@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Long-Hidden Flaws Patched in EPICS Research Facility Control Software securityweek.com/long-hidden… #ICS

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.

securityweek.com
1
2
708
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise securityweek.com/secrets-man…

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.

securityweek.com
1
791
Hackers Start Probing Fresh Oracle EBS Vulnerability securityweek.com/hackers-sta…

Hackers Start Probing Fresh Oracle EBS Vulnerability

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.

securityweek.com
1
2
1,018
CISA Warns of #Node2Shell Exploitation as Honeypots Log Attack Attempts securityweek.com/cisa-warns-…

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.

securityweek.com
1
1
7
1,031
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws securityweek.com/tailscale-r…

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.

securityweek.com
3
2
1
5
1,464
HPE Patches Dozens of Critical Flaws in Networking Products securityweek.com/hpe-patches…

HPE Patches Dozens of Critical Flaws in Networking Products

Eight max-severity security defects could lead to remote code execution and authentication bypass.

securityweek.com
1
2
3
1,581
Unexplained DreamHost Incident Prompts Email, FTP Password Resets securityweek.com/unexplained…

Unexplained DreamHost Incident Prompts Email, FTP Password Resets

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail.

securityweek.com
2
4
1,504
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk securityweek.com/vendor-key-…

Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

A leaked SquareML access key could have been used to access a database containing personal and health information.

securityweek.com
2
2
7
1,897
Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI securityweek.com/risks-spell…

Risks Spelled Out for Anthropic Investors Include Possible Harms From Runaway AI

Anthropic presents its own initial public offering as a step toward mitigating the risks it believes AI poses.

securityweek.com
2
1
5
1,792
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover securityweek.com/dead-popcor…

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.

securityweek.com
2
2
1,761
Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws securityweek.com/tailscale-r…

Tailscale Rushes Patches After Uncoordinated Disclosure of ‘Tailworm’ Flaws

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.

securityweek.com
1
2
3
1,656
Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk securityweek.com/vendor-key-…

Vendor Key Leak Puts Data of 238,000 Denver Health Plan Members at Risk

A leaked SquareML access key could have been used to access a database containing personal and health information.

securityweek.com
7
1
4
1,875
HPE Patches Dozens of Critical Flaws in Networking Products securityweek.com/hpe-patches…

HPE Patches Dozens of Critical Flaws in Networking Products

Eight max-severity security defects could lead to remote code execution and authentication bypass.

securityweek.com
4
3
7
1,688
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems securityweek.com/maritime-co… #ICS

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.

securityweek.com
1
4
1,377
iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18 securityweek.com/ios-macos-2…

iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18

Apple patched 286 vulnerabilities in iOS and macOS 27.2 and brought the fix for an exploited CoreGraphics zero-day to older iPhones.

securityweek.com
4
3
3,334
Unexplained DreamHost Incident Prompts Email, FTP Password Resets securityweek.com/unexplained…

Unexplained DreamHost Incident Prompts Email, FTP Password Resets

The company says it reacted to an issue affecting some of its systems, including DreamHost webmail.

securityweek.com
8
1
10
2,062
Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover securityweek.com/dead-popcor…

Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover

Running at system boot, it periodically polled the update domain to execute any code served, with full privileges.

securityweek.com
2
2
2
1,850
Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems securityweek.com/maritime-co… #ICS

Maritime Coalition Launches Free Vulnerability Database for Ship and Port Systems

Blue Initiative indexes nearly 30,000 IT and OT vulnerabilities relevant to ships and ports, 37 of them in maritime-specific products.

securityweek.com
1
1
1,662
Industrial Vendors Check Products for PHP2Shell Vulnerabilities securityweek.com/industrial-… #ICS

Industrial Vendors Check Products for PHP2Shell Vulnerabilities

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.

securityweek.com
2
2
9
1,996
953 Online Stores Infected in Long-Lasting Malware Campaign securityweek.com/953-online-…

953 Online Stores Infected in Long-Lasting Malware Campaign

Small loader code injected into the stores served a payload to visitors or did nothing to avoid detection.

securityweek.com
1
1,618
Load more