Collaborate Disseminate
The 44-year-old individual planted remote access malware on a logistics firm’s systems, with help from employees.
The post Dutch Port Hacker Sentenced to Prison appeared first on SecurityWeek.
Continue reading Dutch Port Hacker Sentenced to Prison
Hackers stole complete customer information, including contact details, national identity numbers, and payment details.
The post Spanish Energy Company Endesa Hacked appeared first on SecurityWeek.
Continue reading Spanish Energy Company Endesa Hacked
The social media platform confirmed that the issue allowed third parties to send password reset emails to Instagram users.
The post Instagram Fixes Password Reset Vulnerability Amid User Data Leak appeared first on SecurityWeek.
Continue reading Instagram Fixes Password Reset Vulnerability Amid User Data Leak
APT28 was seen impersonating popular webmail and VPN services, including Microsoft OWA, Google, and Sophos VPN portals.
The post Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities appeared first on SecurityWeek.
Continue reading Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities
Threat actors are hunting for misconfigured proxy servers to gain access to APIs for various LLMs.
The post LLMs in Attacker Crosshairs, Warns Threat Intel Firm appeared first on SecurityWeek.
Continue reading LLMs in Attacker Crosshairs, Warns Threat Intel Firm
The company will use the investment to accelerate platform adoption and expansion into the federal market.
The post Torq Raises $140 Million at $1.2 Billion Valuation appeared first on SecurityWeek.
Continue reading Torq Raises $140 Million at $1.2 Billion Valuation
The North Korean state-sponsored espionage group Kimsuky has targeted government organizations, think tanks, and academic institutions.
The post FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes appeared first on SecurityWeek.
Continue reading FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
The post CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over appeared first on SecurityWeek.
Continue reading CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over
Radware bypassed ChatGPT’s protections to exfiltrate user data and implant a persistent logic into the agent’s long-term memory.
The post ‘ZombieAgent’ Attack Let Researchers Take Over ChatGPT appeared first on SecurityWeek.
Continue reading ‘ZombieAgent’ Attack Let Researchers Take Over ChatGPT
Fresh attacks targeted three VMware ESXi vulnerabilities that were disclosed in March 2025 as zero-days.
The post Exploit for VMware Zero-Day Flaws Likely Built a Year Before Public Disclosure appeared first on SecurityWeek.
Continue reading Exploit for VMware Zero-Day Flaws Likely Built a Year Before Public Disclosure