Collaborate Disseminate
Cameron John Wagenius was sentenced to 70 months in prison for stealing information from the wireless carriers.
The post Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon appeared first on SecurityWeek.
Continue reading Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon
The Medicaid IDs and other information of Medicaid and DC Healthcare Alliance beneficiaries were exposed.
The post DC Health Agency Exposes 400,000 Beneficiary Records appeared first on SecurityWeek.
Continue reading DC Health Agency Exposes 400,000 Beneficiary Records
The extortion group has modified its exploit in new attacks targeting the PeopleSoft vulnerability CVE-2026-35273.
The post Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign appeared first on SecurityWeek.
Continue reading Google Warns of ShinyHunters’ Fresh Oracle PeopleSoft Campaign
The company says the measure was precautionary and that it has no evidence of Kiteworks or customer systems being compromised.
The post Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability appeared first on SecurityWeek.
Continue reading Kiteworks Urges Server Shutdown, Finds Advanced Forms Vulnerability
The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.
The post New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining appeared first on SecurityWeek.
Continue reading New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining
Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.
The post Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court appeared first on SecurityWeek.
Continue reading Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
The post ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration appeared first on Se… Continue reading ‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek.
Continue reading Roundcube Webmail Vulnerability in Attackers’ Crosshairs
The startup’s runtime enforcement platform evaluates AI agents in real time to provide visibility and control over their actions.
The post Kontext Security Emerges With $4 Million for AI Agent Runtime Controls appeared first on SecurityWeek.
Continue reading Kontext Security Emerges With $4 Million for AI Agent Runtime Controls
A threat actor is using three AI harnesses for vulnerability research, exploitation, and attack orchestration.
The post AI-Powered Campaign Targets Hundreds of Online Retailers appeared first on SecurityWeek.
Continue reading AI-Powered Campaign Targets Hundreds of Online Retailers