Latest threat reports & articles

securityweek · tlp:amber · 7/15/2026, 9:19:58 AM

ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT. The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell appeared first on SecurityWeek . ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Pro…

securityweek · tlp:amber · 7/15/2026, 7:24:52 AM

Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates Public exploit code targeting the Firefox flaws exists, but no in-the-wild exploitation has been observed. The post Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates appeared first on SecurityWeek . Critical Vulnerabilities Patched With Fresh Chrome 150, Firefox 152 Updates - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEE…

securityweek · tlp:amber · 7/15/2026, 5:19:42 AM

SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits SonicWall SMA1000 zero-day vulnerabilities CVE-2026-15409 and CVE-2026-15410 can be exploited for remote code execution. The post SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits appeared first on SecurityWeek . SonicWall Issues Urgent SMA Patch Warning for Two Zero-Day Exploits - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conferen…

securityweek · tlp:amber · 7/14/2026, 6:50:20 PM

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days Two flaws in Active Directory and SharePoint Server have been exploited as zero-days, and a BitLocker bug was publicly disclosed. The post Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek . Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts V…

securityweek · tlp:amber · 7/14/2026, 6:18:45 PM

Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims The D1R cybercrime group claimed to have stolen valuable data from Synopsys and Bosch, threatening to leak it unless a ransom is paid. The post Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims appeared first on SecurityWeek . Synopsys Finds No Evidence of Data Breach Amid Bosch Hack Claims - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Con…

securityweek · tlp:amber · 7/14/2026, 5:06:35 PM

Adobe Patches Critical ColdFusion Vulnerabilities The ColdFusion security defects could allow attackers to execute arbitrary code or elevate their privileges. The post Adobe Patches Critical ColdFusion Vulnerabilities appeared first on SecurityWeek . Adobe Patches Critical ColdFusion Vulnerabilities - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cybercrime Data Breaches Fra…

securityweek · tlp:amber · 7/14/2026, 1:55:41 PM

7 Severe Vulnerabilities Patched in VMware Avi Load Balancer The flaws can be exploited for authentication bypass, remote code execution, privilege escalation, and directory traversal. The post 7 Severe Vulnerabilities Patched in VMware Avi Load Balancer appeared first on SecurityWeek . 7 Severe Vulnerabilities Patched in VMware Avi Load Balancer - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & T…

securityweek · tlp:amber · 7/14/2026, 1:00:00 PM

Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar A ClaudeBleed-linked vulnerability reportedly persists across eight patches, exposing potentially sensitive data to other extensions. The post Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar appeared first on SecurityWeek . Unpatched Claude for Chrome Flaw Lets Extensions Read Gmail, Calendar - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cyb…

securityweek · tlp:amber · 7/14/2026, 11:17:56 AM

SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud The flaws could allow attackers to access and modify data, and cause system unavailability and request-response desynchronization. The post SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud appeared first on SecurityWeek . SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual E…

securityweek · tlp:amber · 7/14/2026, 10:51:01 AM

US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers Multiple state-sponsored APTs are compromising poorly secured devices across critical infrastructure sector networks. The post US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers appeared first on SecurityWeek . US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual…

securityweek · tlp:amber · 7/14/2026, 9:32:15 AM

Valarian Raises $50 Million for Sovereign Infrastructure Control Layer UK-based cybersecurity firm Valarian has raised a total of $70 million for its ACRA technology. The post Valarian Raises $50 Million for Sovereign Infrastructure Control Layer appeared first on SecurityWeek . Valarian Raises $50 Million for Sovereign Infrastructure Control Layer - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware &…

securityweek · tlp:amber · 7/14/2026, 9:04:39 AM

Multiple Jscrambler Packages Impacted by Supply Chain Attack A threat actor poisoned several Jscrambler NPM package versions to drop a cross-platform credential stealer. The post Multiple Jscrambler Packages Impacted by Supply Chain Attack appeared first on SecurityWeek . Multiple Jscrambler Packages Impacted by Supply Chain Attack - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwar…

securityweek · tlp:amber · 7/11/2026, 5:30:00 PM

Ghost Accounts Abuse GitHub API in Mass Recon Campaign Multiple campaigns are using ghost accounts to map GitHub organizations, including their repositories and members. The post Ghost Accounts Abuse GitHub API in Mass Recon Campaign appeared first on SecurityWeek . Ghost Accounts Abuse GitHub API in Mass Recon Campaign - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cybercr…

securityweek · tlp:amber · 7/10/2026, 3:01:19 PM

In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops Other noteworthy stories that might have slipped under the radar: Abnormal AI sued by Anthropic, AssuranceAmerica data breach affects 7 million people, NSA brings back TAO. The post In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops appeared first on SecurityWeek . In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Di…

