Stolen credentials were used in a multi-month campaign to access subscriber personal data and billing records.

The post Telus Warns Customers of Account Breaches appeared first on SecurityWeek.

The vulnerabilities can allow attackers to bypass authentication and elevate their privileges to administrator.

The post Three JFrog Artifactory Flaws Exploited for Backdoor Deployment appeared first on SecurityWeek.

Hackers compromised the Brevo marketing platform and used that access to send phishing emails to users of Trezor, BitBox, and CoinTracking.

The post Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack appeared first on SecurityWeek.

Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

The post Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison appeared first on SecurityWeek.

Financials have not been disclosed, but the estimated cost is in the tens of millions of dollars.

The post Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance appeared first on SecurityWeek.

Significant cybersecurity M&A deals announced by Brinqa, Cribl, Echo, Fortinet, Kiteworks, Palo Alto Networks, and Visa.

The post Cybersecurity M&A Roundup: 33 Deals Announced in August 2026 appeared first on SecurityWeek.

Vinnie Liu was recruited by the NSA when he was just 17 years old. He is now the CEO of Bishop Fox.

The post Hacker Conversations: Vinnie Liu, Performer Turned Ringmaster appeared first on SecurityWeek.

Join the webinar for a focused, 20-minute discussion on Frontier Pace Governance, an approach to balancing automation, policy, and business risk as IT operations accelerate.

The post Webinar Today: Keep Pace With AI – A New Operating Model for Endpoint Remediation appeared first on SecurityWeek.

Tracked as CVE-2026-19490, the authentication bypass flaw has been exploited in the wild since at least September 3.

The post Critical NetScaler Vulnerability Exploited in Attacks appeared first on SecurityWeek.

The exploit provides full System privileges on Windows machines running the September 2026 patches.

The post New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender appeared first on SecurityWeek.

Using a technically valid TLS certificate for Softaculous’ domains, a threat actor diverted traffic to fake software updates.

The post Malicious Virtualizor Update Served via BGP Hijacking appeared first on SecurityWeek.

The cybersecurity giant announced the acquisition alongside quarterly results showing a 34% increase in revenue and strong growth in next-generation security ARR.

The post Palo Alto Networks Acquires AI Agent Platform Console appeared first on SecurityWeek.

Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.

The post Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit appeared first on SecurityWeek.

A CVE identifier has not yet been assigned, but PaperCut is urging NG/MF users to install patches and implement mitigations.

The post PaperCut Releases Emergency Patch for Exploited Zero-Day appeared first on SecurityWeek.

The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.

The post Trump Order Aims to Block Foreign Backdoors in US Power Grid Gear appeared first on SecurityWeek.

Australian and US authorities collaborated to identify and charge the alleged cybercriminals, who face many years in prison.

The post Australia Arrests 2 Alleged TeamPCP Hackers appeared first on SecurityWeek.

The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.

The post CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks appeared first on SecurityWeek.

Dutch Data Protection Authority said it is imposing a fine of 825 million euros because Uber violated the EU’s General Data Protection Regulation.

The post Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts appeared first on SecurityWeek.

Remote, unauthenticated attackers could exploit the critical-severity flaw without user interaction.

The post Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler appeared first on SecurityWeek.

The 17 members of the Mabna Institute targeted hundreds of universities and organizations in the US and abroad.

The post US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them appeared first on SecurityWeek.