The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek.

The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold. 

The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns appeared first on SecurityWeek.

Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states.

The post New Jersey, Alabama Join States Targeted in Water Cyberattacks appeared first on SecurityWeek.

CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.

The post Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility appeared first on SecurityWeek.

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.

The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek.

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.

The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on SecurityWeek.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

The post Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix appeared first on SecurityWeek.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

The post Snowflake Hacker Pleads Guilty in US Court appeared first on SecurityWeek.

Zenity researchers reported the findings to Anthropic and OpenAI in late 2025 and early 2026, but they remain unpatched.

The post Zero-Click AI Browser Hacking: Claude and ChatGPT Atlas Hijacked via Emails, X Posts appeared first on SecurityWeek.

The incident involved a testing environment set up by Irregular, similar to what Anthropic reported last week.

The post Meta AI Hacked External Systems During Cybersecurity Testing appeared first on SecurityWeek.

The chain involved the exploitation of several vulnerabilities in the Samsung Members and Samsung Account applications.

The post How a $50,000 Exploit Chain Turned Bixby Against Samsung Phones  appeared first on SecurityWeek.

Palo Alto Networks researchers have demonstrated attacks against Google’s synced passkey implementation.

The post New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts appeared first on SecurityWeek.

The guidelines are the work of the recently launched Open Secure AI Alliance, which now includes 120 organizations.

The post Cybersecurity Alliance Drafts SAFE Guidelines for Sharing AI Incident Data  appeared first on SecurityWeek.

Forescout researchers have found 15 new vulnerabilities in the TP-Link Omada networking ecosystem.

The post TP-Link Omada ZTP Vulnerabilities Chain Into Full Network Takeover appeared first on SecurityWeek.

The biggest single reward paid out by Microsoft between July 1, 2025, and June 30, 2026, was $200,000.

The post Microsoft Bug Bounty Program: $20 Million Paid to 500 Researchers appeared first on SecurityWeek.

The N‑central vulnerability CVE-2026-18577 has been exploited in the wild after threat actors found a patch bypass.

The post N‑able Patches Vulnerability Exploited to Hack N-central Servers appeared first on SecurityWeek.

A security company’s systems were hacked after it installed a malicious Python package deployed by Claude. 

The post Prompted by OpenAI Disclosure, Anthropic Finds Its Own Models Hacked 3 Organizations appeared first on SecurityWeek.

The vulnerability tracked as CVE-2026-20316 can be exploited by a remote, unauthenticated attacker to log into affected devices. 

The post Cisco Secure FMC Zero-Day Exploited in the Wild appeared first on SecurityWeek.

The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.

The post ThreatLocker Raises $190 Million in Series F Funding appeared first on SecurityWeek.

A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion.

The post Critical VM Escape Vulnerability Patched in VMware ESXi appeared first on SecurityWeek.