The company will use the investment to accelerate development of its autonomous virtual security operations center (vSOC).

The post RADICL Raises $31 Million for vSOC appeared first on SecurityWeek.

The company will use the latest capital to scale its go-to-market efforts and expand its platform’s capabilities.

The post RapidFort Raises $42M to Automate Software Supply Chain Security appeared first on SecurityWeek.

Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware.

The post Critical React Native Vulnerability Exploited in the Wild appeared first on SecurityWeek.

OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks.

The post Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant  appeared first on SecurityWeek.

ShinyHunters has claimed the theft of 14 million records from the US bakery-cafe chain’s systems.

The post Hackers Leak 5.1 Million Panera Bread Records appeared first on SecurityWeek.

The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.

The post Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  appeared first on SecurityWeek.

The company will invest in market expansion and accelerating product capabilities.

The post Kasada Raises $20 Million for Anti-Bot Expansion appeared first on SecurityWeek.

Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment.

The post ShinyHunters-Branded Extortion Activity Expands, Escalates appeared first on SecurityWeek.

A hacker published malicious versions of four established VS Code extensions to distribute a GlassWorm malware loader.

The post Open VSX Publisher Account Hijacked in Fresh GlassWorm Attack appeared first on SecurityWeek.

Poland’s CERT has published a report on the recent attack, providing new details on targeted ICS and attribution.

The post Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities appeared first on SecurityWeek.

Security leaders share how artificial intelligence is changing malware, ransomware, and identity-led intrusions, and how defenses must evolve.

The post Cyber Insights 2026: Malware and Cyberattacks in the Age of AI appeared first on SecurityWeek.

Of 3,100 unprotected MongoDB instances, half remain compromised, most of them by a single threat actor.

The post Over 1,400 MongoDB Databases Ransacked by Threat Actor appeared first on SecurityWeek.

The next major Windows Server and Windows releases will have the deprecated authentication protocol disabled by default.

The post Microsoft Moves Closer to Disabling NTLM appeared first on SecurityWeek.

Japan and Britain agree to accelerate cooperation on cybersecurity and the supply of critical minerals, as China’s influence grows in the region.

The post Japan, Britain to Boost Cybersecurity and Critical Minerals Cooperation as China’s Influence Grows appeared first on SecurityWeek.

The likely state-sponsored threat actor had access to the hosting provider for months and targeted only certain Notepad++ customers.

The post Notepad++ Supply Chain Hack Conducted by China via Hosting Provider appeared first on SecurityWeek.

Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers.

The post eScan Antivirus Delivers Malware in Supply Chain Attack appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Apple updates platform security guide, LastPass detects new phishing wave, CISA withdraws from RSA Conference.

The post In Other News: Paid for Being Jailed, Google’s $68M Settlement, CISA Chief’s ChatGPT Leak appeared first on SecurityWeek.

Aisy has emerged from stealth mode with $2.3 million in seed funding for its AI-assisted platform.

The post Aisy Launches Out of Stealth to Transform Vulnerability Management appeared first on SecurityWeek.

Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning.

The post 175,000 Exposed Ollama Hosts Could Enable LLM Abuse appeared first on SecurityWeek.

Two Biden-era memorandums have been revoked, but some of the resources they provide can still be used by government organizations. 

The post White House Scraps ‘Burdensome’ Software Security Rules  appeared first on SecurityWeek.