Medtronic Data Breach Impacts 3.8 Million People
Medical technology giant Medtronic is notifying more than 3.8 million individuals that their personal and medical information was compromised in a recent data breach. The…
Category: SecurityWeek
In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting
SecurityWeek’s cybersecurity news weekly roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader…
Agentic AI Used to Conduct Ransomware Attack via Langflow
A threat actor exploited a vulnerability in Langflow to access an organization’s instance and abuse it in an agentic ransomware attack, cloud security firm Sysdig…
Cisco Confirms In-the-Wild Exploitation of Unified CM Vulnerability
Cisco confirmed that a recently patched vulnerability in its Unified Communications Manager (Unified CM) and Unified Communications Manager Session Management Edition (Unified CM SME) has…
FortiBleed Campaign Linked to INC, Lynx Ransomware Attacks
FortiBleed, the large-scale credential-harvesting operation targeting organizations in 150 countries, has led to the deployment of INC Ransom and Lynx ransomware families, SOCRadar reports. Uncovered…
How to Conduct a Successful Audit of AI-Driven Software Development
Traditionally, an audit independently examines records, processes and controls to verify compliance and assess financial and operational integrity. In the modern world, such an approach…
New CitrixBleed Vulnerability Exploited Immediately After Public Disclosure
Threat actors began exploiting the latest CitrixBleed-like vulnerability in NetScaler ADC and NetScaler Gateways less than 24 hours after public disclosure, Scottish cybersecurity firm Lupovis…
Trump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm
The Trump administration has lifted restrictions on artificial intelligence company Anthropic’s latest versions of its Claude chatbot, ending a weekslong ban tied to cybersecurity concerns.…
Apple Patches Dozens of Vulnerabilities Across iOS, macOS, and Safari
Apple announced security updates this week for iOS, iPadOS, macOS Tahoe, and Safari that resolve dozens of vulnerabilities, including 26 security defects in WebKit. iOS…
Frontier AI: Six Questions Every Enterprise Should Ask Security Vendors
Frontier AI is a popular topic of late. Indeed, the impact of Frontier AI to the way we identify, mitigate, and patch vulnerabilities is far…
Microsoft Adds New Teams Controls to Block Unauthorized AI Bots From Meetings
Microsoft on Tuesday announced a new Teams admin policy aimed at providing organizations with increased visibility and control over external bots joining their meetings. With…
Citrix Patches NetScaler Vulnerabilities, Including New ‘HTTP/2 Bomb’ Attack
Citrix on Tuesday announced fresh NetScaler ADC and NetScaler Gateway security updates that resolve six vulnerabilities, including the recent HTTP/2 Bomb flaw. Four of the…