@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
China APT Uses AI Pentest Tool Artex in ConnectWise Attacks securityweek.com/china-apt-u…

China APT Uses AI Pentest Tool Artex in ConnectWise Attacks

The state-sponsored hackers targeted hundreds of organizations and gained privileged access to some environments.

securityweek.com
1
534
Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months securityweek.com/attackers-e…

Attackers Exploit Third VeloCloud Orchestrator Zero-Day in Four Months

The critical-severity SQL injection flaw allows attackers to access privileged internal functionality and gain operator privileges.

securityweek.com
1
2
640
Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’ securityweek.com/quest-diagn…

Quest Diagnostics Reports Cyber Breach Affecting ‘Certain Patient Records’

In a regulatory filing, Quest Diagnostics reported unauthorized access to its Quanum Lab Services Manager, a platform where certain clients can place test orders.

securityweek.com
814
11 Million Impacted by Capcom Data Breach securityweek.com/11-million-…

11 Million Impacted by Capcom Data Breach

The hackers stole 11 million email addresses from CAPCOM ID and changed the login passwords for 196 accounts.

securityweek.com
1
881
LiteLLM Compromised in Fresh Supply Chain Attack securityweek.com/litellm-com…

LiteLLM Compromised in Fresh Supply Chain Attack

Hackers used compromised GitHub CLI OAuth tokens to push and approve malicious packages on PyPI and Docker.

securityweek.com
1
2
3
887
Atlassian Patches 75 Flaws in Data Center and Server Products securityweek.com/atlassian-p…

Atlassian Patches 75 Third-Party Flaws in Data Center and Server Products

Atlassian’s October bulletin lists 176 vulnerability entries, including 14 critical-severity issues, all in third-party components.

securityweek.com
1
1
1,041
Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform securityweek.com/indurex-rai…

Indurex Raises $8 Million to Expand Industrial Cybersecurity Platform

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

securityweek.com
2
1,172
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,317
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
4
1,485
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
5
5
1,474
Tech and Security Companies Respond to #PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
1
3
4
1,761
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
4
10
1,794
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,980
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
1
5
1,704
Tech and Security Companies Respond to PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
2
10
1,845
US Agencies Detail Incident Response Practices for Rogue AI Agents securityweek.com/us-agencies…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.

securityweek.com
4
1
7
2,269
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
2
1,649
Cisco Patches 34 Vulnerabilities Across Multiple Products securityweek.com/cisco-patch…

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

securityweek.com
1
9
23
4,994
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
3
8
1,765
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU securityweek.com/oracle-patc…

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

securityweek.com
2
3
14
2,712
Load more