Potential breach at Flickr exposes usernames, email addresses, IP addresses, and activity data.

The post Flickr Security Incident Tied to Third-Party Email System appeared first on SecurityWeek.

The news comes after the Department of Energy conducted its annual Liberty Eclipse cybersecurity exercise.

The post 5 Bills to Boost Energy Sector Cyber Defenses Clear House Panel appeared first on SecurityWeek.

CISA updated 59 KEV entries in 2025 to specify that the vulnerabilities have been exploited in ransomware attacks.

The post Concerns Raised Over CISA’s Silent Ransomware Updates in KEV Catalog appeared first on SecurityWeek.

The hacker claims to have stolen nearly 700,000 Substack user records, including email addresses and phone numbers.

The post Substack Discloses Security Incident After Hacker Leaks Data appeared first on SecurityWeek.

This latest infusion, led by SYN Ventures, brings the company’s total funding to $16.9 million.

The post Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce appeared first on SecurityWeek.

Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China.

The post Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries appeared first on SecurityWeek.

The Series C funding will enable the company to expand its AI capabilities for disrupting criminal networks.

The post Blockchain Intelligence Firm TRM Labs Raises $70 Million at $1 Billion Valuation appeared first on SecurityWeek.

The company will use the latest capital to scale its go-to-market efforts and expand its platform’s capabilities.

The post RapidFort Raises $42M to Automate Software Supply Chain Security appeared first on SecurityWeek.

OpenClaw (aka Moltbot and Clawdbot) is vulnerable to one-click remote code execution attacks.

The post Vulnerability Allows Hackers to Hijack OpenClaw AI Assistant  appeared first on SecurityWeek.

The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.

The post Russia’s APT28 Rapidly Weaponizes Newly Patched Office Vulnerability  appeared first on SecurityWeek.

Poland’s CERT has published a report on the recent attack, providing new details on targeted ICS and attribution.

The post Default ICS Credentials Exploited in Destructive Attack on Polish Energy Facilities appeared first on SecurityWeek.

The likely state-sponsored threat actor had access to the hosting provider for months and targeted only certain Notepad++ customers.

The post Notepad++ Supply Chain Hack Conducted by China via Hosting Provider appeared first on SecurityWeek.

Two Biden-era memorandums have been revoked, but some of the resources they provide can still be used by government organizations. 

The post White House Scraps ‘Burdensome’ Software Security Rules  appeared first on SecurityWeek.

Sandworm/Electrum hackers targeted communication and control systems at 30 sites.

The post ICS Devices Bricked Following Russia-Linked Intrusion Into Polish Power Grid appeared first on SecurityWeek.

The announcement comes just weeks after Palo Alto Networks and Google Cloud announced a multibillion-dollar AI and cloud security deal.

The post PwC and Google Cloud Ink $400 Million Deal to Scale AI-Powered Defense appeared first on SecurityWeek.

A total of 87 individuals, mostly Venezuelan nationals, have been charged for their role in the ATM jackpotting scheme.

The post US Charges 31 More Defendants in Massive ATM Hacking Probe appeared first on SecurityWeek.

Indurex was founded by Jalal Bouhdada, who previously led industrial cybersecurity company Applied Risk.

The post Indurex Emerges From Stealth to Close Security Gap in Cyber-Physical Systems appeared first on SecurityWeek.

A total of 12 vulnerabilities have been fixed in OpenSSL, all discovered by a single cybersecurity firm.

The post High-Severity Remote Code Execution Vulnerability Patched in OpenSSL appeared first on SecurityWeek.

Domains set up by the threat actor suggest attacks aimed at Atlassian, Canva, Epic Games, HubSpot, Moderna, ZoomInfo, and WeWork.

The post Over 100 Organizations Targeted in ShinyHunters Phishing Campaign appeared first on SecurityWeek.

The vulnerability is tracked as CVE-2026-21509 and it can be exploited to bypass security features. 

The post Microsoft Patches Office Zero-Day Likely Exploited in Targeted Attacks appeared first on SecurityWeek.