SecurityWeek (@SecurityWeek) header
SecurityWeek (@SecurityWeek) profile picture

SecurityWeek

@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)
Over 41,000 DHS Employee Records Leaked Online securityweek.com/over-41000-…
Over 41,000 DHS Employee Records Leaked Online

Over 41,000 DHS Employee Records Leaked Online

The personal and work information was allegedly stolen from an Okta single sign-on system earlier this year.

securityweek.com
537
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network securityweek.com/cisco-sd-wa…
Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

Cisco SD-WAN Zero-Day Exploitation Tied to Volt Typhoon’s ‘Silent Train’ Network

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

securityweek.com
3
1
3
758
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net securityweek.com/hackers-ste…
Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

Hackers Steal 2.6 Million Records From Sony’s Japanese ISP So-net

The data of So-net and Plala customers in Japan was exposed, along with 54,401 email account passwords and 16 bank account records.

securityweek.com
1
1
1,127
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August securityweek.com/attackers-e…
Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Attackers Exploit Second Cisco Firewall VPN Zero-Day Since August

Cisco on Wednesday released fixes for an exploited vulnerability affecting its Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) software. Tracked as CVE-20...

securityweek.com
2
1
4
1,266
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million securityweek.com/hhs-filing-…
HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

HHS Filing Puts iRhythm Data Breach Toll at 8.2 Million

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

securityweek.com
1
6
1,306
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day securityweek.com/chinese-hac…
Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

Chinese Hackers Quietly Used Low-Severity ESXi Logging Flaw as Zero-Day

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.

securityweek.com
3
2
4
1,177
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison securityweek.com/ukrainian-h…
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.

securityweek.com
1
2
2
1,471
Chrome and Firefox Updates Patch Over 200 Vulnerabilities securityweek.com/chrome-and-…
Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.

securityweek.com
1
4
1,430
Long-Hidden Flaws Patched in EPICS Research Facility Control Software securityweek.com/long-hidden… #ICS
Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Long-Hidden Flaws Patched in EPICS Research Facility Control Software

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.

securityweek.com
2
2
1,359
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices securityweek.com/tls-flaws-f…
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.

securityweek.com
1
2
2
1,343
China-Linked Hackers Exploit PHP2Shell to Root Firewalls securityweek.com/china-linke…
China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.

securityweek.com
4
1
11
1,892
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise securityweek.com/secrets-man…
Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

Secrets Management Firm Infisical Valued at $600 Million After $40 Million Raise

The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.

securityweek.com
1
1,248
Hackers Start Probing Fresh Oracle EBS Vulnerability securityweek.com/hackers-sta…
Hackers Start Probing Fresh Oracle EBS Vulnerability

Hackers Start Probing Fresh Oracle EBS Vulnerability

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.

securityweek.com
2
2
1,703
Upwind Security Raises $400 Million at $3.8 Billion Valuation securityweek.com/upwind-secu…
Upwind Security Raises $400 Million at $3.8 Billion Valuation

Upwind Security Raises $400 Million at $3.8 Billion Valuation

The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog

securityweek.com
3
1,315
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison securityweek.com/ukrainian-h…
Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Ukrainian Hive and Nefilim Ransomware Affiliate Gets 70 Months in US Prison

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.

securityweek.com
1
1,683
Upwind Security (@UpwindSecurity) announced a $400 million Series C funding round at a $3.8 billion valuation. Coming just nine months after the company announced a $250 funding round at $1.5 billion valuation, the investment brings the total amount raised by the company to over $800 million. securityweek.com/upwind-secu…
Upwind Security Raises $400 Million at $3.8 Billion Valuation

Upwind Security Raises $400 Million at $3.8 Billion Valuation

The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog

securityweek.com
1
2
1,263
Chrome and Firefox Updates Patch Over 200 Vulnerabilities securityweek.com/chrome-and-…
Chrome and Firefox Updates Patch Over 200 Vulnerabilities

Chrome and Firefox Updates Patch Over 200 Vulnerabilities

The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.

securityweek.com
5
1
9
1,738
CISA Warns of #Node2Shell Exploitation as Honeypots Log Attack Attempts securityweek.com/cisa-warns-…
CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

CISA Warns of Node2Shell Exploitation as Honeypots Log Attack Attempts

CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.

securityweek.com
6
1
6
1,689
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices securityweek.com/tls-flaws-f…
TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

TLS Flaws Found in GoAhead Web Server Used in Hundreds of Millions of Devices

FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.

securityweek.com
4
2
1,486
China-Linked Hackers Exploit PHP2Shell to Root Firewalls securityweek.com/china-linke…
China-Linked Hackers Exploit PHP2Shell to Root Firewalls

China-Linked Hackers Exploit PHP2Shell to Root Firewalls

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.

securityweek.com
5
1
8
1,709
Load more