@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware securityweek.com/in-other-ne…

In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransom...

Noteworthy stories that might have slipped under the radar: Russia’s APT28 hit NATO defense firms, PingCAP source code stolen, ShinyHunters negotiator probe.

securityweek.com
1
1
974
Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge securityweek.com/mirai-botne…

Mirai Botnet Operators Join PHP2Shell Attacks as ASLR Bypass Exploits Emerge

Researchers tie PHP2Shell attempts to a Mirai botnet and show an ASLR bypass, but no successful compromise has been confirmed yet.

securityweek.com
3
1
1
3
1,779
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks securityweek.com/china-apt-u…

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

securityweek.com
2
1
1,321
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months securityweek.com/attackers-e…

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

securityweek.com
1
2
5
1,711
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ securityweek.com/quest-diagn…

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

securityweek.com
1,362
11 Million Impacted by Capcom Data Breach securityweek.com/11-million-…

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

securityweek.com
1
1,296
LiteLLM Compromised in Fresh Supply Chain Attack securityweek.com/litellm-com…

LiteLLM Compromised in Fresh Supply Chain Attack

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.

securityweek.com
1
2
4
1,382
Atlassian Patches 75 Flaws in Data Center and Server Products securityweek.com/atlassian-p…

Atlassian Patches 75 Third-Party Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.

securityweek.com
1
1
1,567
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform securityweek.com/indurex-rai…

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

securityweek.com
2
1,378
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,567
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
4
1,725
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
5
6
1,855
Tech and Security Companies Respond to #PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
1
3
6
2,105
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
4
10
2,083
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
2,038
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
1
5
1,757
Tech and Security Companies Respond to PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
2
10
1,890
US Agencies Detail Incident Response Practices for Rogue AI Agents securityweek.com/us-agencies…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.

securityweek.com
4
1
7
2,319
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
2
1,685
Cisco Patches 34 Vulnerabilities Across Multiple Products securityweek.com/cisco-patch…

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

securityweek.com
1
10
23
5,073
Load more