SecurityWeek (@SecurityWeek) header
SecurityWeek (@SecurityWeek) profile picture

SecurityWeek

@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets56K
  • Following2.8K
  • Followers23K
800Media
Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)
FAA issues ground stop due to ‘extraordinary circumstances’ said to be a "communication issue impacting all Air Route Traffic Control Centers - No mention of possible cyberattack at this time - securityweek.com/faa-ground-…
FAA Ground Stop Issued Due to “Extraordinary Circumstances”

FAA Ground Stop Issued Due to “Extraordinary Circumstances”

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

securityweek.com
1
1
2
1,132
FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’ - securityweek.com/faa-ground-…
FAA Ground Stop Issued Due to “Extraordinary Circumstances”

FAA Ground Stop Issued Due to “Extraordinary Circumstances”

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

securityweek.com
1
1,085
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach securityweek.com/in-other-ne…
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.

securityweek.com
1
1,385
Apify Confirms Customer Data Accessed in Cyberattack securityweek.com/apify-confi…
Apify Confirms Customer Data Accessed in Cyberattack

Apify Confirms Customer Data Accessed in Cyberattack

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

securityweek.com
2
1
3
1,796
Hackers Exploit New N-central Zero-Day Hours After PoC Publication securityweek.com/hackers-exp…
Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.

securityweek.com
2
1
3
1,676
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks securityweek.com/silentair-h…
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

securityweek.com
3
2
2
1,992
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure securityweek.com/law-enforce…
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

securityweek.com
1
1
1,779
Citrix Patches 10 Critical NetScaler Vulnerabilities securityweek.com/citrix-patc…
Citrix Patches 10 Critical NetScaler Vulnerabilities

Citrix Patches 10 Critical NetScaler Vulnerabilities

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

securityweek.com
1
2
2
1,810
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools securityweek.com/openai-unve…
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.

securityweek.com
1
1,488
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ securityweek.com/nightmare-e…
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

securityweek.com
5
2,068
PHP2Shell Exploited in Destructive Check Point Gateway Attacks securityweek.com/php2shell-e…
PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.

securityweek.com
8
6
20
4,139
Hackers Exploit New N-central Zero-Day Hours After PoC Publication securityweek.com/hackers-exp…
Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.

securityweek.com
1
2
1
7
2,249
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google securityweek.com/apache-patc…
Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

Apache Patches Critical HTTP Server RCE Found by Anthropic, Google

The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.

securityweek.com
1
3
1
4
2,286
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign securityweek.com/attacker-ta…
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign

Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories.

securityweek.com
1
5
2,066
Hackers Deploy Malware in Fresh ScreenConnect Campaign securityweek.com/hackers-dep…
Hackers Deploy Malware in Fresh ScreenConnect Campaign

Hackers Deploy Malware in Fresh ScreenConnect Campaign

The attackers exploited a vulnerability in a legitimate extension to bypass ScreenConnect authentication.

securityweek.com
1
1
1,578
FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance - securityweek.com/fbi-says-us…
FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance

FBI Says US Seized $1.2 Billion Worth of Cryptocurrency Stolen From Binance

Also Thursday, the FBI blamed North Korea for a separate social engineering scheme that officials say resulted in the theft of $400 million worth of cryptocurrency.

securityweek.com
1
3
2
2,048
Daylight Lands $80 Million for AI-Powered Security Operations securityweek.com/daylight-la…
Daylight Lands $80 Million for AI-Powered Security Operations

Daylight Lands $80 Million for AI-Powered Security Operations

The company plans to accelerate product development, hire new talent, expand its US presence, and enter new markets.

securityweek.com
1
3
1,698
Microsoft 365 Outage Update - A process that establishes secure connections was becoming overwhelmed, causing affected servers to stop handling requests. Microsoft began rolling back a recent network configuration change that coincided with the start of the disruption and was monitoring whether the rollback helped. securityweek.com/microsoft-3…
Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams

Microsoft 365 Outage Disrupts Outlook, Exchange Online and Teams

Microsoft says failed server health checks disrupted Outlook and other Microsoft 365 services. The company is still investigating the cause and has disclosed no evidence of a cyberattack.

securityweek.com
4
16
25
6,110
Notion Customer Data Compromised in Fireworks AI Hack securityweek.com/notion-cust…
Notion Customer Data Compromised in Fireworks AI Hack

Notion Customer Data Compromised in Fireworks AI Hack

The attackers accessed chat transcripts for fewer than 1% of Notion workspaces. Most transcripts were unattributable.

securityweek.com
1
2
2,054
Critical Red Hat Quay Vulnerability Could Expose Private Container Images securityweek.com/critical-re…
Critical Red Hat Quay Vulnerability Could Expose Private Container Images

Critical Red Hat Quay Vulnerability Could Expose Private Container Images

Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.

securityweek.com
2
1,955
Load more