OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month
The OnyxC2 stealer surfaced on a cybercrime network earlier this year and is available through Malware-as-a-Service (MaaS) for hire starting at $250 per month. The…
Category: SecurityWeek
CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk
The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday announced a new directive that requires federal agencies to prioritize patching the highest-risk security flaws.…
Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks
Oracle on Thursday released an out-of-band advisory addressing a PeopleSoft vulnerability that can be exploited by an unauthenticated attacker for remote code execution. The security…
FBI Seizes 13 Websites That Officials Say Were Used by China to Target and Recruit US Workers
The FBI has seized more than a dozen websites that officials say were part of a Chinese effort to target American workers who have access…
Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers
Researchers at cyber-physical systems security firm Claroty have uncovered multiple vulnerabilities in two widely deployed HVAC and UPS products used in data centers, demonstrating how…
Aryon Security Raises $29 Million in Series A Funding
Cybersecurity startup Aryon Security today announced raising $29 million in Series A funding. To date, the company has received $38 million in funding. The fresh…
Cyera Raises $600 Million at $12 Billion Valuation
Data security firm Cyera today announced raising $600 million in a fresh funding round that brings the company’s valuation to $12 billion. The fresh investment…
Infostealers Turn Millions of Devices Into Credential Theft Machines
Hackers no longer force open the side-window when infostealers can give them a key to the front door. Infostealers have become the primary source of…
After AI Reaches Production: 12 Ways Security Teams Can Take Control
In my previous column, I offered some suggestions to help security teams avoid being blindsided when AI applications are moved into production. In this piece,…
No Patch Planned for Exploited Arista EOS Vulnerability
Hackers have been exploiting a vulnerability in Arista Extensible Operating System (EOS) as a zero-day that will not be patched. Arista EOS is a modular,…
Adobe Patches 123 Vulnerabilities – SecurityWeek
Adobe’s latest Patch Tuesday updates fix 123 vulnerabilities across 11 products. Of the total, 57 vulnerabilities were patched in Adobe Experience Manager. The vast majority…
Microsoft Patches 200 Vulnerabilities – SecurityWeek
Microsoft’s June 2026 Patch Tuesday updates fix roughly 200 vulnerabilities discovered in the company’s products. None of the flaws addressed this month appears to have…