The security defects could allow attackers to bypass authorization and gain root access to devices.

The post Recently Patched Barracuda Vulnerabilities Exploited in Attacks appeared first on SecurityWeek.

The cybersecurity startup deploys a dedicated guardian agent for every AI agent in an organization’s environment.

The post WhiteMatter Raises $20 Million in Series A Funding appeared first on SecurityWeek.

SAP has published 42 new and updated security advisories, including nine that address critical-severity vulnerabilities.

The post SAP Patches Critical ICM2SHELL, ProxyGate Vulnerabilities appeared first on SecurityWeek.

Hackers used compromised Qubole IAM credentials to steal customer files, secrets, keys, environment variables, and credentials.

The post Over a Dozen Organizations Hit in Qubole Supply Chain Attack appeared first on SecurityWeek.

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

The post Plex2Shell Exploited Against QNAP NAS Users appeared first on SecurityWeek.

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

The post Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers appeared first on SecurityWeek.

The initial exploitation attempts are attributed to botnets and crypto miners, but other threat actors are expected to follow suit.

The post Hackers Exploiting ‘SSHole’ Authentication Bypass in OpenSSH appeared first on SecurityWeek.

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

The post Amplifon Americas Data Breach Impacts 1.3 Million appeared first on SecurityWeek.

Its multi-agent AI platform generates the telemetry an attack would produce to fix gaps in enterprise defenses.

The post Brava Security Emerges From Stealth With $15 Million in Funding appeared first on SecurityWeek.

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses.

The post DigiCert Data Breach Impacts Business Customer Information appeared first on SecurityWeek.

The recommendations come amid attacks targeting fridges and freezers in supermarkets and blood banks in Europe.

The post US Agencies Urge Organizations to Harden Refrigeration Controllers appeared first on SecurityWeek.

In a month, 28 residential proxy services used 6 addresses, mainly between 5 p.m. and midnight, Eastern Time.

The post Researchers Find Residential Proxies on White House Network appeared first on SecurityWeek.

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

The post OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass appeared first on SecurityWeek.

More than 200 sites were seen serving phishing content to first-time visitors but not to those who revisit.

The post Bank Phishing Sites Show Fake ‘Suspended’ Pages to Evade Takedowns appeared first on SecurityWeek.

Cisco patched an RCE in UCS Central Software; WatchGuard fixed authentication and MitM flaws.

The post Cisco, WatchGuard Release Patches; SonicWall Won’t Fix GMS Flaws appeared first on SecurityWeek.

Tracked as CVE-2026-107441, the out-of-bounds write flaw could allow attackers to execute OS commands via crafted HTTP requests.

The post Zyxel Switch Hacks Blamed on Patched Flaw Actually Exploited a Zero-Day appeared first on SecurityWeek.

The large-scale watering hole campaign has been targeting entities in the US and Europe, mainly in Ukraine.

The post Russia-Linked Hackers Hit iOS, Android Devices With Exploit Chains via Watering Holes appeared first on SecurityWeek.

The company will invest in agentic data security capabilities and expand its go-to-market organization.

The post Agentic Data Security Firm Sentra Raises $150 Million appeared first on SecurityWeek.

Hackers have been harvesting AI access tokens and have been using AI-assisted offensive tools to automate attacks.

The post AI-Linked Breaches Mount as WorkOS, Northflank, Trigger.dev Disclose Hacks appeared first on SecurityWeek.

Using compromised credentials, the attackers accessed OpsShield’s update servers and poisoned multiple cPGuard versions.

The post Malicious cPGuard Updates Served in OpsShield Supply Chain Attack appeared first on SecurityWeek.