Hackers Exploiting Unpatched GeoServer Zero-Day
Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect,…
Category: SecurityWeek
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not…
Over 1,000 Charities Hit by Beacon CRM Data Breach
UK-based customer relationship management (CRM) provider Beacon revealed this week the likely root cause of a recent data breach affecting many organizations. Beacon’s CRM platform…
1.6 Million Likely Impacted by RingCentral Data Breach
The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group.…
Trivy, Not LiteLLM Behind the 2,500 Org Compromise
Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was…
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal
Google Cloud has published an updated roadmap for migrating its infrastructure to post-quantum cryptography (PQC), targeting full readiness by 2029, with some work expected to…
Venture Firm Team8 Secures Additional $365 Million
Israel-based venture fund Team8 announced this week that it has secured $365 million in additional capital. The company says $265 million is for Team8 Capital’s…
WordPress 7.0.4 Patches Remote Code Execution Vulnerability
WordPress on Wednesday announced patches for a high-severity vulnerability that allows authenticated attackers to execute arbitrary code remotely. Tracked as CVE-2026-65640 (CVSS score of 8.8),…
Adobe Commerce Bug Targeted Immediately After Disclosure
Hackers started targeting a fresh critical-severity Adobe Commerce vulnerability immediately after public disclosure, webstore security firm Sansec reports. Tracked as CVE-2026-71362 (CVSS score of 9.1),…
Cybersecurity M&A Roundup: 21 Deals Announced in July 2026
Twenty-one cybersecurity-related merger and acquisition (M&A) deals were announced in July 2026. For a detailed view of the more than 420 acquisitions announced in 2025,…
Fortinet Patches Authentication Flaws in FortiWeb and FortiManager
Fortinet on Wednesday announced patches for eight vulnerabilities across its products, including high-severity authentication bugs in FortiWeb and FortiManager. In FortiWeb, the company resolved an…