OpenAI Hit by TanStack Supply Chain Attack
OpenAI has disclosed the impact of the recent TanStack supply chain attack, warning that credential material was exfiltrated from internal source code repositories. The open…
Category: SecurityWeek
American Lending Center Data Breach Affects 123,000 Individuals
American Lending Center this week revealed that a data breach discovered last year has impacted more than 123,000 individuals. American Lending Center (ALC) is a…
In Other News: Big Tech vs Canada Encryption Bill, Cisco’s Free AI Security Spec, Audi App Flaws
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
Microsoft Warns of Exchange Server Zero-Day Exploited in the Wild
Microsoft Exchange Server users are urged to immediately mitigate a newly disclosed zero-day vulnerability that has been exploited in attacks. Microsoft this week patched 137…
Chrome 148 Update Patches Critical Vulnerabilities
Google this week released a Chrome 148 update that resolves 79 vulnerabilities, including 14 critical-severity bugs across multiple components. The first critical issue is a…
Mythos Proves Potent in Vulnerability Discovery, Less Convincing Elsewhere
Mythos appears to be as powerful as claimed at detecting software vulnerabilities; but its capabilities in other areas is more nuanced. Anthropic’s Mythos AI model…
New Linux Kernel Vulnerability Fragnesia Allows Root Privilege Escalation
Linux distributions are informing users about a new kernel vulnerability that can be exploited by a local attacker to escalate privileges to root. Dubbed Fragnesia…
Enhancing Data Center Security Without Sacrificing Performance
Every data center cybersecurity team faces the same impossible equation: host-based agents consume CPU cycles that high-performance computing requires. For years, the industry has tried…
Chinese APTs Expand Targets, Update Backdoors in Recent Campaigns
China-linked state-sponsored hackers have been observed expanding their targets and updating malicious tools in fresh campaigns that either follow known patterns or adapt to current…
Researcher Drops YellowKey, GreenPlasma Windows Zero-Days
A disgruntled security researcher this week publicly disclosed two zero-day vulnerabilities in Windows that enable BitLocker bypass and privilege escalation. BitLocker, Windows’ built-in full-volume encryption…
Sweet Security Launches Agentic AI Red Teaming to Counter ‘Mythos Moment’
The Mythos Moment can be defined as the moment when industry fully realized that human security has no chance of matching the speed and volume…
Microsoft, Palo Alto Networks Find Many Vulnerabilities by Using AI on Their Own Code
Microsoft and Palo Alto Networks have separately reported this week that they have seen significant results after turning AI on their own code to find…