Information

Rockwell Automation has patched four vulnerabilities in its Arena Simulation software that could let an attacker execute arbitrary code on an affected system, according to advisories published by CISA and Rockwell. Arena Simulation is a discrete-event simulation software that provides organizations with a virtual environment to model, visualize, and test complex operational workflows, allowing them to identify issues and evaluate process changes before implementing them in production. The four high-severity flaws — CVE-2026-8085, CVE-2026-8312, CVE-2026-8313,…

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers maintain a well-rounded awareness of the evolving cybersecurity environment. Here are this week’s highlights:  Dolphin X malware leverages AI to profile victims  Varonis Threat Labs…

Read More

Zenity Labs has found and disclosed a critical vulnerability in OpenAI’s ChatGPT Workspace Agents, which it names AgentForger; a tailored cross-site request forgery (CSRF). With a single successful phish, an unsuspecting employee could be tricked into launching an invisible autonomous agent that is remotely controlled by the attacker. Zenity explains in two blogs (Part 1 and Part 2) that the vulnerability was in ChatGPT’s Agent Builder allowing an over permissive parameter. Researchers found that the…

Read More

President Donald Trump has signed an executive order requiring the Department of War to develop new rules for mapping and securing critical defense supply chains, including the software, services and technology used in national security systems. While primarily focused on domestic sourcing of critical materials, the executive order contains several provisions relevant to cybersecurity teams, particularly those responsible for software supply chain security, third-party risk and defense contractor compliance. The order states that the United…

Read More

American-Israeli cybersecurity startup Neo emerged from stealth mode on Monday with $100 million in funding for a platform that enables enterprises to control and secure AI software. Neo received the investment across seed and Series A funding rounds from Andreessen Horowitz, Bessemer Venture Partners, Craft Ventures, and Merlin Ventures. The company will use the money to grow its engineering and go-to-market teams.  Neo’s platform serves as a control layer that governs AI agents, AI-enabled applications,…

Read More

Cybersecurity startup Beacon Security has announced raising $13 million in a seed funding round led by Notable Capital. AlphaDrive Ventures, Holly Ventures, Jefferies Family Office, SVCI, and dozens of angel investors also participated in the investment round. Based in New York, Beacon was founded in 2024 by IDF veterans Gal Tal-Hochberg (CEO), Or Mattatia (CPO), and Iddo Israely (CTO). Beacon is providing organizations with a agentic security data platform that enables defenders to prevent, detect,…

Read More