@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,184
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
1
4
1,325
Tech and Security Companies Respond to PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
2
10
1,376
US Agencies Detail Incident Response Practices for Rogue AI Agents securityweek.com/us-agencies…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.

securityweek.com
4
4
1,602
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
2
1,414
Cisco Patches 34 Vulnerabilities Across Multiple Products securityweek.com/cisco-patch…

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

securityweek.com
1
4
11
2,536
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
2
8
1,461
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU securityweek.com/oracle-patc…

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

securityweek.com
2
3
13
2,339
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook securityweek.com/meta-ordere…

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.

securityweek.com
2
5
1,304
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor securityweek.com/openai-agen…

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.

securityweek.com
1
4
12
2,040
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes securityweek.com/memory-bugs…

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.

securityweek.com
1
3
1
12
1,858
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys securityweek.com/browsers-bl…

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.

securityweek.com
2
1
9
1,607
China Defends DeepSeek After US Ban of Its AI From Government Systems securityweek.com/china-defen…

China Defends DeepSeek After US Ban of Its AI From Government Systems

China hit back Tuesday at a U.S. ban on the use of Chinese artificial intelligence startup DeepSeek’s products by federal civilian agencies and warned of retaliatory measures as the two AI powers...

securityweek.com
1
1
2
1,874
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor securityweek.com/chinese-ai-…

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.

securityweek.com
2
3
1,543
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections securityweek.com/google-hard…

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.

securityweek.com
4
1
5
1,668
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors securityweek.com/php2shell-p…

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.

securityweek.com
2
7
1,720
Just as landmines are used to destroy or slow an advancing army, Tracebit has developed AI ‘context bombs’ that are planted in the battlefield. Each bomb comprises crafted and hidden prompts that are automatically ingested by the attacking AI when it crawls the target. securityweek.com/context-bom…

‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.

securityweek.com
1
3
1,315
Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security securityweek.com/asymptote-l…

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.

securityweek.com
2
1,231
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes securityweek.com/memory-bugs…

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.

securityweek.com
2
3
1,501
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor securityweek.com/openai-agen…

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.

securityweek.com
4
1
1
1,567
Load more