Google Confirms Gemini AI Breached Three Firms
Google has confirmed that one of its Gemini models accessed the systems of three real companies during a cybersecurity test in May. The Wall Street…
Category: SecurityWeek
Check Point, Kaspersky, Tanium Patch Product Vulnerabilities
Cybersecurity firms Check Point, Kaspersky, and Tanium have each patched severe vulnerabilities in their products, including ones that can be exploited for remote code execution. …
MIND Secures $72 Million for AI-Powered DLP
Data loss prevention (DLP) startup MIND has announced raising $72 million in a Series B funding round that brings the total raised by the company…
TigerByte Cyber Emerges From Stealth With $3 Million in Funding
Cybersecurity firm TigerByte Cyber has emerged from stealth mode with $3 million raised in a seed funding round led by Hale Capital Partners, with additional…
Brevo Supply Chain Attack Injects Malware Into 100,000 Websites
Customer engagement platform Brevo fell victim to a supply chain attack that resulted in malicious code being injected into over 100,000 websites. Brevo was initially…
NightmareStresser DDoS Service Disrupted in International Operation
NightmareStresser, one of the longest-running distributed denial-of-service (DDoS) for-hire services in the world, has been disrupted. The US Department of Justice announced this week that…
Microsoft Patches 18 Vulnerabilities in AI, Cloud Products
Microsoft released patches for 18 vulnerabilities on Thursday, spanning its Azure cloud portfolio and Copilot-branded AI products. Elevation of privilege flaws made up the bulk…
23 Million User Records Compromised in Gyazo Data Breach
Japanese software company Helpfeel is notifying users of its Gyazo image-sharing service that hackers have accessed their information. Gyazo is a widely used cross-platform tool…
In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code
Researchers at security firm Hacktron used Claude to build a working exploit for a vulnerability in an image-processing library, then chained it with a flaw…
Critical Orkes Conductor Vulnerability Exploited in Attacks
A critical-severity vulnerability in Orkes Conductor that can be exploited without authentication has been in attackers’ crosshairs for at least a month. Conductor is an…
CISA Retires Weekly Vulnerability Bulletin in Risk-Based Pivot
The US Cybersecurity and Infrastructure Security Agency (CISA) announced on Wednesday that it’s retiring its weekly vulnerability bulletin. The vulnerability bulletin will be discontinued on…