News

Candiru spyware has infected devices at international news network Al Jazeera in zero-click attacks, via targeted advertisements, Canadian internet watchdog group Citizen Lab reports. As part of the operation, dubbed AdFection, ads purchased by Israeli company Discover-Tech were used to de-anonymize, fingerprint, and infect users, and also allow threat actors to track millions of devices. As part of the online advertising ecosystem, companies bid at billions of daily Real-Time Bidding (RTB) auctions hosted on ad…

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  ICS-Sniper attack picks off critical OT traffic University of British Columbia researchers have…

Read More

For most of its history, cybersecurity has been reactive by design. Spot the bad event, shut it down. But as cyberattacks evolve, this thinking must evolve too. In the past, attackers relied on a single dramatic exploit to access the crown jewels. But the nature of attacks has changed. Defenders see ordinary events they don’t think are important enough to follow up on, but before they realize it, these events lead to a dramatic breach.…

Read More

A new report from Booz Allen demonstrates that “frontier super intelligence navigated unfamiliar industrial systems, adapted when blocked, and moved physical equipment within minutes.” The findings of the report were presented last week at SecurityWeek’s Industrial Control Systems (ICS) Cybersecurity Conference in Nashville, ahead of the public release. Use of the term ‘super intelligence’ is, however, confusing. This is not the first time the firm has used it, but it seems to be indistinguishable from…

Read More

An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room in what officials said Tuesday was an effort to capture sensitive conversations about the company’s technology. The employee, identified as a 35-year-old Saudi national named Abdulrahman Alfozan, was arrested Friday, a week after the ChatGPT maker discovered an audio recording device hidden in the conference room, according to a criminal complaint filed in federal court in San Francisco.…

Read More

IonQ on Monday said it signed a definitive agreement to buy Elisity in a stock-only transaction worth up to $1.3 billion. Up to $150 million of that amount is earnout consideration, contingent on how Elisity’s business performs. IonQ expects to complete the acquisition in the fourth quarter of 2026. The number of IonQ shares issued will depend on the company’s volume-weighted average price over 20 trading days ending shortly before closing, but the price will…

Read More

A Kansas City, Missouri man has been sentenced to 32 months in jail for crimes related to a ransom attack against his own company. The DOJ has announced the sentencing of Daniel Rhyne. He had already pleaded guilty to ‘extortion in relation to a threat to cause damage to a protected computer’ and ‘intentional damage to a protected computer’. Fifty-nine-year-old Rhyne had been a core infrastructure engineer at an industrial firm headquartered in Somerset County,…

Read More

OpenAI said on Friday that it fired three safety researchers for a “breach of trust,” defending the dismissals after the trio accused the company of putting its corporate interests before safety as the reason for removing them. The ChatGPT maker said in a post on X that it “parted ways” with the researchers after an investigation found “they violated clear policies on handling sensitive information.” The statement comes after the three researchers, Tomek Korbak, Jasmine…

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  PoeLLM malware finds its C&C server hidden in a GitHub poem Black Lotus…

Read More

Cisco on Wednesday announced patches for 35 vulnerabilities across its products, including over a dozen critical-severity bugs. A fresh Meraki security hardening release fixes multiple bugs grouped together under seven CVEs, based on the underlying weakness type. The most severe of these is CVE-2026-76464, which covers memory issues such as buffer overflows and out-of-bounds writes. Cisco also resolved eight bugs in License On-Prem, including five critical-severity issues. Two of them could lead to unauthorized access…

Read More