The incident impacted the personal information of CIRO member firms and their registered employees.

The post 750,000 Impacted by Data Breach at Canadian Investment Watchdog appeared first on SecurityWeek.

The critical issue impacts Bluetooth audio accessories with improper Google Fast Pair implementations.

The post WhisperPair Attack Leaves Millions of Audio Accessories Open to Hijacking appeared first on SecurityWeek.

UAT-9686 exploited the bug to deploy the AquaShell backdoor on Cisco appliances with certain ports open to the internet.

The post Cisco Patches Vulnerability Exploited by Chinese Hackers appeared first on SecurityWeek.

The startup will use the investment to accelerate R&D, expand go-to-market efforts, and hire new talent.

The post Depthfirst Raises $40 Million for Vulnerability Management appeared first on SecurityWeek.

The attack bypassed Copilot’s data leak protections and allowed for session exfiltration even after the Copilot chat was closed.

The post New ‘Reprompt’ Attack Silently Siphons Microsoft Copilot Data appeared first on SecurityWeek.

Hackers stole patients’ personal, treatment, and health insurance information from the organization’s IT systems.

The post Central Maine Healthcare Data Breach Impacts 145,000 Individuals appeared first on SecurityWeek.

Designed for long-term access, the framework targets cloud and container environments with loaders, implants, and rootkits.

The post VoidLink Linux Malware Framework Targets Cloud Environments appeared first on SecurityWeek.

Hackers stole the personal and reservation information of people with a Eurail pass and those who made a seat reservation with the company.

The post Traveler Information Stolen in Eurail Data Breach appeared first on SecurityWeek.

Novee provides continuous AI-driven penetration testing to uncover and address novel vulnerabilities.

The post Novee Emerges From Stealth With $51.5 Million in Funding appeared first on SecurityWeek.

The company will use the fresh investment to accelerate its global go-to-market and product expansion.

The post WitnessAI Raises $58 Million for AI Security Platform appeared first on SecurityWeek.

A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages.

The post Robo-Advisor Betterment Discloses Data Breach appeared first on SecurityWeek.

Exploitable without authentication, the two security defects could lead to configuration leak and code execution.

The post Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM appeared first on SecurityWeek.

The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.

The post Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

Adobe has released patches for 25 vulnerabilities across its products, including a critical Apache Tika flaw in ColdFusion.

The post Adobe Patches Critical Apache Tika Bug in ColdFusion appeared first on SecurityWeek.

The botnet’s propagation is fueled by the AI-generated server deployments that use weak credentials, and legacy web stacks.

The post GoBruteforcer Botnet Targeting Crypto, Blockchain Projects appeared first on SecurityWeek.

SAP has released 17 security notes, including four that address critical SQL injection, RCE, and code injection vulnerabilities.

The post SAP’s January 2026 Security Updates Patch Critical Vulnerabilities appeared first on SecurityWeek.

The 44-year-old individual planted remote access malware on a logistics firm’s systems, with help from employees.

The post Dutch Port Hacker Sentenced to Prison appeared first on SecurityWeek.

Hackers stole complete customer information, including contact details, national identity numbers, and payment details.

The post Spanish Energy Company Endesa Hacked appeared first on SecurityWeek.

The social media platform confirmed that the issue allowed third parties to send password reset emails to Instagram users.

The post Instagram Fixes Password Reset Vulnerability Amid User Data Leak appeared first on SecurityWeek.

APT28 was seen impersonating popular webmail and VPN services, including Microsoft OWA, Google, and Sophos VPN portals.

The post Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities appeared first on SecurityWeek.