Up to 25% of Internet-Exposed ICS Are Honeypots: Researchers
An analysis conducted by researchers at the Norwegian University of Science and Technology Gjøvik and the Delft University of Technology in the Netherlands showed that…
Category: SecurityWeek
Wiz Warns of Ongoing Exploitation of Recent Ivanti Vulnerabilities
Cybersecurity firm Wiz says threat actors are actively exploiting in the wild two recently patched Ivanti Endpoint Manager Mobile (EPMM) vulnerabilities. Tracked as CVE-2025-4427 and…
Google DeepMind Unveils Defense Against Indirect Prompt Injection Attacks
Google DeepMind has developed an ongoing process to counter the continuously evolving threat from Agentic AI’s bete noir: adaptive indirect prompt injection attacks. Indirect prompt…
US Student to Plead Guilty Over PowerSchool Hack
A Massachusetts student pleaded guilty in court to hacking two US companies and extorting them for ransom. One of the organizations appears to be PowerSchool.…
Cellcom Service Disruption Caused by Cyberattack
Wisconsin telecommunications provider Cellcom has confirmed that a cyberattack is responsible for a service outage it has been dealing with for the past week. Both…
Virtual Event Today: Threat Detection & Incident Response (TDIR) Summit
SecurityWeek’s 2025 Threat Detection & Incident Response (TDIR) Summit takes place today (May 21st) from 11 AM ET to 4PM ET. Free to attend, this…
Ransomware Attack Forces Kettering Health to Cancel Procedures
Ohio healthcare network Kettering Health on Tuesday announced that patient procedures were canceled as it was dealing with a system-wide outage caused by a cyberattack.…
Critical OpenPGP.js Vulnerability Allows Spoofing
The developers of OpenPGP.js have released updates to patch a critical vulnerability that can be exploited to spoof message signature verification. OpenPGP.js is an open…
430,000 Impacted by Data Breaches at New York, Pennsylvania Healthcare Organizations
The personal and health information of over 430,000 individuals was compromised in October and November 2024 data breaches at Allegheny Health Network (AHN) and University…
Trimble Cityworks Customers Warned of Zero-Day Exploitation
US-based construction, geospatial and transportation technology solutions provider Trimble has warned customers of its Cityworks product about a vulnerability that has been exploited in the…
House Lawmakers Push to Ban AI App DeepSeek From US Government Devices
A bipartisan duo in the the U.S. House is proposing legislation to ban the Chinese artificial intelligence app DeepSeek from federal devices, similar to the…
1,000 Apps Used in Malicious Campaign Targeting Android Users in India
Mobile security firm Zimperium has uncovered a broad malicious campaign targeting Android users in India to steal personal and banking information. Dubbed FatBoyPanel, the campaign…