Latest threat reports & articles

securityweek · tlp:amber · 7/21/2026, 10:19:21 AM

Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure. The post Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data appeared first on SecurityWeek . Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cyber…

securityweek · tlp:amber · 7/21/2026, 9:36:51 AM

Clover Health Investments Discloses Data Breach Using social engineering, hackers compromised employee accounts with access to personal and health information. The post Clover Health Investments Discloses Data Breach appeared first on SecurityWeek . Clover Health Investments Discloses Data Breach - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference…

securityweek · tlp:amber · 7/21/2026, 8:41:53 AM

Exploitation of ServiceNow Vulnerability Seen Days After Disclosure The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution. The post Exploitation of ServiceNow Vulnerability Seen Days After Disclosure appeared first on SecurityWeek . Exploitation of ServiceNow Vulnerability Seen Days After Disclosure - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News…

securityweek · tlp:amber · 7/21/2026, 8:20:08 AM

Zimbra Update Patches Critical Vulnerabilities The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects. The post Zimbra Update Patches Critical Vulnerabilities appeared first on SecurityWeek . Zimbra Update Patches Critical Vulnerabilities - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware …

securityweek · tlp:amber · 7/20/2026, 2:54:03 PM

Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others. The post Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software appeared first on SecurityWeek . Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions…

securityweek · tlp:amber · 7/20/2026, 2:11:05 PM

SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533. The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek . SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECU…

securityweek · tlp:amber · 7/20/2026, 12:32:40 PM

OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory. The post OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability appeared first on SecurityWeek . OpenSSL Silently Fixes 'HollowByte' DoS Vulnerability - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News …

securityweek · tlp:amber · 7/20/2026, 11:46:50 AM

New Index Tracks Material Breaches — And Refuses to Add Up the Losses Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens. The post New Index Tracks Material Breaches — And Refuses to Add Up the Losses appeared first on SecurityWeek . New Index Tracks Material Breaches — And Refuses to Add Up the Losses - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURIT…

securityweek · tlp:amber · 7/20/2026, 11:27:38 AM

Ernst & Young Data Breach Affects Personal, Financial Information Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform. The post Ernst & Young Data Breach Affects Personal, Financial Information appeared first on SecurityWeek . Ernst & Young Data Breach Affects Personal, Financial Information - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand S…

securityweek · tlp:amber · 7/20/2026, 10:25:07 AM

Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool The agentic security tool identifies potentially exploitable code flaws, traces attack paths, and recommends targeted remediations. The post Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool appeared first on SecurityWeek . Capital One Open Sources AI-Powered ‘VulnHunter’ Security Tool - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecuri…

securityweek · tlp:amber · 7/20/2026, 9:36:15 AM

Hugging Face Hacked in Autonomous AI Attack Targeting production infrastructure, the attack compromised internal datasets and service credentials. The post Hugging Face Hacked in Autonomous AI Attack appeared first on SecurityWeek . Hugging Face Hacked in Autonomous AI Attack - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference Malware & Threat…

securityweek · tlp:amber · 7/20/2026, 8:12:19 AM

Chrome 150 Update Patches Severe Memory Safety Bugs The fresh security update resolves six critical and high-severity use-after-free vulnerabilities. The post Chrome 150 Update Patches Severe Memory Safety Bugs appeared first on SecurityWeek . Chrome 150 Update Patches Severe Memory Safety Bugs - SecurityWeek CONFERENCE Cloud & Data Security Summit - Watch Sessions on Demand SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference M…

securityweek · tlp:amber · 7/20/2026, 5:21:29 AM

WP2Shell WordPress Vulnerabilities Exploited in the Wild Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure. The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek . WP2Shell WordPress Vulnerabilities Exploited in the Wild - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts…

securityweek · tlp:amber · 7/17/2026, 2:27:54 PM

In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint Noteworthy stories that might have slipped under the radar: OpenClaw AI agents exploited via WhatsApp, ransomware hits naval defense firm TKMS, Lidl discloses data breach. The post In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint appeared first on SecurityWeek . In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Bluepri…

