Collaborate Disseminate
Cisco’s AI security researchers have analyzed ways to target vision-language models (VLMs) using pixel-level perturbation.
The post Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes appeared first on SecurityWeek.
Continue reading Attackers Could Exploit AI Vision Models Using Imperceptible Image Changes
Dragos has published a report describing how threat actors used Claude AI in an attack on a water and drainage utility in Mexico.
The post Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion appeared first on SecurityWeek.
Continue reading Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion
Gavril Sandu, 53, was indicted in 2017, but was arrested and extradited to the United States only in 2026.
The post Romanian Extradited to US for Role in Hacking Scheme 17 Years Ago appeared first on SecurityWeek.
Continue reading Romanian Extradited to US for Role in Hacking Scheme 17 Years Ago
The agency has issued guidance to help critical infrastructure operators prepare for cyberattacks by foreign threat actors.
The post CISA: Critical Infrastructure Must Master Isolation, Recovery appeared first on SecurityWeek.
Continue reading CISA: Critical Infrastructure Must Master Isolation, Recovery
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.
The post Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls appeared first on SecurityWeek.
Continue reading Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
The malicious emails claim to contain a conduct report and lure victims to a Microsoft phishing website that leverages AitM.
The post Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations appeared first on SecurityWeek.
Continue reading Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations
CVE-2026-0073 affects Android’s System component and it can be exploited without any user interaction.
The post Critical Remote Code Execution Vulnerability Patched in Android appeared first on SecurityWeek.
Continue reading Critical Remote Code Execution Vulnerability Patched in Android
The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year.
The post WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities appeared first on SecurityWeek.
Continue reading WhatsApp Discloses File Spoofing, Arbitrary URL Scheme Vulnerabilities
The cybersecurity firm’s investigation has not found any impact on its source code release or distribution process.
The post Trellix Source Code Repository Breached appeared first on SecurityWeek.
Continue reading Trellix Source Code Repository Breached
Significant cybersecurity M&A deals announced by Airbus, Cyera, Fortra, Palo Alto Networks, Silverfort, and Socket.
The post Cybersecurity M&A Roundup: 33 Deals Announced in April 2026 appeared first on SecurityWeek.
Continue reading Cybersecurity M&A Roundup: 33 Deals Announced in April 2026