News

A Microsoft SharePoint vulnerability tracked as CVE-2026-65660 is now being exploited in attacks, roughly six weeks after Microsoft announced patches and a couple of days after researchers disclosed technical details. CVE-2026-65660 is a remote code execution vulnerability fixed by Microsoft with its August 2026 Patch Tuesday updates. The company’s advisory describes it as a code injection issue that lets an authenticated attacker with low-level access to an affected server execute arbitrary code without user interaction. …

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  Clop’s leak site seized in ShinyHunters grudge match ShinyHunters has defaced the Tor…

Read More

Kontext Security today launched publicly with $4 million raised in a funding round led by 42CAP, with additional support from a16z CSX and HTGF. Co-founded by Jens Ernstberger and Michel Osswald, the Munich, Germany-based startup has built a runtime security platform that provides organizations with visibility and control over AI agents’ actions. Deployed between the AI agents and the systems and tools they access, Kontext’s runtime enforcement platform evaluates the agents in real time against…

Read More

Honeywell released its 2026 OT Cybersecurity Benchmark Report on Tuesday, and the findings point to a disconnect between how industrial organizations rate their operational technology (OT) security programs and how prepared they actually are. The report also examines AI’s impact on OT security. Among 603 surveyed leaders across critical infrastructure sectors, 88% characterized their OT security programs as mature or design-led, yet only 21% maintain a complete inventory of their OT assets. Respondents worked across critical…

Read More

Data security company Cyera has received an additional $400 million in funding, bringing the company’s valuation to more than $12 billion. The new investment came from Goldman Sachs Alternatives as an extension of the Series G funding round announced in June. The company has raised a total of more than $2.7 billion. The latest funding will be used to continue enhancing the Cyera platform’s capabilities and fuel the company’s expansion and growth. Cyera provides an…

Read More

Noopur Davis never planned a career in cybersecurity. She was a developer at Intergraph, and for many years that was all she wanted to be. Comcast, founded in Tupelo, Mississippi, in 1963, is now a global media and technology company headquartered in Philadelphia, Pennsylvania. It has offices in North America, Europe, Asia, and Australia, and a global workforce of around 180,000 people. Noopur Davis is the organization’s Global CISO, leading multiple security teams distributed around…

Read More

Cybersecurity firm TigerByte Cyber has emerged from stealth mode with $3 million raised in a seed funding round led by Hale Capital Partners, with additional support from Tenon VC. Hanover, NH-based TigerByte Cyber provides cyber hardening for AI and edge devices to protect systems where they operate. The company has built a solution that provides modern cybersecurity protections to legacy systems, including mission-critical edge devices. Named Cyber Protection Suite (CPS), it is an ultra-compact plug-and-play…

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers stay well-informed about the evolving cybersecurity environment. Here are this week’s highlights:  Raindrop raises $35 million for AI agent monitoring Raindrop, designed to detect unknown…

Read More

Researchers at security firm Hacktron used Claude to build a working exploit for a vulnerability in an image-processing library, then chained it with a flaw in OpenAI’s sign-in system to take over employee ChatGPT and Codex accounts, and ultimately gained access to internal code repositories. The entry point was OpenAI’s community forum, community.openai.com, which runs on Discourse. Discourse’s built-in image checks didn’t support the HEIC/HEIF photo format, so uploads in that format were passed to…

Read More