Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack.

The post In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit appeared first on SecurityWeek.

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.

The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts appeared first on SecurityWeek.

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.

The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first on SecurityWeek.

Successful exploitation of some of these issues could lead to remote code execution and full device takeover.

The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.

The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek.

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.

The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek.

Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate.

The post Context Is King in the Fight Against Modern Cyberattacks appeared first on SecurityWeek.

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.

The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.

Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.

The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek.

Delivered via phishing, the malware provides reconnaissance, remote execution, and data exfiltration capabilities.

The post CikaBika Bot RAT Uses Discord for C&C appeared first on SecurityWeek.

The Hirudo malware combines elements of a traditional banking trojan and a full-featured RAT.

The post Novel Android RAT ‘Hirudo’ Replaces Banking Apps With Trojanized Copies appeared first on SecurityWeek.

Personal information such as names, addresses, Social Security numbers, and driver’s license numbers was compromised.

The post CenterPoint Energy Data Breach Impacts 1 Million Texans appeared first on SecurityWeek.

James Robinson never planned a cybersecurity career — seven companies and one deputy CISO role later, he leads security at Netskope.

The post CISO Conversations: James Robinson – Many Jobs, One Journey to Netskope CISO appeared first on SecurityWeek.

The company says it’s aware of limited exploitation against customers’ firewalls, and it has made IoCs available.

The post Palo Alto Networks Patches PAN-OS Zero-Day Exploited for Remote Code Execution appeared first on SecurityWeek.

Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges.

The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek.

In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes.

The post AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds appeared first on SecurityWeek.

ABB previously published an advisory warning about possible probing of a dynovaPRO vulnerability. 

The post ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover Flaw appeared first on SecurityWeek.

The cybersecurity startup plans to expand engineering and go-to-market teams in the US and UK.

The post Harmonic Security Raises $50 Million for Workforce AI Protection appeared first on SecurityWeek.

This summit is laser-focused on the next generation of Zero Trust and Identity security, moving beyond theory to deliver actionable strategies.

The post Watch Now: Zero Trust Strategies Summit – All Sessions Available on Demand appeared first on SecurityWeek.

Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.

The post Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages appeared first on SecurityWeek.

Investigators stormed 40 locations in Texas and seized 187 laptops used by North Korean IT workers to hide their location.

The post US Arrests Two in Crackdown on North Korean IT Worker Laptop Farms appeared first on SecurityWeek.

Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.

The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.

Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.

The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.

The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.

The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek.

Saudi national Abdulrahman Alfozan was arrested Friday and terminated by OpenAI.

The post Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say appeared first on SecurityWeek.