SecurityWeek

Cisco Talos linked SD-WAN key-stealing malware to infrastructure overlapping Volt Typhoon’s Silent Train network, which Lumen detailed.

An exploited flaw in the Remote Access SSL VPN service lets unauthenticated attackers remotely force ASA and FTD firewalls to reload.

Hackers stole personal information and iRhythm account and device data from third-party-hosted business applications.

CVE-2026-41709 allows attackers with administrative privileges to perform operations without being logged.

Artem Stryzhak was sentenced to 70 months in prison after pleading guilty to using Nefilim ransomware in attacks.

The massive funding round comes just days after reports emerged that Upwind had attracted acquisition interest from several companies, including Datadog

The Chrome 156 update fixes 52 bugs, while Firefox 159 was rolled out with 167 security patches.

FoxIO disclosed three GoAhead TLS bugs that can let revoked certificates through or expose some encrypted sessions to eavesdroppers.

The attackers chained PHP2Shell and Fragnesia exploits and hacked two servers of a US government-affiliated organization.

Four EPICS Base flaws found by an autonomous system could let attackers crash processes at particle accelerators and fusion labs.

The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.

The company will use the Series B funds to expand its platform for securing AI agents’ access to sensitive systems.

CVE-2026-101767 is an unauthenticated SQL injection that can be exploited for remote code execution.

CISA added the Brotli flaw to its KEV catalog, and two honeypot operators logged attempts, including one that used a broken exploit.

Tailscale is preparing a patch for Tailscale SSH flaws whose details went public over the weekend, before any fixes had been released.