The U.S. is the top target for cyberattacks, with criminals and foreign adversaries targeting companies, governments and organizations.

The post Microsoft: Russia, China Increasingly Using AI to Escalate Cyberattacks on the US appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Capita fined £14 million, ICTBroadcast vulnerability exploited, Spyware maker NSO acquired.

The post In Other News: CrowdStrike Vulnerabilities, CISA Layoffs, Mango Data Breach appeared first on SecurityWeek.

Set for January 2026 at Automotive World in Tokyo, the contest will have six categories, including Tesla, infotainment systems, EV chargers, and automotive OSes.

The post Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026 appeared first on SecurityWeek.

Sotheby's has disclosed a data breach impacting personal information, including SSNs.

The post Hackers Steal Sensitive Data From Auction House Sotheby’s appeared first on SecurityWeek.

CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes.

The post ‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability appeared first on SecurityWeek.

Hackers stole names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information.

The post Prosper Data Breach Impacts 17.6 Million Accounts appeared first on SecurityWeek.

An attacker can exploit the flaws to put devices into a permanent DoS condition that prevents remote restoration.

The post Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices appeared first on SecurityWeek.

The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue.

The post Gladinet Patches Exploited CentreStack Vulnerability appeared first on SecurityWeek.

The tech giant attributed the attacks to Vanilla Tempest, also known as Vice Spider and Vice Society.

The post Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign appeared first on SecurityWeek.

AISLE aims to automate the vulnerability remediation process by detecting, exploiting, and patching software vulnerabilities in real time.

The post AISLE Emerges From Stealth With AI-Based Reasoning System to Remediate Vulnerabilities on the Fly appeared first on SecurityWeek.

The company’s AI Security Engineer autonomously keeps enterprise data protected across devices and environments.

The post Matters.AI Raises $6.25 Million to Safeguard Enterprise Data appeared first on SecurityWeek.

A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August.

The post Organizations Warned of Exploited Adobe AEM Forms Vulnerability appeared first on SecurityWeek.

Fuji Electric has released patches and Japan’s JPCERT has informed organizations about the vulnerabilities. 

The post Fuji Electric HMI Configurator Flaws Expose Industrial Organizations to Hacking appeared first on SecurityWeek.

Threat actors are exploiting CVE-2025-20352, a recent Cisco zero-day, to deploy a rootkit on older networking devices.

The post Cisco Routers Hacked for Rootkit Deployment appeared first on SecurityWeek.

In an indictment, federal prosecutors charged Prince Holding Group chairman Chen Zhi with wire fraud conspiracy and money laundering conspiracy.

The post US Charges Cambodian Executive in Massive Crypto Scam and Seizes More Than $14 Billion in Bitcoin appeared first on SecurityWeek.

Matthew Lane pleaded guilty in May to extorting two companies after hacking into their networks and stealing information.

The post Four-Year Prison Sentence for PowerSchool Hacker appeared first on SecurityWeek.

More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks.

The post F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts  appeared first on SecurityWeek.

Premier industrial cybersecurity conference Offers 70+ sessions, five training courses, and and ICS Village CTF competition.

The post SecurityWeek to Host 2025 ICS Cybersecurity Conference October 27-30 in Atlanta appeared first on SecurityWeek.

Adobe has published a dozen security advisories detailing over 35 vulnerabilities across its product portfolio.

The post Adobe Patches Critical Vulnerability in Connect Collaboration Suite appeared first on SecurityWeek.

The tech giant has rolled out fixes for 173 CVEs, including five critical-severity security defects.

The post Microsoft Patches 173 Vulnerabilities, Including Exploited Windows Flaws appeared first on SecurityWeek.