securityweek · tlp:amber · 7/10/2026, 12:58:39 PM

Third US Security Expert Sentenced to Prison for Helping Ransomware Gang Angelo Martino, a former ransomware negotiator, was sentenced to 70 months for helping the BlackCat/Alphv group. The post Third US Security Expert Sentenced to Prison for Helping Ransomware Gang appeared first on SecurityWeek . Third US Security Expert Sentenced to Prison for Helping Ransomware Gang - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity C…

securityweek · tlp:amber · 7/10/2026, 11:55:11 AM

China, India-Linked Hackers Both Targeted Same Pakistani Police Force Both foes and allies have targeted the Balochistan Police force in Pakistan for at least two years, according to SentinelOne. The post China, India-Linked Hackers Both Targeted Same Pakistani Police Force appeared first on SecurityWeek . China, India-Linked Hackers Both Targeted Same Pakistani Police Force - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecuri…

securityweek · tlp:amber · 7/10/2026, 11:06:36 AM

Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers The attackers call victims to direct them to phishing websites mirroring Microsoft Entra ID login pages. The post Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers appeared first on SecurityWeek . Okta Warns of Vishing Attacks Targeting Microsoft 365 Customers - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyb…

securityweek · tlp:amber · 7/10/2026, 9:12:08 AM

GigaWiper Combines Multiple Malware for System-Level Sabotage The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The post GigaWiper Combines Multiple Malware for System-Level Sabotage appeared first on SecurityWeek . GigaWiper Combines Multiple Malware for System-Level Sabotage - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware &amp…

securityweek · tlp:amber · 7/10/2026, 8:32:33 AM

‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism Researchers demonstrate adversarial hallucination squatting against popular AI assistants to achieve remote code execution. The post ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism appeared first on SecurityWeek . 'HalluSquatting' Turns AI Hallucinations Into Botnet Delivery Mechanism - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual E…

securityweek · tlp:amber · 7/10/2026, 8:00:14 AM

Network of 200 GitHub Repositories Used for Malware Infection A Go module is used to load PowerShell code that fetches a resolver from public dead drops to execute Windows malware. The post Network of 200 GitHub Repositories Used for Malware Infection appeared first on SecurityWeek . Network of 200 GitHub Repositories Used for Malware Infection - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Thr…

securityweek · tlp:amber · 7/9/2026, 3:03:51 PM

QIZ Security Raises $17 Million for Cryptographic Governance Platform The Israeli company has developed a cryptographic posture and post-quantum cryptography management platform. The post QIZ Security Raises $17 Million for Cryptographic Governance Platform appeared first on SecurityWeek . QIZ Security Raises $17 Million for Cryptographic Governance Platform - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Mal…

securityweek · tlp:amber · 7/9/2026, 2:19:53 PM

UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge Two announcements on July 7, 2026, demonstrate the government’s determination to improve the level of cybersecurity within the UK. The post UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge appeared first on SecurityWeek . UK Government Rolls Out Agentic AI Defense Plan Alongside Industry Pledge - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS…

securityweek · tlp:amber · 7/9/2026, 1:49:42 PM

Palo Alto Networks Patches 13 Vulnerabilities Buffer overflow, DoS, command injection, SSRF, authentication bypass, and other types of vulnerabilities have been found in PAN-OS software. The post Palo Alto Networks Patches 13 Vulnerabilities appeared first on SecurityWeek . Palo Alto Networks Patches 13 Vulnerabilities - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cybercri…

securityweek · tlp:amber · 7/9/2026, 12:18:46 PM

12 Million Impacted by Data Breach at Japanese Telco KDDI Hackers exploited a zero-day vulnerability in a third-party system to access a KDDI email system for ISPs. The post 12 Million Impacted by Data Breach at Japanese Telco KDDI appeared first on SecurityWeek . 12 Million Impacted by Data Breach at Japanese Telco KDDI - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cyberc…

securityweek · tlp:amber · 7/9/2026, 11:52:35 AM

15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google Affecting every major distribution since 2011, the Linux kernel vulnerability allows attackers to gain root access. The post 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google appeared first on SecurityWeek . 15-Year-Old Linux Vulnerability 'GhostLock' Earns Researchers $92k From Google - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webca…

securityweek · tlp:amber · 7/9/2026, 10:28:35 AM

Microsoft Patches Defender ‘RoguePlanet’ Vulnerability The privilege escalation vulnerability tracked as CVE-2026-50656 has been patched with a Microsoft Malware Protection Engine update. The post Microsoft Patches Defender ‘RoguePlanet’ Vulnerability appeared first on SecurityWeek . Microsoft Patches Defender 'RoguePlanet' Vulnerability - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Ma…

