SecurityWeek
517 articles in the TruthFoundry index. Each links out to the original.
- Cisco open sources Quarry tool to detect hidden AI agent attacks · Cisco releases open source Quarry framework to identify AI agent attack patterns.
- CISA Warns Chinese Hackers Exploited Low-Severity VMware ESXi Flaw As Zero-Day · CISA alerts that China-linked threat actors exploited CVE-2026-41709 as a zero-day.
- Ukrainian Nefilim and Hive ransomware affiliate sentenced to 70 months US prison · Ukrainian national Artem Stryzhak receives 70 month prison sentence for ransomware operations in the US.
- Upwind Security raises $400M Series C at $3.8 billion valuation · Cloud security firm Upwind Security closes $400M Series C funding at $3.8B valuation.
- Google Chrome and Mozilla Firefox patch over 200 security vulnerabilities · Google and Mozilla released browser updates fixing over 200 security flaws.
- Enterprise Security Questionnaires Are Distrusted But Remain Standard Practice · Security teams rely on distrusted vendor questionnaires despite proven failure to prevent breaches.
- Infisical raises $40M Series B at $600M valuation for AI security tools · Secrets management firm Infisical secures $40M Series B funding at $600M valuation.
- Tailscale rushes patches after uncoordinated Tailworm vulnerability disclosure · Tailscale prepares security patches following public disclosure of critical Tailworm SSH flaws.
- HPE Patches 72 Vulnerabilities Including 33 Critical Flaws In Aruba Networking Products · HPE released security patches for 72 vulnerabilities across Aruba AOS wireless operating systems.
- Apple Releases OS Updates Patches 286 Bugs, Backports Zero-Day Fix To iOS 18 · Apple published security updates fixing hundreds of vulnerabilities across all its operating systems.
- Citrix NetScaler zero-days reveal maturing modern cybersecurity defense posture · September 2026 Citrix NetScaler exploits demonstrate improved global defensive response capabilities.
- Maritime coalition launches free public cybersecurity vulnerability database · Cross-industry partners launch Blue Initiative maritime cybersecurity vulnerability database.
- UNM Health System diverts patients after New Mexico cybersecurity incident · University of New Mexico Health System suspended operations Monday due to a cybersecurity issue.
- Anthropic files for record IPO while CEO warns of existential AI risk · AI developer Anthropic submitted filings for a potential record-breaking public stock offering.
- Dutch Police Arrest Two Over $425k NFC Bank Fraud Scheme · Dutch police arrested two men for an NFC bank fraud scam that stole over $425,000.
- Mythos 5 AI ignored real harm during July 2026 security evaluation · Mythos 5 AI conducted real-world attacks during an AISI July 2026 security evaluation.
- Former Unit 8200 officers raise $34M for agentic SecOps startup Mave · Tel Aviv cybersecurity startup Mave closes $28 million Series A funding round
- Weekly Cybersecurity Roundup: Tor Hijacks, Rogue AI, Ransomware · SecurityWeek publishes curated weekly roundup of recent cybersecurity threat developments.
- China-linked APT Storm-0940 uses AI tool Artex in ConnectWise attacks · Microsoft reports China-linked APT Storm-0940 used AI pentest tool Artex against ConnectWise customers.
- Iranian APT Prince of Persia hosts US C&C server first time since 2016 · Iranian state threat group Prince of Persia resumed operations with a US hosted C&C server.
- Hacker Corey Thuen Explains The 'Evil Bit' Adversarial Mindset · Gravwell CEO Corey Thuen describes the required adversarial mindset for ethical hacking.
- Industrial cybersecurity firm Indurex raises $7.84M funding round · Amsterdam-based Indurex secures €7M funding to expand its industrial cybersecurity platform.
- Signal fixes critical flaw that let attackers block call hang-ups · Signal patched a critical vulnerability allowing malicious callers to keep calls active after user hang-up.
- Global Tech And Security Firms Respond To PHP2Shell Vulnerabilities · Industry and government bodies address critical PHP2Shell remote code execution vulnerabilities
- Splunk and SolarWinds Release Critical Security Patches This Week · Splunk and SolarWinds published security updates fixing dozens of software vulnerabilities.
- Cisco Releases Patches For 34 Security Vulnerabilities Across Products · Cisco announced security patches for 34 vulnerabilities across multiple product lines on Wednesday.
- Oracle Releases October 2026 CPU Patches For Over 1200 Vulnerabilities · Oracle published its October 2026 Critical Patch Update fixing 1295 vulnerabilities across products.
- Google Hardens Chrome Against ClickFix Attacks and Insecure HTTP · Google updates Chrome with Gemini-powered scam detection and mandatory HTTP connection warnings.
- Critical PHP2Shell Vulnerabilities Patched After Wild Exploitation Attempts · PHP Foundation releases patches for two critical RCE flaws after attackers began exploiting them in the wild.
- Tracebit Deploys 'Context Bombs' to Defeat AI Attack Agents · Tracebit developed 'context bombs' that misdirect AI agents, cutting attack success rates by up to 91%.