France summoned the Iranian ambassador and said it would seek European sanctions against those responsible for the attack

The post France Blames Iran for a Cyberattack That Heated Supermarket Refrigerators appeared first on SecurityWeek.

The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.

The post Chrome Update Patches Exploited XML Zero-Day, Eighth This Year appeared first on SecurityWeek.

Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

The post Revolve Puts Data Breach Victim Count at 1.5 Million appeared first on SecurityWeek.

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek.

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

The post Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers appeared first on SecurityWeek.

Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.

The post Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web appeared first on SecurityWeek.

The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.

The post Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH appeared first on SecurityWeek.

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

The post Amplifon Americas Data Breach Impacts 1.3 Million appeared first on SecurityWeek.

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

The post Over 3 Million People Hit by Frontline Education Data Breach appeared first on SecurityWeek.

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

The post Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack appeared first on SecurityWeek.

Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses.

The post Brava Security Emerges From Stealth With $15 Million in Funding appeared first on SecurityWeek.

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

The post SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins appeared first on SecurityWeek.

The emergency package comes after dozens of companies and government agencies were hit by unauthorized access to their systems and leaks of client data, prompting uneasiness across Japan.

The post Japan Announces Emergency Cybersecurity Package Following a Wave of Attacks appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands.

The post In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days appeared first on SecurityWeek.

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses.

The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek.

Rated Critical for cybersecurity, OpenAI’s new model beats GPT-5.6 Cyber at exploitation while staying in scope more reliably.

The post OpenAI Says New GPT-6 Cyber Model Hunts Flaws Without Crossing the Line appeared first on SecurityWeek.

The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.

The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek.

The October incident will cut fourth-quarter sales by up to €250 million and has led Ahold Delhaize to lower its 2026 outlook.

The post Grocery Giant Ahold Delhaize Estimates Financial Toll of October Cyberattack appeared first on SecurityWeek.

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

The post Researchers Find Residential Proxies on White House Network appeared first on SecurityWeek.

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek.