Collaborate Disseminate
The admission comes days after Hugging Face disclosed an attack powered by autonomous AI agents.
The post OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face appeared first on SecurityWeek.
Continue reading OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face
A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure.
The post Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data appeared first on SecurityWeek.
Continue reading Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data
The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.
The post Exploitation of ServiceNow Vulnerability Seen Days After Disclosure appeared first on SecurityWeek.
Continue reading Exploitation of ServiceNow Vulnerability Seen Days After Disclosure
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek.
Continue reading SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.
The post New Index Tracks Material Breaches — And Refuses to Add Up the Losses appeared first on SecurityWeek.
Continue reading New Index Tracks Material Breaches — And Refuses to Add Up the Losses
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.
The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Continue reading WP2Shell WordPress Vulnerabilities Exploited in the Wild
Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).
The post Two Scattered Spider Hackers Sentenced to Jail in UK appeared first on SecurityWeek.
Continue reading Two Scattered Spider Hackers Sentenced to Jail in UK
The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency.
The post ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing appeared first on SecurityWeek.
Continue reading ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing
Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures.
The post China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans appeared first on SecurityWeek.
Continue reading China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans
The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.
The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek.
Continue reading Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities