Security Week

The move follows President Trump’s order to replace “artificial intelligence” with “super intelligence” in executive branch communications.

The post Pentagon Renames CDAO ‘Super Intelligence Office’ appeared first on SecurityWeek.

The directive protects smartphones as part of a person’s private sphere and requires “free and informed consent” for such access, the authority said.

The post Meta Fined $887 Million in Italy Over Android Gallery Photos and Videos on Facebook appeared first on SecurityWeek.

Overreliance on AI could erode the creativity, clear communication, and critical thinking security teams need when there’s no playbook.

The post Is AI Making Us Worse at Cybersecurity? appeared first on SecurityWeek.

The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones.

The post Apple Reveals How Secure Exclaves Shield Camera and Microphone Data appeared first on SecurityWeek.

Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.

The post No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update appeared first on SecurityWeek.

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

The post FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’ appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.

The post In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach appeared first on SecurityWeek.

Microsoft is trying different ways to identify the cause of the problem and get its servers back online, using “a measured approach to identify and repair affected infrastructure.”

The post Microsoft Struggles to Restore Email and Other Services in a Global Outage appeared first on SecurityWeek.

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

The post Apify Confirms Customer Data Accessed in Cyberattack appeared first on SecurityWeek.

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

The post SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks appeared first on SecurityWeek.

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

The post Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure appeared first on SecurityWeek.

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

The post Citrix Patches 10 Critical NetScaler Vulnerabilities appeared first on SecurityWeek.

Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.

The post OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools appeared first on SecurityWeek.

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

The post Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ appeared first on SecurityWeek.

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.

The post PHP2Shell Exploited in Destructive Check Point Gateway Attacks appeared first on SecurityWeek.

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.

The post Hackers Exploit New N-central Zero-Day Hours After PoC Publication appeared first on SecurityWeek.

Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.

The post FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance appeared first on SecurityWeek.

Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.

The post Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams appeared first on SecurityWeek.

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

The post Apache Patches Critical HTTP Server RCE Found by Anthropic, Google appeared first on SecurityWeek.

Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.

The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek.