Ivanti Sentry Exploitation Attempts Hitting Honeypots
The US Cybersecurity and Infrastructure Security Agency (CISA) flagged a recently patched Ivanti Sentry vulnerability as exploited, but Ivanti says the activity was observed only…
Category: SecurityWeek
Hackers Exploit Langflow Vulnerability for Remote Code Execution
Threat actors have begun exploiting a high-severity vulnerability in the popular low-code AI development platform Langflow, according to VulnCheck. Tracked as CVE-2026-5027 (CVSS score of…
OnyxC2 Stealer Offers Cybercriminals Enterprise-Grade Theft for $250 a Month
The OnyxC2 stealer surfaced on a cybercrime network earlier this year and is available through Malware-as-a-Service (MaaS) for hire starting at $250 per month. The…
CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk
The US Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday announced a new directive that requires federal agencies to prioritize patching the highest-risk security flaws.…
Oracle Addresses PeopleSoft Vulnerability Amid Reports of Zero-Day Attacks
Oracle on Thursday released an out-of-band advisory addressing a PeopleSoft vulnerability that can be exploited by an unauthenticated attacker for remote code execution. The security…
FBI Seizes 13 Websites That Officials Say Were Used by China to Target and Recruit US Workers
The FBI has seized more than a dozen websites that officials say were part of a Chinese effort to target American workers who have access…
Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers
Researchers at cyber-physical systems security firm Claroty have uncovered multiple vulnerabilities in two widely deployed HVAC and UPS products used in data centers, demonstrating how…
Aryon Security Raises $29 Million in Series A Funding
Cybersecurity startup Aryon Security today announced raising $29 million in Series A funding. To date, the company has received $38 million in funding. The fresh…
Cyera Raises $600 Million at $12 Billion Valuation
Data security firm Cyera today announced raising $600 million in a fresh funding round that brings the company’s valuation to $12 billion. The fresh investment…
Infostealers Turn Millions of Devices Into Credential Theft Machines
Hackers no longer force open the side-window when infostealers can give them a key to the front door. Infostealers have become the primary source of…
After AI Reaches Production: 12 Ways Security Teams Can Take Control
In my previous column, I offered some suggestions to help security teams avoid being blindsided when AI applications are moved into production. In this piece,…
No Patch Planned for Exploited Arista EOS Vulnerability
Hackers have been exploiting a vulnerability in Arista Extensible Operating System (EOS) as a zero-day that will not be patched. Arista EOS is a modular,…