High-Severity Remote Code Execution Vulnerability Patched in OpenSSL

A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm.
The post High-Severity Remote Code Execution Vulnerability Patched in OpenSSL appeared first on SecurityWeek.
Continue reading High-Severity Remote Code Execution Vulnerability Patched in OpenSSL→

Over 100 Organizations Targeted in ShinyHunters Phishing Campaign

Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.
The post Over 100 Organizations Targeted in ShinyHunters Phishing Campaign appeared first on SecurityWeek.
Continue reading Over 100 Organizations Targeted in ShinyHunters Phishing Campaign→

Microsoft Patches Office Zero-Day Likely Exploited in Targeted Attacks

The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features. 
The post Microsoft Patches Office Zero-Day Likely Exploited in Targeted Attacks appeared first on SecurityWeek.
Continue reading Microsoft Patches Office Zero-Day Likely Exploited in Targeted Attacks→

Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms

More than 20 vulnerabilities were found and patched in Dormakaba physical access control systems.
The post Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms appeared first on SecurityWeek.
Continue reading Access System Flaws Enabled Hackers to Unlock Doors at Major European Firms→

Nike Probing Potential Security Incident as Hackers Threaten to Leak Data

The WorldLeaks cybercrime group claims to have stolen information from the footwear and apparel giant’s systems.
The post Nike Probing Potential Security Incident as Hackers Threaten to Leak Data appeared first on SecurityWeek.
Continue reading Nike Probing Potential Security Incident as Hackers Threaten to Leak Data→