Collaborate Disseminate
The attackers used a compromised BigCommerce application key held by Ribon to access customer data.
The post BigCommerce Data Stolen via Ribon Apps Hack appeared first on SecurityWeek.
Continue reading BigCommerce Data Stolen via Ribon Apps Hack
A Chinese threat actor has exploited the bug to exfiltrate sensitive information from nearly 1,000 ZyXEL switches.
The post Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers appeared first on SecurityWeek.
Continue reading Recent ZyXEL Switch Vulnerability Exploited by Chinese Hackers
Posing as the legitimate sorted-btree package, indexed-btree hides a malware trigger in its prototype method.
The post Malicious B-tree NPM Package Accumulates Millions of Downloads appeared first on SecurityWeek.
Continue reading Malicious B-tree NPM Package Accumulates Millions of Downloads
The bug lets attackers automatically install and preview themes and could lead to remote code execution.
The post WordPress Patches ‘Click2Shell’ Vulnerability appeared first on SecurityWeek.
Continue reading WordPress Patches ‘Click2Shell’ Vulnerability
The attackers impersonate at least 40 companies and disable 145 security products to deploy infostealer malware.
The post Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer appeared first on SecurityWeek.
Continue reading Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
The malware relies on AI for real-time device navigation and control, increasing adaptability and evasion.
The post RatHat Android Trojan Uses AI for Automation appeared first on SecurityWeek.
Continue reading RatHat Android Trojan Uses AI for Automation
The cybersecurity firm believes the data breach was the result of the May 2026 TanStack supply chain attack.
The post CrowdSec Confirms Source Code Stolen in Supply Chain Attack appeared first on SecurityWeek.
Continue reading CrowdSec Confirms Source Code Stolen in Supply Chain Attack
Attackers could exploit the flaws to cause denial-of-service conditions, disclose memory, or modify memory.
The post Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities appeared first on SecurityWeek.
Continue reading Organizations Warned of 3 Exploited Linux Kernel Vulnerabilities
The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.
The post TigerByte Cyber Emerges From Stealth With $3 Million in Funding appeared first on SecurityWeek.
Continue reading TigerByte Cyber Emerges From Stealth With $3 Million in Funding
Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.
The post NightmareStresser DDoS Service Disrupted in International Operation appeared first on SecurityWeek.
Continue reading NightmareStresser DDoS Service Disrupted in International Operation