Collaborate Disseminate
The decision follows BOD 26-04, which directs federal organizations to prioritize vulnerabilities based on real-world risk.
The post CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot appeared first on SecurityWeek.
Continue reading CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
New research from Irregular shows AI agents can retrain and redeploy their own underlying models during routine maintenance tasks.
The post AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals appeared first on SecurityWeek.
Continue reading AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals
Google announced patches for the exploited privilege escalation vulnerability (CVE-2026-58704) on September 15.
The post Pixel Modem Zero-Day Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Pixel Modem Zero-Day Exploited in Targeted Attacks
US, UK, and Dutch government agencies published a report detailing the malware, and the FBI described the abuse of Telegram for C&C.
The post US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware appeared first on S… Continue reading US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware
The vulnerability, tracked as CVE-2026-5430, can be exploited to gain access to valuable enterprise data.
The post Enterprises Warned of Attacks Exploiting WSO2 Vulnerability appeared first on SecurityWeek.
Continue reading Enterprises Warned of Attacks Exploiting WSO2 Vulnerability
A hacker claims to have stolen 7.5 million customer records after breaching the company’s systems.
The post Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data appeared first on SecurityWeek.
Continue reading Texas Utility CenterPoint Energy Confirms Breach After Hacker Leaks Data
The incident occurred in May, when RubyGems maintainers suspended new account registrations due to what appeared like malicious activity.
The post OpenAI Investigates Report Linking AI Agents to RubyGems Attack appeared first on SecurityWeek.
Continue reading OpenAI Investigates Report Linking AI Agents to RubyGems Attack
The Humanist AI Code of Conduct draws a line between defensive cyber research and operational attack capability.
The post Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints appeared first on SecurityWeek.
Continue reading Microsoft AI Code of Conduct Sets Cyberattack Boundaries, Chain of Command, Safety Constraints
An unauthenticated attacker can exploit CVE-2026-76461 to execute arbitrary commands on the underlying OS with root privileges.
The post Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation appeared first on SecurityWeek.
Continue reading Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation
Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records.
The post Telus Warns Customers of Account Breaches appeared first on SecurityWeek.
Continue reading Telus Warns Customers of Account Breaches