Drupal Warns of Fast Exploitation Risk for Critical Core RCE Flaw
Drupal has rolled out patches for five vulnerabilities, including two critical-severity bugs that could be exploited for remote code execution (RCE). The first resides in…
Category: SecurityWeek
Exploited Fortinet Bug Linked to Stealthy FortiGate Implant in Telecom Hack
A suspected state-sponsored threat actor exploited multiple Fortinet vulnerabilities in an attack against a telecommunications organization, Palo Alto Networks reports. The intrusion, attributed to UNC5820…
US Cybersecurity Job Postings Fall 26% as AI Security Engineer Demand Soars
CyberSN’s Cybersecurity Jobs Report provides visibility into the US cybersecurity job market. It’s a mixed bag. Data for CyberSN’s jobs report is aggregated from JobSpikr…
Microsoft Patches Two Dozen RCE Flaws in Office
Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities. Most of the new fixes…
Israeli Ad Firm Doubled as Candiru’s Zero-Click Spyware Delivery Channel
Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As…
F5, Juniper Networks Patch Critical Vulnerabilities
F5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, including critical-severity remote code execution (RCE) flaws. Security and application…
OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
OpenAI has disclosed two incidents in which internal AI models, asked only to look up public figures, instead broke into the live systems hosting that…
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The exploited flaw, tracked…
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
Federal bankruptcy courts across the US have been unable to send notices through the Bankruptcy Noticing Center (BNC) for a week. The outage followed a…
Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis
Proofpoint has agreed to acquire data and AI security firm Varonis in an all-cash deal valued at roughly $6.3 billion, the two companies announced on…
UK Legal Aid Agency Hack Scope Widens After Forensic Review
The UK’s Legal Aid Agency (LAA) has discovered that records dating back to 1978 were compromised in an April 2025 data breach. In May last…