Noteworthy stories that might have slipped under the radar: BofA adds 1,000 patching contractors, KGB RAT pairs data theft with jump scares, and Langflow flaw under attack.

The post In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit appeared first on SecurityWeek.

A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week.

The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts appeared first on SecurityWeek.

Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts.

The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.

Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report.

The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first on SecurityWeek.

Successful exploitation of some of these issues could lead to remote code execution and full device takeover.

The post F5, Juniper Networks Patch Critical Vulnerabilities appeared first on SecurityWeek.

In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.

The post Microsoft Patches Two Dozen RCE Flaws in Office appeared first on SecurityWeek.

The Thoma Bravo-owned Proofpoint will acquire Varonis in an all-cash transaction and Varonis will become a private company.

The post Proofpoint Inks $6.3 Billion All-Cash Deal to Acquire Varonis appeared first on SecurityWeek.