Guardarian Users Targeted With Malicious Strapi NPM Packages
A threat actor has targeted the Strapi ecosystem in a fresh supply chain attack involving 36 malicious NPM packages, according to supply chain security firm…
Category: SecurityWeek
Fortinet Rushes Emergency Fixes for Exploited Zero-Day
Fortinet over the weekend rushed emergency fixes for a FortiClient Enterprise Management Server (EMS) vulnerability that has been exploited as a zero-day. Described as an…
North Korean Hackers Drain $285 Million From Drift in 10 Seconds
A North Korean threat actor is likely to be blamed for a $285 million heist from decentralized finance (DeFi) platform Drift, executed as part of…
T-Mobile Sets the Record Straight on Latest Data Breach Filing
T-Mobile USA has provided clarification on a recent data breach notification, stating that it was triggered by an insider incident with a very limited impact.…
React2Shell Exploited in Large-Scale Credential Harvesting Campaign
A threat actor has been exploiting vulnerable Next.js applications to compromise systems and exfiltrate credentials at scale, Cisco’s Talos security researchers warn. Tracked as UAT-10608,…
European Commission Confirms Data Breach Linked to Trivy Supply Chain Attack
The European Commission (EC) has confirmed that hackers stole over 300GB of data from its AWS environment using an API key compromised in the Trivy…
Mobile Attack Surface Expands as Enterprises Lose Control
The mobile device attack surface is wide, fragmented, and not adequately controlled. There are two sides to any coin. Security is the same. To defend…
Critical ShareFile Flaws Lead to Unauthenticated RCE
Two critical-severity vulnerabilities in the ShareFile content collaboration and file-sharing platform could be chained together for unauthenticated remote code execution (RCE), attack surface management firm…
In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
TrueConf Zero-Day Exploited in Asian Government Attacks
Chinese hackers have exploited a zero-day vulnerability in the TrueConf video conferencing software in attacks against government entities in Asia, Check Point reports. The exploited…
250,000 Affected by Data Breach at Nacogdoches Memorial Hospital
Nacogdoches Memorial Hospital (NMH) is notifying 250,000 people that their personal and health information was compromised in a data breach. The incident, the hospital says,…
Cybersecurity M&A Roundup: 38 Deals Announced in March 2026
Thirty-eight cybersecurity-related merger and acquisition (M&A) deals were announced in March 2026. For a detailed view of the more than 420 acquisitions announced in 2025,…