Dubbed GopherWhisper, the group relies on multiple Go-based backdoors alongside custom loaders and injectors.

The post China-Linked APT GopherWhisper Abuses Legitimate Services in Government Attacks appeared first on SecurityWeek.

It targeted high-precision calculation software to tamper with results and packed a self-propagation mechanism.

The post Pre-Stuxnet Sabotage Malware ‘Fast16’ Linked to US-Iran Cyber Tensions appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Supreme Court hacker sentenced, Lovable exposed user data, Google expands enterprise security. 

The post In Other News: Unauthorized Mythos Access, Plankey CISA Nomination Ends, New Display Security Device appeared first on SecurityWeek.

From autonomous code generation to decision-making systems that initiate actions without human intervention, the industry is entering a new phase.

The post Why Cybersecurity Must Rethink Defense in the Age of Autonomous Agents appeared first on SecurityWeek.

Locked Shields has grown significantly over the past 16 years, with only four nations participating in the first edition.

The post Locked Shields 2026: 41 Nations Strengthen Cyber Resilience in World’s Biggest Exercise appeared first on SecurityWeek.

The malware provides remote access and control of infected devices and maintains post-patching persistence.

The post US Federal Agency’s Cisco Firewall Infected With ‘Firestarter’ Backdoor appeared first on SecurityWeek.

The Trump administration is vowing to crack down on foreign tech companies’ exploitation of U.S. artificial intelligence models.

The post Trump Administration Vows Crackdown on Chinese Companies ‘Exploiting’ AI Models Made in US appeared first on SecurityWeek.

CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw.

The post Vulnerabilities Patched in CrowdStrike, Tenable Products appeared first on SecurityWeek.

Tied to a fresh Checkmarx supply chain attack claimed by TeamPCP, the incident references the Shai-Hulud worm.

The post Bitwarden NPM Package Hit in Supply Chain Attack appeared first on SecurityWeek.

The Israel-based company, which just emerged from stealth mode, was founded by cloud and security experts from RSA, McAfee, and Unity.

The post Copperhelm Raises $7 Million for Agentic Cloud Security Platform appeared first on SecurityWeek.

The company will use the investment to accelerate product development and grow go-to-market efforts.

The post Cloudsmith Raises $72 Million in Series C Funding appeared first on SecurityWeek.

360 Digital Security Group claims to have uncovered 1,000 vulnerabilities using AI, including at the Tianfu Cup hacking contest.

The post Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos appeared first on SecurityWeek.

The company will hire new talent and expand operations across the US and other allied countries.

The post Rilian Raises $17.5 Million for AI-Native Security Orchestration appeared first on SecurityWeek.

New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.

The post The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface appeared first on SecurityWeek.

The company is notifying My Rituals members that hackers downloaded part of their data, including names and addresses.

The post Luxury Cosmetics Giant Rituals Discloses Data Breach appeared first on SecurityWeek.

Palo Alto Networks has developed Zealot, a multi-agent penetration testing PoC capable of reconnaissance, exploitation, and exfiltration. 

The post AI Can Autonomously Hack Cloud Systems With Minimal Oversight: Researchers  appeared first on SecurityWeek.

Apple rolled out the security patches for dozens of iPhone and iPad models and generations.

The post Apple Patches iOS Flaw Allowing Recovery of Deleted Chats appeared first on SecurityWeek.

The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.

The post Recent Microsoft Defender Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

The post After Bluesky, Mastodon Targeted in DDoS Attack appeared first on SecurityWeek.

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict.

The post Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says appeared first on SecurityWeek.