Adobe Patches Critical Flaws in Connect, AEM Forms
Adobe on Tuesday rolled out patches for 36 vulnerabilities across its products, including critical-severity flaws in Connect and Experience Manager (AEM) Forms. The Adobe Connect…
Category: SecurityWeek
Honeywell: OT Security Teams Embrace AI, but Autonomy Still Rare
Honeywell released its 2026 OT Cybersecurity Benchmark Report on Tuesday, and the findings point to a disconnect between how industrial organizations rate their operational technology…
Critical F5 BIG-IP Vulnerability Exploited as Zero-Day
F5 and CISA on Tuesday warned organizations that threat actors have been exploiting a critical-severity BIG-IP Access Policy Manager (APM) vulnerability as a zero-day. The…
Nightmare Eclipse Drops New Microsoft Defender Exploit After Revealing Identity
The researcher known online as Nightmare Eclipse, who has spent months publishing a rapid string of Windows and Microsoft Defender proof-of-concept exploits, has revealed his…
BigCommerce Data Stolen via Ribon Apps Hack
Enterprise eCommerce platform BigCommerce fell victim to a supply chain attack that led to customer data theft. BigCommerce is a SaaS provider that enables merchants…
Cyera Raises $400 Million at $12+ Billion Valuation
Data security company Cyera has received an additional $400 million in funding, bringing the company’s valuation to more than $12 billion. The new investment came…
Only 13% of OT Network Segments Are Fully Isolated: Analysis
Most organizations running operational technology (OT) or connected medical devices do not keep those systems on their own dedicated network segments, according to new research…
CISO Conversations: Noopur Davis – The Accidental Global CISO at Comcast
Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be.…
US Proposes AI Incident Alert System in Talks With China, Bessent Says
Treasury Secretary Scott Bessent said Sunday the U.S. has proposed a new “notification mechanism” for artificial intelligence incidents that could affect national security, part of…
Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer
A fake LastPass Authenticator distributed via GitHub has led to the discovery of a broad impersonation campaign delivering infostealer malware, LastPass reports. As part of…
Google Hit With $463 Million Fine for EU Location Data Rule Breach
Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data, the bloc’s…
Rust Team Members and Popular Crate Owners Targeted via Video Calls
The Rust project warned last week that an ongoing social engineering campaign is targeting Rust-lang team members and the owners of popular crates to hijack…