Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’
Microsoft announced on Tuesday that it has disrupted a cybercrime service that has been helping threat actors distribute ransomware and other malware. According to the…
Category: SecurityWeek
Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation
Drupal is warning users that it’s preparing a patch for a ‘highly critical’ vulnerability that may be exploited by threat actors shortly after its disclosure.…
Cyber Resilience is the New Business Continuity Plan
The contours of business disruption are changing. It can start with a ransomware incident, an identity compromise, a supplier outage, or a prolonged cloud failure…
Critical Vulnerability Exposes Industrial Robot Fleets to Hacking
Universal Robots, a Danish company specializing in collaborative industrial robots, or cobots, has patched a critical vulnerability affecting one of its operating systems. Advisories published…
Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE
A security researcher has released an exploit targeting a Windows vulnerability disclosed in 2020, warning that it might have never been patched. The flaw, tracked…
‘Claw Chain’ OpenClaw Flaws Allow Sandbox Escape, Backdoor Delivery
Four vulnerabilities in the OpenClaw AI assistant can be chained together to plant backdoors on the underlying host, cybersecurity firm Cyera warns. The bugs, collectively…
Millions Impacted Across Several US Healthcare Data Breaches
Several major data breaches were added to the healthcare data breach tracker maintained by the US Department of Health and Human Services (HHS) in recent…
7-Eleven Data Breach Confirmed After ShinyHunters Ransom Demand
7-Eleven, the world’s largest convenience store chain, has confirmed suffering a data breach after the notorious ShinyHunters hacker group claimed to have stolen information from…
Hackers Earn $1.3 Million at Pwn2Own Berlin 2026
Pwn2Own Berlin 2026 has come to an end, and participants earned a total of nearly $1.3 millon for exploits targeting Windows, Linux, VMware, Nvidia, and…
Cisco Patches Another SD-WAN Zero-Day, the Sixth Exploited in 2026
Cisco on Thursday announced the availability of patches for yet another critical SD-WAN zero-day vulnerability that has been exploited in attacks. It is the sixth…
PoC Code Published for Critical NGINX Vulnerability
Technical details and proof-of-concept (PoC) exploit code targeting a newly patched critical-severity vulnerability in NGINX are now available. Tracked as CVE-2026-42945 (CVSS score of 9.2),…
TeamPCP Ups the Game, Releases Shai-Hulud Worm’s Source Code
The infamous TeamPCP hacking group that besieged the open source software ecosystem several times over the past half year has released the source code of…