Collaborate Disseminate
The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.
The post SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch appeared first on SecurityWeek.
Continue reading SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.
The post New Index Tracks Material Breaches — And Refuses to Add Up the Losses appeared first on SecurityWeek.
Continue reading New Index Tracks Material Breaches — And Refuses to Add Up the Losses
Exploitation of the new WordPress vulnerabilities tracked as CVE-2026-60137 and CVE-2026-63030 started soon after disclosure.
The post WP2Shell WordPress Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Continue reading WP2Shell WordPress Vulnerabilities Exploited in the Wild
Thalha Jubair and Owen Flowers were prosecuted over a 2024 cyberattack targeting Transport for London (TfL).
The post Two Scattered Spider Hackers Sentenced to Jail in UK appeared first on SecurityWeek.
Continue reading Two Scattered Spider Hackers Sentenced to Jail in UK
The new macOS malware has targeted at least 100 users to steal their passwords and cryptocurrency.
The post ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing appeared first on SecurityWeek.
Continue reading ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing
Chinese cybersecurity firms are facing action from the country’s military, but it’s not due to product or technical failures.
The post China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans appeared first on SecurityWeek.
Continue reading China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans
The cybersecurity companies patched critical and high-severity vulnerabilities in some of their products.
The post Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities appeared first on SecurityWeek.
Continue reading Trend Micro, Tanium, ESET and Tenable Patch Severe Product Vulnerabilities
The suspects and their companies were previously sanctioned by the United States and its allies.
The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek.
Continue reading US Charges Russian Individuals and Firms for Running Cybercrime Services
The new program stems from an AI-focused Executive Order signed by President Trump on June 2.
The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek.
Continue reading White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative
The industrial giants fixed dozens of vulnerabilities across their ICS products, with advisories also released by CISA and VDE CERT.
The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell appeared first on SecurityWeek.
Continue reading ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Rockwell