SecurityWeek

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models.

The startup will use the investment to accelerate the development of its threat prediction and discovery products.

Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering proven impact in industrial cybersecurity; winners to be announced live at the 2026 ICS Cybersecurity Conference in Nashville

Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop.

Gaetje’s story shows that you don’t need to be a ‘deep bit-crawler’ to become a Chief Information Security Officer.

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025.

A security researcher discovered a broken access control vulnerability in Meta’s support infrastructure.

Using social engineering, hackers compromised employee accounts with access to personal and health information.

The ServiceNow AI platform vulnerability tracked as CVE-2026-6875 can be exploited for remote code execution.

The latest Zimbra refresh resolves command injection, XSS, restriction bypass, and SSRF security defects.

Neo raised money across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, and others.

The zero-days CVE-2026-15409 and CVE-2026-15410 were exploited by a threat actor tracked by Volexity as UTA0533.

Attackers could send waves of malicious payloads to trigger buffer pre-allocations that are not freed, exhausting server memory.

Longtime cybersecurity executive Richard Bird built the resource for security experts, journalists, policymakers, and everyday citizens.

Hackers stole names, addresses, Social Security numbers, credit/debit card numbers, and other information from a third-party management platform.