Broadcom, Bechtel, Estée Lauder, and Abbott Technologies are the only major companies that have yet to issue a public statement. 

The post Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact appeared first on SecurityWeek.

The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages.

The post Security Firm Executive Targeted in Sophisticated Phishing Attack appeared first on SecurityWeek.

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

The post China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation appeared first on SecurityWeek.

Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.

The post Threat Actor Targeting VPN Users in New Credential Theft Campaign appeared first on SecurityWeek.

Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.

The post ForceMemo: Python Repositories Compromised in GlassWorm Aftermath appeared first on SecurityWeek.

Initial evidence indicates Iran may be behind the attack, but officials admitted it could be a false flag. 

The post Hacking Attempt Reported at Poland’s Nuclear Research Center appeared first on SecurityWeek.

Personal information such as names, email addresses, and phone numbers was accessed by hackers.

The post Loblaw Data Breach Impacts Customer Information appeared first on SecurityWeek.

The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.

The post Critical HPE AOS-CX Vulnerability Allows Admin Password Resets appeared first on SecurityWeek.

Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.

The post Starbucks Data Breach Impacts Employees appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Telus Digital data breach, vulnerabilities in Linux AppArmor allow root privileges, US defense contractor behind Coruna exploits.

The post In Other News: N8n Flaw Exploited, Slopoly Malware, Interpol Cybercrime Crackdown appeared first on SecurityWeek.

The leadership structure, commonly referred to as the “dual-hat” arrangement, assigns a single individual to oversee both organizations.

The post Senate Confirms Joshua Rudd to Lead NSA and US Cyber Command appeared first on SecurityWeek.

Stryker was targeted by the Handala group, which claims to have wiped more than 200,000 of the company’s devices.

The post MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack appeared first on SecurityWeek.

Google has completed its $32 billion acquisition of the cloud security giant, which will maintain its brand.

The post Wiz Joins Google Cloud as Landmark Acquisition Closes appeared first on SecurityWeek.

Cardwell started her career at Netscape, become a VP of engineering at American Express, CISO at UnitedHealth Group, and now CISO in Residence at Transcend.

The post CISO Conversations: Aimee Cardwell appeared first on SecurityWeek.

Hackers stole personal information such as names, Social Security numbers, and driver’s license numbers.

The post 238,000 Impacted by Bell Ambulance Data Breach appeared first on SecurityWeek.

The company connects AI agents to security data lakes for interactive investigations, detection engineering, and autonomous response.

The post Scanner Raises $22 Million for AI-Powered Threat Hunting appeared first on SecurityWeek.

Promptfoo has raised more than $23 million in funding for a platform that helps developers secure LLMs and AI agents.

The post OpenAI to Acquire AI Security Startup Promptfoo appeared first on SecurityWeek.

The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.

The post Fortinet, Ivanti, Intel Patch High-Severity Vulnerabilities appeared first on SecurityWeek.

The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.

The post How to 10x Your Vulnerability Management Program in the Agentic Era appeared first on SecurityWeek.

The cybercriminals have leaked more than 300GB of files allegedly stolen from the tire giant.

The post Michelin Confirms Data Breach Linked to Oracle EBS Attack appeared first on SecurityWeek.