Collaborate Disseminate
Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs.
The post Atlassian, GitLab, Zoom Release Security Patches appeared first on SecurityWeek.
Continue reading Atlassian, GitLab, Zoom Release Security Patches
The startup’s platform leverages AI to automate forensic investigations, accelerating incident response.
The post Asymmetric Security Emerges From Stealth With $4.2 Million in Funding appeared first on SecurityWeek.
Continue reading Asymmetric Security Emerges From Stealth With $4.2 Million in Funding
The hackers trick victims into accessing GitHub or GitLab repositories that are opened using Visual Studio Code.
The post North Korean Hackers Target macOS Developers via Malicious VS Code Projects appeared first on SecurityWeek.
Continue reading North Korean Hackers Target macOS Developers via Malicious VS Code Projects
Impacting Anthropic’s official MCP server, the vulnerabilities can be exploited through prompt injections.
The post Anthropic MCP Server Flaws Lead to Code Execution, Data Exposure appeared first on SecurityWeek.
Continue reading Anthropic MCP Server Flaws Lead to Code Execution, Data Exposure
Oracle’s January 2026 CPU resolves roughly 230 unique vulnerabilities across more than 30 products.
The post Oracle’s First 2026 CPU Delivers 337 New Security Patches appeared first on SecurityWeek.
Continue reading Oracle’s First 2026 CPU Delivers 337 New Security Patches
The two bugs, an arbitrary file read and an SSRF bug, can be exploited without user interaction to leak credentials, databases, and other data.
The post Chainlit Vulnerabilities May Leak Sensitive Information appeared first on SecurityWeek.
Continue reading Chainlit Vulnerabilities May Leak Sensitive Information
Providing cyberespionage and remote code execution capabilities, the malware is executed via DLL sideloading.
The post APT-Grade PDFSider Malware Used by Ransomware Groups appeared first on SecurityWeek.
Continue reading APT-Grade PDFSider Malware Used by Ransomware Groups
A simple payload allowed attackers to create a new event leaking summaries of the victim’s private meetings.
The post Weaponized Invite Enabled Calendar Data Theft via Google Gemini appeared first on SecurityWeek.
Continue reading Weaponized Invite Enabled Calendar Data Theft via Google Gemini
Operating as an access broker, the defendant sold unauthorized access to compromised networks to an undercover agent.
The post Jordanian Admits in US Court to Selling Access to 50 Enterprise Networks appeared first on SecurityWeek.
Continue reading Jordanian Admits in US Court to Selling Access to 50 Enterprise Networks
The information stealer abuses legitimate APIs and libraries to exfiltrate data to Discord webhooks.
The post ‘SolyxImmortal’ Information Stealer Emerges appeared first on SecurityWeek.
Continue reading ‘SolyxImmortal’ Information Stealer Emerges