The previous GPG signing subkey was inadvertently added to a GitHub repository and Mozilla decided to revoke it.

The post Mozilla Issues New Firefox GPG Key Following Exposure appeared first on SecurityWeek.

The current GPT-5.6-Sol has been assigned a ‘high’ cybersecurity threshold, but Astra could reach the maximum ‘critical’ threshold. 

The post OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns appeared first on SecurityWeek.

The startup analyzes subtle telemetry signals to detect attacks that traditional security tools cannot see inside accelerator-powered AI infrastructure.

The post Stealthium Targets Security Blind Spots in AI Accelerators and Neo-Clouds appeared first on SecurityWeek.

Remote, unauthenticated attackers could exploit the bugs to cause a denial-of-service (DoS) condition.

The post Cisco Warns of High-Severity ClamAV Vulnerabilities With Public PoC appeared first on SecurityWeek.

An AI agent executes instructions that an attacker has planted in the log or alert that records a blocked request word for word.

The post ‘Ghostjacking’ Attack Uses Poisoned Logs to Turn AI Agents Bad appeared first on SecurityWeek.

Hackers linked to Iran targeted industrial control systems (ICS) at water facilities in at least a dozen US states.

The post New Jersey, Alabama Join States Targeted in Water Cyberattacks appeared first on SecurityWeek.

The security defect allows unauthenticated, remote attackers to gain administrative access to Metabase instances.

The post Metabase Patches Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

CERT.PL said this appears to be the first instance of a private APN being used as an attack vector.

The post Novel Private APN Pivot Let Hackers Sabotage Second Polish Energy Facility appeared first on SecurityWeek.

The critical-severity flaw allows unauthenticated, remote attackers to execute arbitrary commands.

The post CISA Urges Immediate Patching of Exploited Progress LoadMaster Vulnerability appeared first on SecurityWeek.

Using social engineering, a threat actor accessed the computers of three employees and exfiltrated data from them.

The post Corporate Data Stolen in Levi Strauss Cyberattack appeared first on SecurityWeek.

The vulnerabilities affected software used by eight of Belgium’s ten largest banks and over 60 government agencies.

The post Critical Flaws Discovered in Belgian eID Software Used by 2 Million People appeared first on SecurityWeek.

The RovoBlast attack method identified by Varonis researchers could have been exploited to steal Confluence, Jira and SharePoint data.

The post Critical One-Click Vulnerability in Atlassian’s Rovo AI Exposed Enterprise Data appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: ban on Chinese data center tech, QuickFox VPN supply chain attack, IEH Corporation mailbox breached via phishing.

The post In Other News: AI Slop Limits Apple Bounties, North Carolina Port Attacks, Hackers Target Wall Street appeared first on SecurityWeek.

Initially calling itself BlackFile, the group has expanded operations to the Redact, Pink, Helix, and Falcon brands.

The post Vishing Extortion Group UNC6671 Rebrands After Making Millions appeared first on SecurityWeek.

NMFTA research shows a Bendix EC80 brake controller safety recall also patched remote code execution and DoS vulnerabilities.

The post Truck Brake Controller’s Safety Recall Doubled as Hidden Security Fix appeared first on SecurityWeek.

Companies are showcasing their products and services this week at the 2026 edition of the Black Hat conference in Las Vegas.

The post Black Hat USA 2026 – Summary of Vendor Announcements (Part 4) appeared first on SecurityWeek.

Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.

The post Microsoft, Apple Release Fresh Security Updates appeared first on SecurityWeek.

Hackers stole personal, medical, and health insurance information from a company’s data center.

The post 3.8 Million Impacted by Unlimited Technology Systems Data Breach appeared first on SecurityWeek.

The browser refresh eliminates over two dozen memory safety bugs, including critical use-after-free flaws.

The post Critical Vulnerabilities Patched With Chrome 151 Update appeared first on SecurityWeek.

Connor Riley Moucka was extradited to the United States in July 2025 after he was arrested in Canada. 

The post Snowflake Hacker Pleads Guilty in US Court appeared first on SecurityWeek.