SecurityWeek (@SecurityWeek) header
SecurityWeek (@SecurityWeek) profile picture

SecurityWeek

@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets56K
  • Following2.8K
  • Followers23K
799Media
Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year securityweek.com/chrome-upda…
Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

Chrome Update Patches Exploited XML Zero-Day, Eighth This Year

The high-severity use-after-free in Chrome’s XML component was reported anonymously on November 6 and is already exploited in attacks.

securityweek.com
1
1
639
Plex2Shell Exploited Against QNAP NAS Users securityweek.com/plex2shell-…
Plex2Shell Exploited Against QNAP NAS Users

Plex2Shell Exploited Against QNAP NAS Users

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

securityweek.com
2
1
1,053
Revolve Puts Data Breach Victim Count at 1.5 Million securityweek.com/revolve-put…
Revolve Puts Data Breach Victim Count at 1.5 Million

Revolve Puts Data Breach Victim Count at 1.5 Million

Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

securityweek.com
1
955
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers securityweek.com/iris-plaza-…
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

securityweek.com
1
1
1,030
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web securityweek.com/italys-melo…
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.

securityweek.com
1
2
1,283
Amplifon Americas Data Breach Impacts 1.3 Million securityweek.com/amplifon-am…
Amplifon Americas Data Breach Impacts 1.3 Million

Amplifon Americas Data Breach Impacts 1.3 Million

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

securityweek.com
2
3
1,300
Over 3 Million People Hit by Frontline Education Data Breach securityweek.com/3-million-p…
3 Million People Hit by Frontline Education Data Breach

3 Million People Hit by Frontline Education Data Breach

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

securityweek.com
2
5
1,947
Revolve Puts Data Breach Victim Count at 1.5 Million securityweek.com/revolve-put…
Revolve Puts Data Breach Victim Count at 1.5 Million

Revolve Puts Data Breach Victim Count at 1.5 Million

Online fashion retailer Revolve has told regulators that the September cyberattack affected more than 1.5 million individuals.

securityweek.com
2
1
4
1,557
Plex2Shell Exploited Against QNAP NAS Users securityweek.com/plex2shell-…
Plex2Shell Exploited Against QNAP NAS Users

Plex2Shell Exploited Against QNAP NAS Users

Threat actors are exploiting the four-flaw chain to hack the Plex Media Server application on QNAP NAS devices.

securityweek.com
3
4
1,710
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers securityweek.com/iris-plaza-…
Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

Iris Plaza Breach May Have Exposed Data of 7.7 Million Customers

Hackers compromised an external cloud service used by the shopping platform and may have stolen personal information from it.

securityweek.com
1
2
1,554
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web securityweek.com/italys-melo…
Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

Italy’s Meloni Blames Pro-Russian Hackers for Leak of Foreign Minister’s Data on the Dark Web

Italian Foreign Minister Antonio Tajani said Saturday that his personal data had been disseminated on the dark web.

securityweek.com
1
1,604
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack securityweek.com/google-deep…
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

securityweek.com
5
2
2
5
1,881
Amplifon Americas Data Breach Impacts 1.3 Million securityweek.com/amplifon-am…
Amplifon Americas Data Breach Impacts 1.3 Million

Amplifon Americas Data Breach Impacts 1.3 Million

Hackers stole personal, health, and insurance information, including Social Security numbers, from the company’s internal systems.

securityweek.com
1
1
1
3
1,845
Over 3 Million People Hit by Frontline Education Data Breach securityweek.com/3-million-p…
3 Million People Hit by Frontline Education Data Breach

3 Million People Hit by Frontline Education Data Breach

Frontline Education told Indiana regulators that its August data breach affected over 3 million school district staff and students.

securityweek.com
5
1
12
2,169
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack securityweek.com/google-deep…
Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

Google DeepMind’s AI Agents Make 1024-Bit RSA Keys Cheaper to Attack

Working with cryptographers, DeepMind’s AI agents cut the cost of forging RSA-1024 signatures and found a cheaper way to factor keys.

securityweek.com
4
1
12
2,971
DigiCert Data Breach Impacts Business Customer Information securityweek.com/digicert-da…
DigiCert Data Breach Impacts Business Customer Information

DigiCert Data Breach Impacts Business Customer Information

Hackers created an account on an internal system and accessed names, email addresses, phone numbers, and business addresses.

securityweek.com
10
8
1
35
7,777
SonicWall Patches Exploited SonicOS Bug That Weakens VPN Logins securityweek.com/sonicwall-p…
SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

SonicWall Patches Exploited SonicOS Vulnerability That Weakens VPN Logins

CVE-2026-19868 can let attackers holding credentials for a different login method get past SAML checks, including SAML-enforced MFA.

securityweek.com
3
9
2,711
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days securityweek.com/in-other-ne…
In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days

In Other News: Trezor Implant, LLMJacking Bills Hit $1M, SAP Flaws Weaponized Within Days

Noteworthy stories that might have slipped under the radar: Synology warns about NAS ransomware attacks, Flowise ‘hello’ attacks, Chainalysis breach impact expands.

securityweek.com
4
1
4
2,284
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass securityweek.com/openssh-rus…
OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass

OpenSSH Rushes Patches for ‘SSHole’ Authentication Bypass

On Linux distributions using musl libc without PAM, some accounts accept any password between 257 and 1024 characters.

securityweek.com
6
3
1
9
2,384
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions securityweek.com/openai-mode…
OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

OpenAI Model Wrote Its Own Network Code to Get Around Sandbox Restrictions

After its sandbox proxy failed, an internal OpenAI model crafted raw packets and probed AWS services trying to reach the internet.

securityweek.com
9
1
3
9
2,454
Load more