The company will use the investment to accelerate product development and grow go-to-market efforts.

The post Cloudsmith Raises $72 Million in Series C Funding appeared first on SecurityWeek.

360 Digital Security Group claims to have uncovered 1,000 vulnerabilities using AI, including at the Tianfu Cup hacking contest.

The post Chinese Cybersecurity Firm’s AI Hacking Claims Draw Comparisons to Claude Mythos appeared first on SecurityWeek.

The company will hire new talent and expand operations across the US and other allied countries.

The post Rilian Raises $17.5 Million for AI-Native Security Orchestration appeared first on SecurityWeek.

New analysis from Abnormal AI reveals how attackers have abandoned technical exploits to weaponize routine workflows and internal trust.

The post The Behavioral Shift: Why Trusted Relationships Are the Newest Attack Surface appeared first on SecurityWeek.

The company is notifying My Rituals members that hackers downloaded part of their data, including names and addresses.

The post Luxury Cosmetics Giant Rituals Discloses Data Breach appeared first on SecurityWeek.

Palo Alto Networks has developed Zealot, a multi-agent penetration testing PoC capable of reconnaissance, exploitation, and exfiltration. 

The post AI Can Autonomously Hack Cloud Systems With Minimal Oversight: Researchers  appeared first on SecurityWeek.

Apple rolled out the security patches for dozens of iPhone and iPad models and generations.

The post Apple Patches iOS Flaw Allowing Recovery of Deleted Chats appeared first on SecurityWeek.

The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.

The post Recent Microsoft Defender Vulnerability Exploited as Zero-Day appeared first on SecurityWeek.

The DDoS attack caused a major outage, but Mastodon mitigated it within a few hours.

The post After Bluesky, Mastodon Targeted in DDoS Attack appeared first on SecurityWeek.

British businesses need to prepare themselves to defend against cyberattacks because the U.K. could be targeted “at scale,” if it became involved in an international conflict.

The post Most Serious Cyberattacks Against the UK Now From Russia, Iran and China, Cyber Chief Says appeared first on SecurityWeek.

Broadcom, Bechtel, Estée Lauder, and Abbott Technologies are the only major companies that have yet to issue a public statement. 

The post Oracle EBS Hack: Only 4 Corporate Giants Still Silent on Potential Impact appeared first on SecurityWeek.

The attackers used a DKIM-signed phishing email, trusted redirect infrastructure, compromised servers, and Cloudflare-protected phishing pages.

The post Security Firm Executive Targeted in Sophisticated Phishing Attack appeared first on SecurityWeek.

The state-sponsored hackers deployed custom tools and stayed dormant in the compromised environments for months.

The post China-Linked Hackers Hit Asian Militaries in Patient Espionage Operation appeared first on SecurityWeek.

Storm-2561 is distributing fake VPN clients through SEO poisoning, deploying trojans, and stealing login information.

The post Threat Actor Targeting VPN Users in New Credential Theft Campaign appeared first on SecurityWeek.

Hundreds of GitHub accounts were accessed using credentials stolen in the VS Code GlassWorm campaign.

The post ForceMemo: Python Repositories Compromised in GlassWorm Aftermath appeared first on SecurityWeek.

Initial evidence indicates Iran may be behind the attack, but officials admitted it could be a false flag. 

The post Hacking Attempt Reported at Poland’s Nuclear Research Center appeared first on SecurityWeek.

Personal information such as names, email addresses, and phone numbers was accessed by hackers.

The post Loblaw Data Breach Impacts Customer Information appeared first on SecurityWeek.

The vulnerability can be exploited remotely, without authentication, to circumvent existing authentication controls.

The post Critical HPE AOS-CX Vulnerability Allows Admin Password Resets appeared first on SecurityWeek.

Starbucks said the incident involved phishing attacks targeting an employee portal, affecting hundreds.

The post Starbucks Data Breach Impacts Employees appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Telus Digital data breach, vulnerabilities in Linux AppArmor allow root privileges, US defense contractor behind Coruna exploits.

The post In Other News: N8n Flaw Exploited, Slopoly Malware, Interpol Cybercrime Crackdown appeared first on SecurityWeek.