Recent macOS Screen Sharing Vulnerability Exploited in Attacks
Threat actors are exploiting a recently patched macOS vulnerability to gain root access and deploy cryptominers. The exploited bug, tracked as CVE-2026-65400, is a high-severity…
Category: SecurityWeek
Conflicting Test Goals Pushed Claude Agents to Deploy Self-Replicating Malware
Anthropic has published new research showing that Claude-based AI agents, when placed in situations with competing objectives, deployed self-replicating malware against one another. The finding…
Irregular Details How a Naming Error Let AI Models Attack a Real Company
AI safety testing firm Irregular has published its account of an incident in which models being evaluated inside one of its testing environments took offensive…
680,000 Impacted by French Tax Authority Data Breach
France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals. The incident was disclosed after a threat actor boasted…
40,000 Impacted by SafePal Data Breach
Crypto hardware wallet SafePal is notifying roughly 40,000 individuals that their personal information was stolen in a data breach. Hackers, it says, exploited a vulnerability…
AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions
A multi-stage Rust-based macOS information stealer has been distributed through a counterfeit GitHub download page in recent ClickFix attacks, Jamf reports. The fake download page…
Hackers Exploiting Unpatched GeoServer Zero-Day
Threat actors started exploiting an unpatched zero-day vulnerability in GeoServer hours after it was publicly disclosed, attack surface management firm WatchTowr says. The security defect,…
14,000 Trezor Customers Impacted by Data Breach at ShipMonk
Hardware crypto wallet provider Trezor says the personal information of nearly 14,000 people was compromised in a data breach. The incident, it says, did not…
Over 1,000 Charities Hit by Beacon CRM Data Breach
UK-based customer relationship management (CRM) provider Beacon revealed this week the likely root cause of a recent data breach affecting many organizations. Beacon’s CRM platform…
1.6 Million Likely Impacted by RingCentral Data Breach
The personal information of 1.6 million individuals appears to have been stolen from the widely used business communications platform RingCentral by a notorious extortion group.…
Trivy, Not LiteLLM Behind the 2,500 Org Compromise
Most of the 2,500 organizations believed to have been affected by the LiteLLM supply chain attack were actually exposed before, SOCRadar reports. The compromise was…
In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…