Designed for long-term access, the framework targets cloud and container environments with loaders, implants, and rootkits.

The post VoidLink Linux Malware Framework Targets Cloud Environments appeared first on SecurityWeek.

Hackers stole the personal and reservation information of people with a Eurail pass and those who made a seat reservation with the company.

The post Traveler Information Stolen in Eurail Data Breach appeared first on SecurityWeek.

Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.

The post Novee Emerges From Stealth With $51.5 Million in Funding appeared first on SecurityWeek.

The company will use the fresh investment to accelerate its global go-to-market and product expansion.

The post WitnessAI Raises $58 Million for AI Security Platform appeared first on SecurityWeek.

A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages.

The post Robo-Advisor Betterment Discloses Data Breach appeared first on SecurityWeek.

Exploitable without authentication, the two security defects could lead to configuration leak and code execution.

The post Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM appeared first on SecurityWeek.

The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.

The post Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

Adobe has released patches for 25 vulnerabilities across its products, including a critical Apache Tika flaw in ColdFusion.

The post Adobe Patches Critical Apache Tika Bug in ColdFusion appeared first on SecurityWeek.

The botnet’s propagation is fueled by the AI-generated server deployments that use weak credentials, and legacy web stacks.

The post GoBruteforcer Botnet Targeting Crypto, Blockchain Projects appeared first on SecurityWeek.

SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.

The post SAP’s January 2026 Security Updates Patch Critical Vulnerabilities appeared first on SecurityWeek.

The 44-year-old individual planted remote access malware on a logistics firm’s systems, with help from employees.

The post Dutch Port Hacker Sentenced to Prison appeared first on SecurityWeek.

Hackers stole complete customer information, including contact details, national identity numbers, and payment details.

The post Spanish Energy Company Endesa Hacked appeared first on SecurityWeek.

The social media platform confirmed that the issue allowed third parties to send password reset emails to Instagram users.

The post Instagram Fixes Password Reset Vulnerability Amid User Data Leak appeared first on SecurityWeek.

APT28 was seen impersonating popular webmail and VPN services, including Microsoft OWA, Google, and Sophos VPN portals.

The post Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities appeared first on SecurityWeek.

Threat actors are hunting for misconfigured proxy servers to gain access to APIs for various LLMs.

The post LLMs in Attacker Crosshairs, Warns Threat Intel Firm appeared first on SecurityWeek.

The company will use the investment to accelerate platform adoption and expansion into the federal market.

The post Torq Raises $140 Million at $1.2 Billion Valuation appeared first on SecurityWeek.