Week - Tue, 09/29/2026 - 10:38am

The company emerged from stealth mode with pre-seed funding from Osage University Partners and DataTribe.

The post RemoteThreat Launches With $7 Million for Offensive Operations Platform appeared first on SecurityWeek.

Categories: SecurityWeek

Pages