@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
SecurityWeek
@SecurityWeek2h
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks securityweek.com/china-apt-u…

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

securityweek.com
1
1
940
SecurityWeek
@SecurityWeek2h
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months securityweek.com/attackers-e…

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

securityweek.com
1
4
1,030
SecurityWeek
@SecurityWeek3h
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ securityweek.com/quest-diagn…

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

securityweek.com
1,055
SecurityWeek
@SecurityWeek4h
11 Million Impacted by Capcom Data Breach securityweek.com/11-million-…

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

securityweek.com
1
1,037
SecurityWeek
@SecurityWeek4h
LiteLLM Compromised in Fresh Supply Chain Attack securityweek.com/litellm-com…

LiteLLM Compromised in Fresh Supply Chain Attack

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.

securityweek.com
1
2
3
1,063
SecurityWeek
@SecurityWeek4h
Atlassian Patches 75 Flaws in Data Center and Server Products securityweek.com/atlassian-p…

Atlassian Patches 75 Third-Party Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.

securityweek.com
1
1
1,312
SecurityWeek
@SecurityWeek8h
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform securityweek.com/indurex-rai…

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

securityweek.com
2
1,237
SecurityWeek
@SecurityWeek9h
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,395
SecurityWeek
@SecurityWeek9h
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
4
1,554
SecurityWeek
@SecurityWeek10h
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
5
5
1,633
SecurityWeek
@SecurityWeek11h
Tech and Security Companies Respond to #PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
1
3
6
1,886
SecurityWeek
@SecurityWeek12h
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
4
10
1,886
SecurityWeek
@SecurityWeek22h
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,997
SecurityWeek
@SecurityWeekOct 22
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
1
5
1,726
SecurityWeek
@SecurityWeekOct 22
Tech and Security Companies Respond to PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
2
10
1,860
SecurityWeek
@SecurityWeekOct 22
US Agencies Detail Incident Response Practices for Rogue AI Agents securityweek.com/us-agencies…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.

securityweek.com
4
1
7
2,293
SecurityWeek
@SecurityWeekOct 22
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
2
1,658
SecurityWeek
@SecurityWeekOct 22
Cisco Patches 34 Vulnerabilities Across Multiple Products securityweek.com/cisco-patch…

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

securityweek.com
1
9
23
5,021
SecurityWeek
@SecurityWeekOct 22
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
3
8
1,771
SecurityWeek
@SecurityWeekOct 22
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU securityweek.com/oracle-patc…

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

securityweek.com
2
3
14
2,717
Load more