Category: SecurityWeek

Cisco patches
22
May
2025

Cisco Patches High-Severity DoS, Privilege Escalation Vulnerabilities

Cisco on Wednesday published 10 security advisories detailing over a dozen vulnerabilities across its products, including two high-severity flaws in…

GitLab, Atlassian Patch High-Severity Vulnerabilities
22
May
2025

GitLab, Atlassian Patch High-Severity Vulnerabilities

GitLab and Atlassian this week announced the release of patches for over a dozen vulnerabilities across their product portfolios, including…

Russian Cyberattacks
22
May
2025

CISA Says Russian Hackers Targeting Western Supply-Lines to Ukraine

The US government’s cybersecurity agency CISA is sounding the alarm over what it calls an “elevated threat” from Russia’s military-intelligence…

Microsoft Sinkholes Domains, Disrupts Notorious ‘Lumma Stealer’ Malware Operation
21
May
2025

Microsoft Sinkholes Domains, Disrupts Notorious ‘Lumma Stealer’ Malware Operation

Microsoft and global law enforcement agencies on Wednesday announced the takedown of “Lumma Stealer” malware operation, seizing 2,300 domains that…

ICS and OT security
21
May
2025

Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway

MB-Gateway devices made by industrial automation firm AutomationDirect are exposed to remote attacks — including directly from the internet —…

Detecting Insider Threats
21
May
2025

Coinbase Says Rogue Contractor Data Breach Affects 69,461 Users

When Coinbase said last week that it had refused to pay a $20 million ransom tied to an insider leak,…

ICS honeypot scanning
21
May
2025

Up to 25% of Internet-Exposed ICS Are Honeypots: Researchers

An analysis conducted by researchers at the Norwegian University of Science and Technology Gjøvik and the Delft University of Technology…

Ivanti vulnerability
21
May
2025

Wiz Warns of Ongoing Exploitation of Recent Ivanti Vulnerabilities

Cybersecurity firm Wiz says threat actors are actively exploiting in the wild two recently patched Ivanti Endpoint Manager Mobile (EPMM)…

AI Prompt Injection Attacks
21
May
2025

Google DeepMind Unveils Defense Against Indirect Prompt Injection Attacks

Google DeepMind has developed an ongoing process to counter the continuously evolving threat from Agentic AI’s bete noir: adaptive indirect…

PowerSchool hacker pleads guilty
21
May
2025

US Student to Plead Guilty Over PowerSchool Hack

A Massachusetts student pleaded guilty in court to hacking two US companies and extorting them for ransom. One of the…

Cellcom Service Disruption Caused by Cyberattack
21
May
2025

Cellcom Service Disruption Caused by Cyberattack

Wisconsin telecommunications provider Cellcom has confirmed that a cyberattack is responsible for a service outage it has been dealing with…

TDIR Virtual Summit
21
May
2025

Virtual Event Today: Threat Detection & Incident Response (TDIR) Summit

SecurityWeek’s 2025 Threat Detection & Incident Response (TDIR) Summit takes place today (May 21st) from 11 AM ET to 4PM…