Sotheby's has disclosed a data breach impacting personal information, including SSNs.

The post Hackers Steal Sensitive Data From Auction House Sotheby’s appeared first on SecurityWeek.

An attacker can exploit the flaws to put devices into a permanent DoS condition that prevents remote restoration.

The post Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices appeared first on SecurityWeek.

The tech giant attributed the attacks to Vanilla Tempest, also known as Vice Spider and Vice Society.

The post Microsoft Revokes Over 200 Certificates to Disrupt Ransomware Campaign appeared first on SecurityWeek.

Fuji Electric has released patches and Japan’s JPCERT has informed organizations about the vulnerabilities. 

The post Fuji Electric HMI Configurator Flaws Expose Industrial Organizations to Hacking appeared first on SecurityWeek.

More information has come to light on the cyberattack disclosed this week by F5, including on attribution and potential risks.

The post F5 Hack: Attack Linked to China, BIG-IP Flaws Patched, Governments Issue Alerts  appeared first on SecurityWeek.

This is LevelBlue’s third acquisition this year, after Trustwave and Aon’s Cybersecurity & IP Litigation Consulting groups.

The post Cybereason to Be Acquired by MSSP Giant LevelBlue appeared first on SecurityWeek.

Hackers have posted over 1 Tb of information allegedly stolen from Harvard on the Cl0p data leak website.

The post Harvard Is First Confirmed Victim of Oracle EBS Zero-Day Hack appeared first on SecurityWeek.

Google has released a partial patch for the Pixnapping attack and is working on an additional fix.

The post Pixnapping Attack Steals Data From Google, Samsung Android Phones appeared first on SecurityWeek.

Apple has announced significant updates to its bug bounty program, including new categories and target flags.

The post Apple Bug Bounty Update: Top Payout $2 Million, $35 Million Paid to Date appeared first on SecurityWeek.

Google researchers believe exploitation may have started as early as July 10 and the campaign hit dozens of organizations.

The post Sophisticated Malware Deployed in Oracle EBS Zero-Day Attacks appeared first on SecurityWeek.

The company said there is no evidence that confidential client data was stolen from its systems.

The post Chinese Hackers Breached Law Firm Williams & Connolly via Zero-Day appeared first on SecurityWeek.

The new product is called CodeMender and it can rewrite vulnerable code to prevent future exploits. 

The post Google DeepMind’s New AI Agent Finds and Fixes Vulnerabilities  appeared first on SecurityWeek.

Radiflow360 provides enhanced visibility, risk management, and incident response capabilities for mid-sized industrial enterprises. 

The post Radiflow Unveils New OT Security Platform appeared first on SecurityWeek.

Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks.

The post Exploitation of Oracle EBS Zero-Day Started 2 Months Before Patching appeared first on SecurityWeek.

BK Technologies has informed the SEC that it discovered an IT intrusion on September 20. 

The post Hackers Stole Data From Public Safety Comms Firm BK Technologies appeared first on SecurityWeek.

Significant cybersecurity M&A deals announced by Check Point, CrowdStrike, F5, Mitsubishi Electric, and SentinelOne. 

The post Cybersecurity M&A Roundup: 40 Deals Announced in September 2025 appeared first on SecurityWeek.

The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS and consumer devices.

The post The Y2K38 Bug Is a Vulnerability, Not Just a Date Problem, Researchers Warn appeared first on SecurityWeek.

Doctors Imaging Group is informing customers about a cybersecurity incident nearly a year after it occurred. 

The post Data Breach at Doctors Imaging Group Impacts 171,000 People appeared first on SecurityWeek.

Wiz has teamed up with Microsoft, Google and AWS and is inviting cloud security researchers to its Zeroday.Cloud competition.

The post $4.5 Million Offered in New Cloud Hacking Competition appeared first on SecurityWeek.

Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.

The post Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks appeared first on SecurityWeek.