Chrome 149 Update Patches 28 Vulnerabilities
Google on Thursday rolled out a Chrome 149 update that resolves 28 critical and high-severity vulnerabilities. The update patches five critical-severity bugs: use-after-free issues in…
Category: SecurityWeek
Iranian Cyber Group Handala Claims Cal Water Hack
The Iran-linked threat actor Handala this week boasted to have hacked California Water Service (Cal Water), and published 5 gigabytes of data allegedly stolen from…
In Other News: Google Security Layoffs, AudiA6 Takedown, $400 Million Coupang Fine
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
Industry Reactions to Claude Fable 5: Feedback Friday
Claude Fable 5 has become generally available, with Anthropic unveiling it as a powerful Mythos-class AI model. The release includes robust safeguards that restrict its…
Ivanti Sentry Exploitation Attempts Hitting Honeypots
The US Cybersecurity and Infrastructure Security Agency (CISA) flagged a recently patched Ivanti Sentry vulnerability as exploited, but Ivanti says the activity was observed only…
Hackers Exploit Langflow Vulnerability for Remote Code Execution
Threat actors have begun exploiting a high-severity vulnerability in the popular low-code AI development platform Langflow, according to VulnCheck. Tracked as CVE-2026-5027 (CVSS score of…
OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month
The OnyxC2 stealer surfaced on a cybercrime network earlier this year and is available through Malware-as-a-Service (MaaS) for hire starting at $250 per month. The…
CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk
The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday announced a new directive that requires federal agencies to prioritize patching the highest-risk security flaws.…
Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks
Oracle on Thursday released an out-of-band advisory addressing a PeopleSoft vulnerability that can be exploited by an unauthenticated attacker for remote code execution. The security…
FBI Seizes 13 Websites That Officials Say Were Used by China to Target and Recruit US Workers
The FBI has seized more than a dozen websites that officials say were part of a Chinese effort to target American workers who have access…
Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers
Researchers at cyber-physical systems security firm Claroty have uncovered multiple vulnerabilities in two widely deployed HVAC and UPS products used in data centers, demonstrating how…
Aryon Security Raises $29 Million in Series A Funding
Cybersecurity startup Aryon Security today announced raising $29 million in Series A funding. To date, the company has received $38 million in funding. The fresh…