Collaborate Disseminate
The root cause of the incident is believed to be a compromised AWS access key that was exposed in publicly available JavaScript build artifacts.
The post Over 1,000 Charities Hit by Beacon CRM Data Breach appeared first on SecurityWeek.
Continue reading Over 1,000 Charities Hit by Beacon CRM Data Breach
Significant cybersecurity M&A deals announced by Barracuda, CrowdStrike, Cyera, Okta, Palo Alto Networks, and Qualcomm.
The post Cybersecurity M&A Roundup: 21 Deals Announced in July 2026 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 21 Deals Announced in July 2026
Contracts may require a $1 million bond, which will be forfeited if a company fails to comply with operational requirements.
The post White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs appeared first on SecurityWeek.
Continue reading White House Mobilizes Security Firms for Operations Against Foreign Cybercrime Gangs
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
The post SharePoint Vulnerability Exploited Shortly After PoC Release appeared first on SecurityWeek.
Continue reading SharePoint Vulnerability Exploited Shortly After PoC Release
Signal has also made a security announcement: an automatic key verification feature to complement its safety number system.
The post WhatsApp Unveils New Scam Alert Feature appeared first on SecurityWeek.
Continue reading WhatsApp Unveils New Scam Alert Feature
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
The post Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined appeared first on SecurityWeek.
Continue reading Chipmaker Patch Tuesday: Intel, AMD Fix Over 80 Vulnerabilities Combined
CISA has also published several advisories describing vulnerabilities in ICS and other OT products.
The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact appeared first on SecurityWeek.
Continue reading ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Phoenix Contact
CVE-2026-20349 can be exploited remotely without authentication against Secure Firewall ASA and FTD devices.
The post Cisco Patches Firewall Zero-Day Exploited for DoS Attacks appeared first on SecurityWeek.
Continue reading Cisco Patches Firewall Zero-Day Exploited for DoS Attacks
The Water Watch Center launched at DEF CON aims to help under-resourced utilities protect their systems against hackers.
The post US Water Systems Get Cyber Boost From New Senate Bill and ‘Water Watch Center’ appeared first on SecurityWeek.
Continue reading US Water Systems Get Cyber Boost From New Senate Bill and ‘Water Watch Center’
The extension amassed over 300,000 installs and a 4.6 rating before Google removed it for stealing data.
The post Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities appeared first on SecurityWeek.
Continue reading Extension Banned for Stealing AI Chats Returns to Chrome Store, Resumes Malicious Activities