Category: securityweek

UK Government Unveils New Cyber Action Plan

The UK government’s cyber action plan is by the government for the government, and has no advice for the private sector nor CNI. The post UK Government Unveils New Cyber Action Plan appeared first on SecurityWeek. This article has been…

Cyera Raises $400 Million at $9 Billion Valuation

The New York-based data security company has tripled its valuation in just one year.  The post Cyera Raises $400 Million at $9 Billion Valuation appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Cyera…

Blackbird.AI Raises $28 Million for Narrative Intelligence Platform

The company will use the funds to enhance its AI-based narrative intelligence technology platform and accelerate go-to-market efforts. The post Blackbird.AI Raises $28 Million for Narrative Intelligence Platform appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…

Rethinking Security for Agentic AI

When software can think and act on its own, security strategies must shift from static policy enforcement to real-time behavioral governance. The post Rethinking Security for Agentic AI appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…

Critical Vulnerability Exposes n8n Instances to Takeover Attacks

Tracked as CVE-2026-21858 (CVSS score 10), the bug enables remote code execution without authentication. The post Critical Vulnerability Exposes n8n Instances to Takeover Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Critical…

Critical Vulnerability Patched in jsPDF

The bug can allow attackers to read arbitrary files from the system, potentially exposing configurations and credentials. The post Critical Vulnerability Patched in jsPDF appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Critical…

Critical HPE OneView Vulnerability Exploited in Attacks

The maximum-severity code injection flaw can be exploited without authentication for remote code execution. The post Critical HPE OneView Vulnerability Exploited in Attacks appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Critical HPE…

Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats

Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the…

Vulnerability in Totolink Range Extender Allows Device Takeover

An error in the firmware-upload handler leads to devices starting an unauthenticated root-level Telnet service. The post Vulnerability in Totolink Range Extender Allows Device Takeover appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article:…

Hackers Exploit Zero-Day in Discontinued D-Link Devices

The critical-severity vulnerability allows unauthenticated, remote attackers to execute arbitrary shell commands. The post Hackers Exploit Zero-Day in Discontinued D-Link Devices appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original article: Hackers Exploit Zero-Day in…

Cybersecurity Firms Secured $14 Billion in Funding in 2025

2025 was the strongest year for cybersecurity funding since the 2021 peak, according to Pinpoint Search Group. The post Cybersecurity Firms Secured $14 Billion in Funding in 2025 appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read…

Researchers Trap Scattered Lapsus$ Hunters in Honeypot

Using fake accounts and synthetic data to lure the hackers, the researchers gathered information on their servers. The post Researchers Trap Scattered Lapsus$ Hunters in Honeypot appeared first on SecurityWeek. This article has been indexed from SecurityWeek Read the original…