securityweek · tlp:amber · 7/17/2026, 12:11:22 PM

Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive (Video) Artificial intelligence is transforming cybersecurity, but are governance, compliance, and security practices evolving fast enough to keep up? The post Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive appeared first on SecurityWeek . Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive - SecurityWeek Virtual Event Today: Cloud & Data Security Summi…

securityweek · tlp:amber · 7/17/2026, 11:43:36 AM

Beacon Security Raises $13 Million for Security Data Platform The startup helps organizations detect, hunt, and protect their assets across environments at machine speed. The post Beacon Security Raises $13 Million for Security Data Platform appeared first on SecurityWeek . Beacon Security Raises $13 Million for Security Data Platform - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts V…

securityweek · tlp:amber · 7/17/2026, 11:08:04 AM

Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday Industry professionals broadly agree that the suspension pauses third-party CMMC audits but not the underlying legal obligation to protect CUI. The post Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday appeared first on SecurityWeek . Industry Reactions to Pentagon Suspending CMMC Phase 2: Feedback Friday - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Even…

securityweek · tlp:amber · 7/17/2026, 9:06:27 AM

Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei The company disconnected its systems on July 13 and is starting to gradually restore operations. The post Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei appeared first on SecurityWeek . Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity …

securityweek · tlp:amber · 7/17/2026, 8:31:00 AM

Risk Ledger Raises $32 Million in Series B Funding The British firm has built a collaborative platform to help organizations address supply chain security risks. The post Risk Ledger Raises $32 Million in Series B Funding appeared first on SecurityWeek . Risk Ledger Raises $32 Million in Series B Funding - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersec…

securityweek · tlp:amber · 7/17/2026, 7:15:59 AM

Fresh SharePoint Vulnerability Exploited Soon After Disclosure The critical-severity security defect allows remote, authenticated attackers to execute arbitrary code on the server. The post Fresh SharePoint Vulnerability Exploited Soon After Disclosure appeared first on SecurityWeek . Fresh SharePoint Vulnerability Exploited Soon After Disclosure - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity New…

securityweek · tlp:amber · 7/17/2026, 6:23:08 AM

Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack The company says the incident has not affected product quality and safety, nor Fairlife’s Canada production. The post Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack appeared first on SecurityWeek . Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity …

securityweek · tlp:amber · 7/16/2026, 3:15:00 PM

Legacy Systems, Real-World Impacts: The Reality of OT Security Legacy systems, safety concerns, and critical infrastructure risks make OT vulnerability disclosure one of cybersecurity's most challenging balancing acts. The post Legacy Systems, Real-World Impacts: The Reality of OT Security appeared first on SecurityWeek . Legacy Systems, Real-World Impacts: The Reality of OT Security - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress S…

securityweek · tlp:amber · 7/16/2026, 1:21:12 PM

Two Scattered Spider Hackers Sentenced to Jail in UK Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL). The post Two Scattered Spider Hackers Sentenced to Jail in UK appeared first on SecurityWeek . Two Scattered Spider Hackers Sentenced to Jail in UK - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybe…

securityweek · tlp:amber · 7/16/2026, 1:00:00 PM

AI Data Centers Are Being Built Faster Than They Can Be Secured AI infrastructure introduces new security risks that traditional data center designs were never built to handle. The post AI Data Centers Are Being Built Faster Than They Can Be Secured appeared first on SecurityWeek . AI Data Centers Are Being Built Faster Than They Can Be Secured - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News …

securityweek · tlp:amber · 7/16/2026, 12:43:59 PM

‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency. The post ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing appeared first on SecurityWeek . 'ClickLock Stealer' Bypasses macOS Security With Social Engineering, Process Killing - SecurityWeek Virtual Event Today: Cloud & Data Security Su…

securityweek · tlp:amber · 7/16/2026, 11:23:56 AM

Oak Emerges From Stealth Mode With $60 Million in Funding The startup has built an AI-powered Identity Operating System that governs all identities across an organization’s environment. The post Oak Emerges From Stealth Mode With $60 Million in Funding appeared first on SecurityWeek . Oak Emerges From Stealth Mode With $60 Million in Funding - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Web…

