News

President Trump issued Executive Order 14420 on Wednesday, declaring a national emergency to mitigate vulnerabilities in the United States’ bulk power system arising from foreign-supplied electrical equipment. The order attributes the heightened emergency status to rapid growth across data centers, AI, advanced manufacturing, and defense production.  Officials noted that dependence on grid reliability magnifies the impact of foreign supply chain disruptions or targeted attacks that exploit built-in backdoors for remote access. The order covers critical…

Read More

The Linux Foundation said Tuesday it will take on governance of TRACE (Trust, Runtime Attestation and Compliance Evidence), a new open specification for producing verifiable evidence of how AI agents and other confidential workloads run.  Contributed by confidential computing vendor OPAQUE, the specification was developed jointly with AMD, Intel, Microsoft, and the Technology Innovation Institute (TII). TRACE creates a hardware-backed, cryptographically verifiable record that ties together the runtime environment, the software executed, the policies applied,…

Read More

Retired U.S. Army General Paul M. Nakasone, former director of the National Security Agency and commander of U.S. Cyber Command, has launched a boutique national security advisory firm. The newly-formed Nakasone Group will counsel government leaders, corporations, prominent families, and other private clients confronting cybersecurity, geopolitical, and personal security risks. “After more than three decades in uniform — including leading U.S. Cyber Command and the National Security Agency — I’ve seen how quickly the threats…

Read More

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers maintain a well-rounded awareness of the evolving cybersecurity environment. Here are this week’s highlights:  CISA warns of actively exploited Ray vulnerability  CISA has mandated that…

Read More

A recently patched Zimbra Collaboration vulnerability is being exploited in the wild, according to Poland’s CERT Polska. The security hole is tracked as CVE-2026-73570 and it was patched by the developers of the enterprise email server and collaborative software suite with the release of version 10.1.20, announced on July 20. The high-severity flaw exists when the optional ‘zimbra-snmp’ package is installed and SNMP notifications are enabled.  An attacker can exploit the vulnerability without authentication to…

Read More

Join more than 1,500 registered attendees today for CodeSecCon, the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. Designed to address the most pressing challenges in software security, CodeSecCon empowers attendees to: Develop Secure Applications: Learn best practices for secure coding and application design. Reduce Software Vulnerabilities: Discover innovative tools and techniques to minimize risks. Enhance Collaboration: Bridge the gap between security and development teams to foster…

Read More

Rethinking Cyber Defense for AI-Speed Attacks | August 18, 2026 at 1PM ET- Register to Attend Artificial intelligence is fundamentally changing cybersecurity. As patch-to-exploit timelines shrink and attackers move at machine speed, long-standing security models are being put to the test. Can detection-first security operations keep pace, or is it time to rethink prevention as the strongest default? Join Jason Kikta, Chief Technology Officer at Automox, Dmitri Alperovitch, Co-Founder and Chairman of Silverado Policy Accelerator,…

Read More