CISA adds MITRE ATT&CK detail to incident reports as CIRCIA rule awaits White House review
Tag: EN
Notion Confirms AI Chat Transcripts Exposed in Fireworks AI Breach, Affecting Customer Workspaces
Notion has confirmed that a security incident at Fireworks AI exposed Notion AI chat transcripts linked to fewer than 1% of its customer workspaces.…
AI-Powered Malware Analysis Uncovers Hidden Phishing Threats and Reduces SOC Workload
AI powered malware analysis helps teams reveal hidden phishing attacks, connect related threats and automate reports to reduce investigation workload.
Ivanti Patches New Security Flaws Affecting Endpoint Manager, EPMM, Sentry, CSA, and Workspace Manager
Ivanti has released security updates for Endpoint Manager, Endpoint Manager Mobile, Sentry, Cloud Services Application, and User Workspace Manager. The…
France attributes grocery hacks to Iran-backed threat actors
Attackers compromised hundreds of refrigerator components at supermarkets, agricultural facilities and local shops.
Railway Reveals How Hackers Used AI Agents to Steal API Keys and Rack Up $740,000 in Charges
Railway has revealed how an attacker used AI agents, a build system flaw, and cloud access mistakes to steal customer secrets and generate an estimated…
Malicious Rust Crate Targets Crypto Wallet Developers
Attack on the Zcash, Vizor, and Keplr ecosystems uses CI exfiltration, dependency confusion, prompt-injecting AI reviewers, and maintainer phishing
Barracuda Confirms Active Exploitation of Email Gateway Flaws Allowing Root Access
Barracuda has confirmed active exploitation of security flaws affecting its Email Security Gateway (ESG), warning that attackers could combine two…
CVE-2026-125271 – AWS API MCP Server Security Policy Bypass via Incorrect Operation Name Normalization
Bulletin ID: 2026-176-AWS Publication Date: 11/10/2026 08:30 AM PST Description: We identified CVE-2026-125271 of AWS API MCP Server. The server…
Iranian hackers turned up the heat on French supermarket freezers, says France
Iran has been officially accused by France of being responsible for cyber attacks last month that meddled with supermarket freezers, causing some to catch…
Critical Xen Orchestra auth bypass flaw exploited to hijack VM servers
A critical authentication bypass vulnerability in Xen Orchestra is being actively exploited in attacks that could grant administrator privileges and allow…
Software Transparency Is Changing: Allan Friedman on SBOM, AI BOMs and What Comes Next
SBOM pioneer Allan Friedman joined the SecurityWeek Podcast to discuss why knowing what is inside software is only the beginning, how AI is complicating…
AI-Powered Malware Analysis: From Hidden Phishing Attacks to Faster SOC Response
A suspicious PDF opens normally. The link inside leads to a CAPTCHA page. Nothing obviously malicious appears, yet the real attack is still several steps…
Google Widens Gemini 4 Carbon Access After AI Agents Verify Signal Code
Google opened Carbon to paying developers and businesses as DeepMind used agents built on it to prove libsignal security guarantees.
Japan Airlines Passengers Caught in Amadeus Reservation System Breach
Japan Airlines has warned roughly 92,000 customers that hackers accessed their personal information through a third-party reservation platform, in what is…
X.Org patches eight server vulnerabilities a month after fixing 12 others
X.Org has fixed eight vulnerabilities in the X.Org X server and Xwayland, including one in the Xorg server that lets a malicious monitor corrupt its…
Weekly Cybersecurity Newsletter – Top 50 Biggest Cybersecurity Stories of the Week
ARTEX AI Framework Hits Banks & Cloud, $133M Crédit Mutuel Heist, OpenSSH ‘sshole’ Flaw, WordPress Core RCE Under Attack, 1.3M-Device Android Botnet &…
Trump taps Palantir security chief to run battered US cyber defense agency
Michael LoSapio could inherit a depleted workforce and a political headache or two, courtesy of his current employer
Blind Eagle Uses Fake Court Notices to Deliver Remote Access Trojan Across Latin America
The threat actor known as Blind Eagle has resurfaced with a new campaign targeting organizations in Latin America through judicial and…
AI company Fireworks says hackers stole data, billing info during October breaches
Fireworks said the incident affected a “limited number of customer accounts” — all of whom were notified of the attack.