Collaborate Disseminate
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
The post XWorm RAT Evolves Into Surveillance Platform appeared first on SecurityWeek.
Continue reading XWorm RAT Evolves Into Surveillance Platform
A small circuit board hidden under the signers’ screens read user data and transmitted it to the attackers.
The post $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant appeared first on SecurityWeek.
Continue reading $86 Million Crypto Heist Linked to Ledger Signer Hardware Implant
The company says it took some of its systems offline to contain a security issue within its network.
The post Cyberattack Prompts Ahold Delhaize to Disconnect Systems appeared first on SecurityWeek.
Continue reading Cyberattack Prompts Ahold Delhaize to Disconnect Systems
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
The post Refrigeration Controller Hack Spoils Food Across European Supermarkets appeared first on SecurityWeek.
Continue reading Refrigeration Controller Hack Spoils Food Across European Supermarkets
Oleg Korniev was a leader of YMCO, a sophisticated network of money mules that helped hackers move funds outside the US.
The post Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US appeared first on SecurityWeek.
Continue reading Mastermind of 15,000-Mule Cybercrime Laundering Network Pleads Guilty in US
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.
Continue reading iRhythm Data Breach Impacts at Least 360,000 People
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.
Continue reading Critical SonicWall Vulnerability Exploited Days After Disclosure
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.
Continue reading Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch
Hackers hijacked the .gh, .sl, and .as ccTLDs and obtained HTTPS certificates for several Google domains.
The post Google Domains Impacted by Recent ccTLD Hijacks appeared first on SecurityWeek.
Continue reading Google Domains Impacted by Recent ccTLD Hijacks
The flaws, CVE-2026-105133 and CVE-2026-105134, allow attackers to bypass authentication and inject OS commands.
The post Unpatched AhsayCBS Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Continue reading Unpatched AhsayCBS Vulnerabilities Exploited in the Wild