@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets55.8K
  • Following2.8K
  • Followers229K
798Media
Include

Only show posts containing:

Exclude

Hide posts containing:

Time range
-
Minimum likes
SecurityWeek
@SecurityWeek2h
Hacker Conversations: Corey Thuen and the Evil Bit securityweek.com/hacker-conv…

Hacker Conversations: Corey Thuen and the Evil Bit

Corey Thuen hires hackers for what he calls ‘the evil bit’ — an adversarial streak he believes is either there or it isn’t.

securityweek.com
1
1,031
SecurityWeek
@SecurityWeek4h
Signal Vulnerability Lets Malicious Callers Block Hang-Ups securityweek.com/signal-vuln…

Signal Vulnerability Lets Malicious Callers Block Hang-Ups

Affecting the open source calling library RingRTC, the bug prevented calls from ending properly.

securityweek.com
1
4
1,260
SecurityWeek
@SecurityWeek5h
Tech and Security Companies Respond to PHP2Shell Vulnerabilities securityweek.com/tech-and-se…

Tech and Security Companies Respond to PHP2Shell Vulnerabilities

Vendors are checking their products for PHP2Shell, security firms are shipping detections, and governments are urging immediate patching.

securityweek.com
1
9
1,307
SecurityWeek
@SecurityWeek5h
US Agencies Detail Incident Response Practices for Rogue AI Agents securityweek.com/us-agencies…

US Agencies Detail Incident Response Practices for Rogue AI Agents

NIST, CISA and NSA share ten voluntary practices for preparing for, detecting, responding to, recovering from, and reporting rogue AI agent incidents.

securityweek.com
4
3
1,520
SecurityWeek
@SecurityWeek6h
Splunk, SolarWinds Release Fresh Security Updates securityweek.com/splunk-sola…

Splunk, SolarWinds Release Fresh Security Updates

Patched vulnerabilities could allow attackers to execute code, elevate privileges, and leak sensitive information.

securityweek.com
1
2
1,356
SecurityWeek
@SecurityWeek7h
Cisco Patches 34 Vulnerabilities Across Multiple Products securityweek.com/cisco-patch…

Cisco Patches 34 Vulnerabilities Across Multiple Products

Critical-severity security defects could lead to command execution, authentication bypass, and XSS attacks.

securityweek.com
1
3
9
2,116
SecurityWeek
@SecurityWeek7h
PHP2Shell Exploitation Started Days Before Patches securityweek.com/php2shell-e…

PHP2Shell Exploitation Started Days Before Patches

Initial attempts were observed on October 17, and mass activity began shortly after patches were released.

securityweek.com
1
1
7
1,409
SecurityWeek
@SecurityWeek9h
Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU securityweek.com/oracle-patc…

Oracle Patches Over 1,200 Vulnerabilities With October 2026 CPU

Nearly 100 vulnerabilities have been assigned a critical severity rating and Fusion Middleware received the most patches.

securityweek.com
2
3
13
2,244
SecurityWeek
@SecurityWeek9h
Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook securityweek.com/meta-ordere…

Meta Ordered to Pay New Mexico $25 Billion for Deceiving Users About Privacy on Facebook

The $25 billion award far exceeds a $5 billion fine the Federal Trade Commission levied against Facebook in 2019.

securityweek.com
2
4
1,268
SecurityWeek
@SecurityWeek14h
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor securityweek.com/openai-agen…

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.

securityweek.com
1
4
12
2,004
SecurityWeek
@SecurityWeek15h
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes securityweek.com/memory-bugs…

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.

securityweek.com
1
3
1
11
1,828
SecurityWeek
@SecurityWeek16h
Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys securityweek.com/browsers-bl…

Browsers Block eMudhra Intermediate CAs Over Recoverable Private Keys

The private keys associated with eight certificates were compromised, and root programs and trust stores are blocking them.

securityweek.com
2
1
8
1,574
SecurityWeek
@SecurityWeek17h
China Defends DeepSeek After US Ban of Its AI From Government Systems securityweek.com/china-defen…

China Defends DeepSeek After US Ban of Its AI From Government Systems

China hit back Tuesday at a U.S. ban on the use of Chinese artificial intelligence startup DeepSeek’s products by federal civilian agencies and warned of retaliatory measures as the two AI powers...

securityweek.com
1
1
1
1,850
SecurityWeek
@SecurityWeek22h
Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor securityweek.com/chinese-ai-…

Chinese AI Model Writes More Hackable Code When Told It’s for US Contractor

Tasked with writing an application for a US defense contractor, the model made the code 19% more likely to be hackable.

securityweek.com
2
2
1,524
SecurityWeek
@SecurityWeek23h
Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections securityweek.com/google-hard…

Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections

Protections have been added against scams and social engineering, including new site warnings and server-side Gemini analysis.

securityweek.com
4
1
5
1,661
SecurityWeek
@SecurityWeekOct 21
PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors securityweek.com/php2shell-p…

PHP2Shell Patches Land as First Exploitation Attempts Hit Sensors

The two RCE bugs can be exploited against WordPress, Drupal, Joomla, and other popular applications.

securityweek.com
2
7
1,710
SecurityWeek
@SecurityWeekOct 21
Just as landmines are used to destroy or slow an advancing army, Tracebit has developed AI ‘context bombs’ that are planted in the battlefield. Each bomb comprises crafted and hidden prompts that are automatically ingested by the attacking AI when it crawls the target. securityweek.com/context-bom…

‘Context Bombs’ Cut AI Attack Success by Misleading Agents With Fake Targets

Deceptive prompts lure AI agents into decoys and dead ends, cutting attack success by up to 91% in tests and raising the cost of a successful attack 23-fold.

securityweek.com
1
3
1,312
SecurityWeek
@SecurityWeekOct 21
Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security securityweek.com/asymptote-l…

Asymptote Labs Lands $5.5 Million Seed for AI Agent Runtime Security

Asymptote Labs raises $5.5M seed led by Tower Research Ventures to commercialize its Beacon AI agent runtime security platform.

securityweek.com
2
1,227
SecurityWeek
@SecurityWeekOct 21
Memory Bugs Account for Most of Chrome’s 353 New Security Fixes securityweek.com/memory-bugs…

Memory Bugs Account for Most of Chrome’s 353 New Security Fixes

The update fixes 353 flaws, including 163 memory corruption and 125 use-after-free vulnerabilities.

securityweek.com
2
3
1,496
SecurityWeek
@SecurityWeekOct 21
OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor securityweek.com/openai-agen…

OpenAI Agents Silenced Security Team Alerts, Removed Misalignment Monitor

In two internal incidents, agents read routine coding instructions as permission to weaken monitoring, and one gave a false answer about it.

securityweek.com
4
1
1
1,562
Load more