The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a maximum-severity security flaw impacting Oracle HTTP Server and Oracle WebLogic Server to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. The vulnerability, tracked as CVE-2026-21962 (CVSS score: 10.0), allows an unauthenticated attacker with network accessRead More »Actively Exploited Oracle WebLogic Flaw Lets Unauthenticated Attackers Access Critical Data

A power plant was shut down for four days in July due to an Iranian-linked cyberattack

If your developers are using AI coding tools, you are probably already seeing the upside: faster development, more code, and less time spent on routine work. The harder part is what comes after. AI can also introduce open-source packages at a pace your security team was never built to handle.Read More »Shipping More AI Code Than You Can Secure? Watch How to Control Remediation Debt

Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Minecraft clients. McAfee Labs said it detected and blocked more than 6,300 attempts to access malicious sites, adding that it found lookalike gaming websites designed to mimic legitimateRead More »Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning

The Medusa Ransomware gang has breached more than 500 organizations since June 2021. 

Apollo Global Management experienced a data breach due to a social engineering attack, which affected sensitive, personally identifiable information.

A package gets installed. A login prompt opens. A box sits exposed to the internet. Nothing looks unusual yet. That’s roughly the mood this week. Trusted tools turn hostile, old weak spots get fresh attention, AI makes exploit work cheaper, and researchers keep finding attacks that sound harder than theyRead More »⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More