securityweek · tlp:amber · 7/16/2026, 10:54:34 AM

Splunk, Zoom Patch Critical Vulnerabilities The flaws could allow attackers to access credentials and data, take over accounts, and escalate their privileges. The post Splunk, Zoom Patch Critical Vulnerabilities appeared first on SecurityWeek . Splunk, Zoom Patch Critical Vulnerabilities - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cybersecurity Conference …

securityweek · tlp:amber · 7/16/2026, 9:20:10 AM

F5 Patches Multiple NGINX, BIG-IP Vulnerabilities Attackers could exploit the bugs to modify configurations, terminate or restart processes, cross security boundaries, leak memory, and execute code. The post F5 Patches Multiple NGINX, BIG-IP Vulnerabilities appeared first on SecurityWeek . F5 Patches Multiple NGINX, BIG-IP Vulnerabilities - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcas…

securityweek · tlp:amber · 7/16/2026, 8:49:27 AM

China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures. The post China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans appeared first on SecurityWeek . China's Top Cybersecurity Firms Hit by Mounting Military Procurement Bans - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event…

securityweek · tlp:amber · 7/16/2026, 7:59:22 AM

Old UEFI Shims Expose Systems to Secure Boot Bypass Signed by Microsoft, the vulnerable UEFI shim bootloaders could be abused on any system, regardless of the OS. The post Old UEFI Shims Expose Systems to Secure Boot Bypass appeared first on SecurityWeek . Old UEFI Shims Expose Systems to Secure Boot Bypass - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events ICS: ICS Cyber…

securityweek · tlp:amber · 7/16/2026, 6:48:40 AM

Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day The researcher stripped the proof-of-concept (PoC) exploit to prevent immediate exploitation of the vulnerability. The post Nightmare Eclipse Drops ‘LegacyHive’ Windows Zero-Day appeared first on SecurityWeek . Nightmare Eclipse Drops 'LegacyHive' Windows Zero-Day - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcas…

securityweek · tlp:amber · 7/16/2026, 6:08:08 AM

Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products. The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek . Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NE…

securityweek · tlp:amber · 7/15/2026, 2:37:13 PM

Unpatched Cursor Vulnerability Exposes Users to Code Execution An attacker can create a malicious repository containing a git.exe in the project root, and Cursor executes it automatically. The post Unpatched Cursor Vulnerability Exposes Users to Code Execution appeared first on SecurityWeek . Unpatched Cursor Vulnerability Exposes Users to Code Execution - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecu…

securityweek · tlp:amber · 7/15/2026, 2:07:44 PM

CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities Three vulnerabilities are actively exploited in attacks, including two that have been targeted as zero-days. The post CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities appeared first on SecurityWeek . CISA Urges Immediate Patching of Exploited SharePoint Vulnerabilities - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cyber…

securityweek · tlp:amber · 7/15/2026, 1:00:00 PM

Windows Bind Link Attacks Can Hide Malware From EDR Tools Bitdefender researchers show how Windows bind links can create conflicting filesystem views to hide malware from endpoint security products. The post Windows Bind Link Attacks Can Hide Malware From EDR Tools appeared first on SecurityWeek . Windows Bind Link Attacks Can Hide Malware From EDR Tools - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecu…

securityweek · tlp:amber · 7/15/2026, 12:52:10 PM

Virtual Event Today: Cloud & Data Security Summit Attendees will be able to interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments. The post Virtual Event Today: Cloud & Data Security Summit appeared first on SecurityWeek . Virtual Event Today: Cloud & Data Security Summit - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecu…

securityweek · tlp:amber · 7/15/2026, 11:58:05 AM

US Charges Russian Individuals and Firms for Running Cybercrime Services The suspects and their companies were previously sanctioned by the United States and its allies. The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek . US Charges Russian Individuals and Firms for Running Cybercrime Services - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersec…

securityweek · tlp:amber · 7/15/2026, 11:02:57 AM

Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow A critical security defect in the ServiceNow AI platform could allow remote attackers to execute arbitrary code. The post Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow appeared first on SecurityWeek . Vulnerabilities Patched by Fortinet, Ivanti, ServiceNow - SecurityWeek Virtual Event Today: Cloud & Data Security Summit - Join Event In-Progress SECURITYWEEK NETWORK: Cybersecurity News Webcasts Virtual Events …