securityweek · tlp:amber · 7/9/2026, 10:06:18 AM

Mount Royal University Confirms Data Stolen in Ransomware Attack Hackers accessed the institution’s internal network and deleted two drives containing employee, student, and university data. The post Mount Royal University Confirms Data Stolen in Ransomware Attack appeared first on SecurityWeek . Mount Royal University Confirms Data Stolen in Ransomware Attack - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference M…

securityweek · tlp:amber · 7/9/2026, 8:52:21 AM

AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique Wiz has disclosed the details of a new AI coding assistant attack method it has dubbed GhostApproval. The post AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique appeared first on SecurityWeek . AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cy…

securityweek · tlp:amber · 7/9/2026, 7:27:59 AM

Chrome 150 Update Patches 27 Vulnerabilities The security refresh resolves 13 use-after-free bugs, including two critical-severity flaws found by Google. The post Chrome 150 Update Patches 27 Vulnerabilities appeared first on SecurityWeek . Chrome 150 Update Patches 27 Vulnerabilities - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cybercrime Data Breaches Fraud & Identi…

securityweek · tlp:amber · 7/9/2026, 6:45:22 AM

8Layers Raises $2.9 Million for Identity Security Platform The Spanish startup has closed an extended pre-seed funding round two months after launching its digital identity protection platform. The post 8Layers Raises $2.9 Million for Identity Security Platform appeared first on SecurityWeek . 8Layers Raises $2.9 Million for Identity Security Platform - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware &a…

securityweek · tlp:amber · 7/9/2026, 5:00:41 AM

Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices Tracked as CVE-2026-11405, the vulnerability allows unauthenticated attackers to access a device's web management interface. The post Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices appeared first on SecurityWeek . Unpatched Backdoor in Tenda Firmware Grants Admin Access to Devices - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conf…

securityweek · tlp:amber · 7/8/2026, 4:09:15 PM

Accenture Confirms Data Breach After Hacker Claims Source Code Theft The professional services giant says it contained the incident, remediated its source, and experienced no operational or service delivery impact. The post Accenture Confirms Data Breach After Hacker Claims Source Code Theft appeared first on SecurityWeek . Accenture Confirms Data Breach After Hacker Claims Source Code Theft - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS…

securityweek · tlp:amber · 7/8/2026, 3:42:11 PM

China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors Cisco says the threat actor behind the LapDogs campaign has expanded its SOHO router malware toolkit with LongLeash, DogLeash, and JarLeash backdoors. The post China-Linked APT Expands Arsenal With New ‘Leash’ Backdoors appeared first on SecurityWeek . China-Linked APT Expands Arsenal With New 'Leash' Backdoors - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS…

securityweek · tlp:amber · 7/8/2026, 1:16:28 PM

Webinar Today: Why Email Security Keeps Failing Join the webinar as we break down why email-layer defenses alone can’t keep pace with the modern phishing ecosystem. The post Webinar Today: Why Email Security Keeps Failing appeared first on SecurityWeek . Webinar Today: Why Email Security Keeps Failing - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threats Cyberwarfare Cybercrime Data Breaches F…

securityweek · tlp:amber · 7/8/2026, 12:15:00 PM

Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations The "Rogue Agent" vulnerability could have enabled attackers to silently manipulate AI conversations, exfiltrate data, and compromise every Dialogflow CX agent within the same Google Cloud project. The post Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations appeared first on SecurityWeek . Google Dialogflow CX Bug Allowed Attackers to Hijack AI Conversations - SecurityWeek SECURITYWEEK …

securityweek · tlp:amber · 7/8/2026, 10:45:25 AM

CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws Two newly disclosed critical vulnerabilities in Adobe ColdFusion and Langflow join two Joomla extension flaws in CISA's Known Exploited Vulnerabilities catalog, with federal agencies given until July 10 to patch. The post CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Joomla Flaws appeared first on SecurityWeek . CISA Urges Immediate Patching of Exploited ColdFusion, Langflow, Jo…

securityweek · tlp:amber · 7/8/2026, 10:30:55 AM

Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection Researchers show how attackers can use a crafted public GitHub Issue to trick AI-powered workflows into exposing data from private repositories without authentication. The post Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection appeared first on SecurityWeek . Critical Vulnerability Exposes GitHub Agentic Workflows to Prompt Injection - SecurityWeek SECURITYWEEK NETWORK: Cyb…

securityweek · tlp:amber · 7/7/2026, 5:31:54 PM

County Government Reportedly Paid $1 Million to Cyber Extortion Group The alleged victim, believed to be a small Ohio county, reportedly paid the extortion group to prevent the public release of sensitive stolen data. The post County Government Reportedly Paid $1 Million to Cyber Extortion Group appeared first on SecurityWeek . County Government Reportedly Paid $1 Million to Cyber Extortion Group - SecurityWeek SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Event…