Designed for long-term access, the framework targets cloud and container environments with loaders, implants, and rootkits.

The post VoidLink Linux Malware Framework Targets Cloud Environments appeared first on SecurityWeek.

Only a dozen new advisories have been published this Patch Tuesday by industrial giants. 

The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Schneider, Aveva, Phoenix Contact appeared first on SecurityWeek.

Hackers stole the personal and reservation information of people with a Eurail pass and those who made a seat reservation with the company.

The post Traveler Information Stolen in Eurail Data Breach appeared first on SecurityWeek.

The developer security company has raised a total of more than $84 million in funding.

The post Aikido Security Raises $60 Million at $1 Billion Valuation appeared first on SecurityWeek.

A judge has ruled that the plaintiffs failed to demonstrate intent to defraud investors. 

The post Investor Lawsuit Over CrowdStrike Outage Dismissed appeared first on SecurityWeek.

RedVDS enables threat actors to set up servers that can be used for phishing, BEC attacks, account takeover, and fraud.

The post RedVDS Cybercrime Service Disrupted by Microsoft and Law Enforcement appeared first on SecurityWeek.

The Predator spyware is more sophisticated and dangerous than previously realized.

The post Predator Spyware Turns Failed Attacks Into Intelligence for Future Exploits appeared first on SecurityWeek.

Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.

The post Novee Emerges From Stealth With $51.5 Million in Funding appeared first on SecurityWeek.

The company will use the fresh investment to accelerate its global go-to-market and product expansion.

The post WitnessAI Raises $58 Million for AI Security Platform appeared first on SecurityWeek.

A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages.

The post Robo-Advisor Betterment Discloses Data Breach appeared first on SecurityWeek.

Exploitable without authentication, the two security defects could lead to configuration leak and code execution.

The post Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM appeared first on SecurityWeek.

The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.

The post Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

News of the move to acquire Seraphic comes less than a week after CrowdStrike announced an agreement to acquire identity security startup SGNL for $740 million.

The post CrowdStrike to Acquire Browser Security Firm Seraphic for $420 Million appeared first on SecurityWeek.

Adobe has released patches for 25 vulnerabilities across its products, including a critical Apache Tika flaw in ColdFusion.

The post Adobe Patches Critical Apache Tika Bug in ColdFusion appeared first on SecurityWeek.

Two vulnerabilities patched this month by Microsoft were disclosed publicly before fixes were released.

The post Microsoft Patches Exploited Windows Zero-Day, 111 Other Vulnerabilities appeared first on SecurityWeek.

The botnet’s propagation is fueled by the AI-generated server deployments that use weak credentials, and legacy web stacks.

The post GoBruteforcer Botnet Targeting Crypto, Blockchain Projects appeared first on SecurityWeek.

The law firm Fried Frank seems to be informing high-profile clients about a recent data security incident. 

The post After Goldman, JPMorgan Discloses Law Firm Data Breach appeared first on SecurityWeek.

AI will assist companies in finding their external attack surface, but it will also assist bad actors in locating and attacking the weak points.

The post Cyber Insights 2026: External Attack Surface Management appeared first on SecurityWeek.

The vulnerability was discovered in Asus routers, but all devices using the affected chipset are susceptible to attacks. 

The post Broadcom Wi-Fi Chipset Flaw Allows Hackers to Disrupt Networks appeared first on SecurityWeek.

SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.

The post SAP’s January 2026 Security Updates Patch Critical Vulnerabilities appeared first on SecurityWeek.