McKesson Confirms Data Breach as Attacker Deadline Looms
Healthcare giant McKesson Corporation over the weekend confirmed that hackers exfiltrated customer data from its systems, as the ShinyHunters extortion group is threatening to release…
Category: SecurityWeek
ServiceNow Patches 3 Critical Code Injection Vulnerabilities
ServiceNow has announced patches for four vulnerabilities, including three critical code injection flaws in the ServiceNow AI platform, each with a maximum severity (CVSS score…
Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit
The researcher known as Nightmare Eclipse has dropped another zero-day — this time a privilege escalation exploit targeting a Kaspersky endpoint security product. Nightmare Eclipse,…
What the Hugging Face Incident Teaches Security Leaders About AI Agent Access
Most security leaders (92%) worry that the growing use of AI agents will create new security risks. And for good reason. AI agents can now…
More Details Emerge on Exploited PaperCut Vulnerabilities
PaperCut Software has released a second emergency patch for zero-day vulnerabilities exploited against users of its NG and MF print management solutions as more information…
PaperCut Releases Emergency Patch for Exploited Zero-Day
PaperCut Software is warning users of its NG and MF print management solutions that a zero-day vulnerability is being exploited in the wild. The flaw…
Hasbro Data Breach Exposed Employee Personal Information
Toy and game giant Hasbro is notifying employees that their personal information may have been compromised in a data breach. The notifications sent to affected…
Think You’ve Eliminated Chinese AI? Check the Model’s Lineage, Cisco Says
If you think you’ve excluded all Chinese AI from your tech stack, you may need to think again. The US government’s attitude toward Chinese AI…
Tech, Cybersecurity Giants Unite Behind OpenAI-Led Cyber Defense Pledge
Nearly 130 organizations spanning cybersecurity, cloud computing, finance and other industries have signed an open letter calling for a coordinated, global surge in cyber defense…
ATF Confirms Cyber Incident After Ransomware Group Claims Attack
The US Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed suffering a cybersecurity incident after the Qilin ransomware group claimed to have targeted…
In Other News: Log4j RCE Scare, Minimus Shutdown, Iranian Hacker Sanctions
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems
Around the time some OpenAI models escaped their testing environment and hacked Hugging Face, some agents exploited a Linux kernel vulnerability to escalate privileges on…