New GitHub, PyPI Policies Boost Supply Chain Security
GitHub and the Python Package Index (PyPI) have introduced new policies meant to boost supply chain security by preventing the fast propagation of poisoned package…
Category: SecurityWeek
PTC Windchill Vulnerability Exploited in Ransomware Campaign
A Cl0p ransomware affiliate has been observed exploiting a critical-severity remote code execution (RCE) vulnerability in PTC’s product lifecycle management (PLM) platforms Windchill and FlexPLM.…
MCBS Data Breach Affects 1.2 Million Individuals
A data breach suffered last year by Atlanta-based medical business management company MCBS (Medical Computer Business Services) affects more than 1.2 million individuals. According to…
Rockwell Patches Code Execution Flaws in Arena Simulation Software
Rockwell Automation has patched four vulnerabilities in its Arena Simulation software that could let an attacker execute arbitrary code on an affected system, according to…
Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses
Texas-based consumer finance company Upbound Group, Inc. says recent cybersecurity incidents led to a data breach that resulted in millions of dollars in fraudulent contract…
Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models
SentinelOne has built what it calls the first long-horizon reverse-engineering benchmark for frontier AI models, using its own investigation into the recently documented Fast16 malware…
AegisAI Raises $36 Million for AI-Powered Email Security
Email security company AegisAI announced on Thursday that it has raised $36 million in a Series A funding round. The round was led by Battery…
In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader…
Data Breach Confirmed After Australian Energy Giant Origin Is Hacked
Australia’s Origin Energy Limited has confirmed suffering a data breach, and a hacker claims to have accessed the records of millions of customers. Headquartered in…
Chick-fil-A Accounts Get Fried in Credential Stuffing Attack
US fast-food chain Chick-fil-A has disclosed a data breach stemming from a credential stuffing attack targeting its customers’ online accounts. According to notifications sent to…
Is Patching Dead? Vulnerability Management in the Post-Mythos Era
On July 14, 2026, the White House launched Gold Eagle: a federal clearinghouse that uses frontier AI to identify, rank, and coordinate the remediation of…
OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider
Zenity Labs has found and disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents, which it names AgentForger; a tailored cross-site request forgery (CSRF). With…