OpenSSL Silently Fixes ‘HollowByte’ DoS Vulnerability
A vulnerability in OpenSSL could allow attackers to cause a server’s memory to be exhausted before any security handshake, Okta’s red team discovered. Referred to…
Category: SecurityWeek
Neo Emerges From Stealth With $100M to Control and Secure Enterprise AI Software
American-Israeli cybersecurity startup Neo emerged from stealth mode on Monday with $100 million in funding for a platform that enables enterprises to control and secure…
SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch
Two recently patched SonicWall appliance zero-days were exploited by threat actors for weeks before patches were released, according to cybersecurity firm Volexity. SonicWall released a…
Hugging Face Hacked in Autonomous AI Attack
Machine learning collaboration platform Hugging Face has disclosed a data breach resulting from a cyberattack conducted by an autonomous AI agent. The attack targeted the…
WP2Shell WordPress Vulnerabilities Exploited in the Wild
Two newly patched WordPress vulnerabilities are being exploited in the wild, with attacks beginning shortly after they came to light. The vulnerabilities have been dubbed…
Coca-Cola Suspends US Fairlife Production Due to Ransomware Attack
American soft drinks giant Coca-Cola announced Thursday that it has suspended production at its subsidiary Fairlife after detecting a ransomware attack. Based in Chicago, Fairlife…
Risk Ledger Raises $32 Million in Series B Funding
British supply chain security firm Risk Ledger has announced raising £24 million (roughly $32.3 million) in a Series B funding round that brings the total…
Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei
Japanese frozen food giant Nichirei says it is ready to gradually restore operations affected by a cyberattack on July 13. Headquartered in Tokyo, Nichirei is…
Beacon Security Raises $13 Million for Security Data Platform
Cybersecurity startup Beacon Security has announced raising $13 million in a seed funding round led by Notable Capital. AlphaDrive Ventures, Holly Ventures, Jefferies Family Office,…
In Other News: Iran Tracks US Military Phones, CrashStealer macOS Malware, CVD Blueprint
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Podcast: Broken Governance, Agentic AI, and the MindStone Agent Exclusive
In this exclusive SecurityWeek interview, Brian “SchleiF” Schleifer sits down with Clint Bodungen, Director of AI/ML Engineering at Arcovo, founder of ThreatGen, and one of…
Fresh SharePoint Vulnerability Exploited Soon After Disclosure
Threat actors have begun exploiting a fresh critical-severity remote code execution (RCE) vulnerability in Microsoft SharePoint, the US cybersecurity agency CISA warns. Tracked as CVE-2026-58644…