SecurityWeek

Noteworthy stories that might have slipped under the radar: Kiteworks patches over 100 vulnerabilities, Microsoft publishes 2026 Digital Defense Report, AI finds 24 Android app flaws.

The dropper “carries a complete universal Mach-O inside itself, roughly 756 KB in the development build, and extracts it at runtime.

Hackers used the account, which has 13 million followers, to amplify a Clippy-themed cryptocurrency account.

Amir Barati, an alleged member of the Mabna Institute, was indicted for targeting universities, private organizations, and government entities in the US and abroad.

The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025.

The attacks targeted the US Department of Education and Library and Archives Canada, and researchers linked some agents to OpenAI.

CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system.

Fifteen years after coining the framework, John Kindervag insists zero trust still works in the AI era—if you get the implementation right.

Hybrid risk intelligence company Osavul has raised $10 million in a Series A funding round led by 33N Ventures.

PwC’s survey found that only 22% of leaders would use fully autonomous AI for cyber defense, while just 21% are implementing quantum-resistant security measures.

Rob Juncker is chief product and technology officer at Mimecast. Is he a hacker? “Unequivocally yes,” he says.

Police took control of KillSec’s leak site and secured at least 110 terabytes of data stolen from victims.

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals.