CyberSecurity Updates

20 Aug

Hackers Target Zimbra Servers in Active Exploitation Campaign

Information, News

A recently patched Zimbra Collaboration vulnerability is being exploited in the wild, according to Poland’s CERT Polska. The security hole is tracked as CVE-2026-73570 and it was patched by the developers of the enterprise email server and collaborative software suite with the release of version 10.1.20, announced on July 20. The high-severity flaw exists when the optional ‘zimbra-snmp’ package is installed and SNMP notifications are enabled.  An attacker can exploit the vulnerability without authentication to…

Read More
19 Aug

Virtual Event Today: CodeSecCon – Secure Your Code and Applications

Information, News

Join more than 1,500 registered attendees today for CodeSecCon, the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained. Designed to address the most pressing challenges in software security, CodeSecCon empowers attendees to: Develop Secure Applications: Learn best practices for secure coding and application design. Reduce Software Vulnerabilities: Discover innovative tools and techniques to minimize risks. Enhance Collaboration: Bridge the gap between security and development teams to foster…

Read More
19 Aug

NIST Releases Tips & Tactics for Building Automation & Control System Cybersecurity

Insights

Credit: Shutterstock Credit: Kristina Rigopoulos, NIST Recent cyberattacks highlight the growing threat to operational technology (OT) used in critical infrastructure. Whether you work for an infrastructure owner/operator or are a consumer of an infrastructure service, the events of the past few weeks have made it clear that cybersecurity is an important factor in ensuring the safe and reliable delivery of critical goods and services. For OT owners/operators, it can be challenging to address the range…

Read More
18 Aug

How QR-code phishing can slip past corporate security measures

Information

Business Security Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap. Phil Muncaster 17 Aug 2026  •  , 5 min. read Familiarity might breed contempt. But in the world of cybersecurity, it also breeds complacency, which can be a lot more dangerous. So it is with QR codes, which have become a common sight on menus, lampposts and parking meters – and, increasingly, in emails over recent years.…

Read More
18 Aug

Webinar Today: Rethinking Cyber Defense for AI-Speed Attacks

Information, News

Rethinking Cyber Defense for AI-Speed Attacks | August 18, 2026 at 1PM ET- Register to Attend Artificial intelligence is fundamentally changing cybersecurity. As patch-to-exploit timelines shrink and attackers move at machine speed, long-standing security models are being put to the test. Can detection-first security operations keep pace, or is it time to rethink prevention as the strongest default? Join Jason Kikta, Chief Technology Officer at Automox, Dmitri Alperovitch, Co-Founder and Chairman of Silverado Policy Accelerator,…

Read More
17 Aug

680,000 Impacted by French Tax Authority Data Breach

Data Breaches, Information, News

France’s Directorate General of Public Finances (DGFiP) has disclosed a data breach impacting approximately 680,000 individuals. The incident was disclosed after a threat actor boasted on a hacking forum about accessing DGFiP’s internal systems and exfiltrating data. According to DGFiP, the threat actor accessed its systems in June and July, and the unauthorized access was suspended immediately upon detection. However, the public tax authority did not discover evidence of data exfiltration at the time. Last…

Read More
17 Aug

Stronger Cybersecurity Programs Start with People: NIST Wants Your Input on the Path Forward for Human-Centered Cybersecurity

Insights

Credit: Shutterstock When was the last time a cybersecurity process at work made you want to scream? Maybe it was a password requirement so complicated you had to write it down (defeating the purpose), a phishing simulation test that felt more like a trap than a lesson, or a confusing security warning pop-up that interrupted your work. Or maybe you’re on the other side of the equation, working as a cybersecurity professional who is wrangling…

Read More
14 Aug

Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility

Information

Business Security The incident involving OpenAI models shows that autonomous hacks make human oversight more important, not less Tony Anscombe 13 Aug 2026  •  , 4 min. read Hugging Face disclosed that it had been attacked by AI; OpenAI came clean and declared that it was two of their AI models that had caused the breach. This is the one-line summary of an incident that has captured the attention of the entire cybersecurity industry, and…

Read More
14 Aug

Black Hat USA 2026: Will vulnerability discovery eventually decline in the AI era?

Information

Business Security And will today’s surge in AI-driven vulnerability discovery eventually make tomorrow’s software safer? Tony Anscombe 13 Aug 2026  •  , 3 min. read The accelerated discovery of previously unknown software vulnerabilities has been making headlines for months. It’s an issue that has even led the US government to create a vulnerability clearing house named Gold Eagle to coordinate research efforts in vulnerability discovery, mitigation and fixes. An indication of the broader pressure facing…

Read More
14 Aug

In Other News: Rapid7 Layoffs, Hacking a Boeing 737, Refrigeration System Vulnerabilities

Information, News

SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage yet remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy updates, industry reports, and other noteworthy events to help readers maintain a well-rounded awareness of the evolving cybersecurity environment. Here are this week’s highlights:  Government AI platform deal sparks outrage The Defense Department’s recent award…

Read More