@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.5K
  • Following2.8K
  • Followers229K
796Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks securityweek.com/microsoft-s…

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28.

securityweek.com
4
6
2,638
North Korea Suspected in $351 Million Bitget Crypto Heist securityweek.com/north-korea…

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.

securityweek.com
1
1
3
3,479
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks securityweek.com/cisa-electi…

CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. 

securityweek.com
1
2,859
New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining securityweek.com/new-x47-c-w…

New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining

The Windows botnet relies on AI to maintain persistence, using xAI Grok to choose from predefined actions.

securityweek.com
3
2
16
4,435
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court securityweek.com/kosovar-own…

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.

securityweek.com
1
1
2
3,371
OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure - securityweek.com/openai-says…

OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure

OpenAI’s CEO said there is an “extensive and ongoing review related to our agents’ use of internet access during training and evaluation.”

securityweek.com
1
1
3
3,272
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure securityweek.com/in-other-ne…

In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul.

securityweek.com
1
1
1
2,847
Windows, Linux, Android File Notification Systems Leak User Activity securityweek.com/windows-lin…

Windows, Linux, Android File Notification Systems Leak User Activity

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

securityweek.com
1
5
4
3,191
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration securityweek.com/salesbleed-…

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.

securityweek.com
4
3
2,977
In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure securityweek.com/in-other-ne…

In Other News: Clop Leak Site Takeover, Docker Botnet Hunts AI Keys, Water Utility Exposure

Noteworthy stories that might have slipped under the radar: BragJack attack against browser AI assistants, TDengine flaw threatens industrial telemetry uptime, Ubuntu update overhaul.

securityweek.com
3
1
2,539
North Korea Suspected in $351 Million Bitget Crypto Heist securityweek.com/north-korea…

North Korea Suspected in $351 Million Bitget Crypto Heist

Bitget’s security systems caught the unauthorized transfers on September 24, and some wallet addresses linked to the attacker have been frozen.

securityweek.com
1
4
2,960
Roundcube Webmail Vulnerability in Attackers’ Crosshairs securityweek.com/roundcube-w…

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.

securityweek.com
3
3
2,543
CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks securityweek.com/cisa-electi…

CISA Election Security Plan Flags Patching Barriers, Voter Database Attacks

Homeland Security Secretary Markwayne Mullin tasked CISA with developing the plan in July. 

securityweek.com
3
2
3
2,526
Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court securityweek.com/kosovar-own…

Kosovar Owner of Rydox Marketplace Pleads Guilty in US Court

Ardit Kutleshi created and operated Rydox, which allowed miscreants to trade PII and cybercrime tools and services.

securityweek.com
1
1
1
2,513
Windows, Linux, Android File Notification Systems Leak User Activity securityweek.com/windows-lin…

Windows, Linux, Android File Notification Systems Leak User Activity

Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.

securityweek.com
2
2
2,568
‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration securityweek.com/salesbleed-…

‘SalesBleed’ Flaws in Salesforce Agentforce Enabled Zero-Click Data Exfiltration

Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.

securityweek.com
2
3
4
2,804
Roundcube Webmail Vulnerability in Attackers’ Crosshairs securityweek.com/roundcube-w…

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.

securityweek.com
1
2
2,786
Updated with information from OpenAI: OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data securityweek.com/openai-agen…

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data

Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information.

securityweek.com
1
4
2,179
OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data securityweek.com/openai-agen…

OpenAI Agents Probed Websites for Vulnerabilities While Fetching Public Data

Australia disclosed that an OpenAI agent gained unauthorized access to non-public government information.

securityweek.com
1
2,371
Astrana Health Data Breach Impacts Private, Confidential Information securityweek.com/astrana-hea…

Astrana Health Data Breach Impacts Private, Confidential Information

Hackers impersonated the company’s personnel and contacted its employees to gain access to Astrana Health’s servers.

securityweek.com
3
2,245
Load more