SecurityWeek (@SecurityWeek) header
SecurityWeek (@SecurityWeek) profile picture

SecurityWeek

@SecurityWeek

#Cybersecurity News, Threats, Insights and Expert Analysis: #SCADA #Infosec #ICS Coverage

 Global, Cybersecurity, Infosec
securityweek.com/
Joined May 2009
  • Tweets56.1K
  • Following2.8K
  • Followers23K
800Media
Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)Photo by SecurityWeek (@SecurityWeek)
Citrix Patches 10 Critical NetScaler Vulnerabilities securityweek.com/citrix-patc…
Citrix Patches 10 Critical NetScaler Vulnerabilities

Citrix Patches 10 Critical NetScaler Vulnerabilities

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

securityweek.com
2
622
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure securityweek.com/law-enforce…
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

securityweek.com
1
2
1,055
Apify Confirms Customer Data Accessed in Cyberattack securityweek.com/apify-confi…
Apify Confirms Customer Data Accessed in Cyberattack

Apify Confirms Customer Data Accessed in Cyberattack

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

securityweek.com
1
4
1,371
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update securityweek.com/no-signs-of…
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.

securityweek.com
3
2
10
2,258
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ securityweek.com/nightmare-e…
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

securityweek.com
2
1
16
3,834
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data securityweek.com/apple-revea…
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones.

securityweek.com
3
2
4
2,353
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data securityweek.com/apple-revea…
Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

Apple Reveals How Secure Exclaves Shield Camera and Microphone Data

The tech giant has detailed the architecture designed to isolate ambient sensor data from the main OS on HomeView and new iPhones.

securityweek.com
1
1,820
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update securityweek.com/no-signs-of…
No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

No Signs of Hacking in FAA Ground Stop as FBI Reportedly Probes Software Update

Officials say there is no evidence of a cyberattack behind the nationwide FAA outage, which may have been caused by a software update.

securityweek.com
1
1
6
2,593
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks securityweek.com/silentair-h…
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

securityweek.com
2
9
2,787
PHP2Shell Exploited in Destructive Check Point Gateway Attacks securityweek.com/php2shell-e…
PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell Exploited in Destructive Check Point Gateway Attacks

PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.

securityweek.com
2
1
6
2,998
FAA issues ground stop due to ‘extraordinary circumstances’ said to be a "communication issue impacting all Air Route Traffic Control Centers - No mention of possible cyberattack at this time - securityweek.com/faa-ground-…
FAA Ground Stop Issued Due to “Extraordinary Circumstances”

FAA Ground Stop Issued Due to “Extraordinary Circumstances”

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

securityweek.com
1
1
2
2,125
FAA Ground Stop Issued Due to ‘Extraordinary Circumstances’ - securityweek.com/faa-ground-…
FAA Ground Stop Issued Due to “Extraordinary Circumstances”

FAA Ground Stop Issued Due to “Extraordinary Circumstances”

Federal officials have yet to say what caused the communications disruption or whether they are investigating a possible cyberattack.

securityweek.com
1
2
2,097
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach securityweek.com/in-other-ne…
In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

In Other News: New CISA Director Nominee, Connected Car Hacking, Baker Tilly Data Breach

Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.

securityweek.com
2
1,877
Apify Confirms Customer Data Accessed in Cyberattack securityweek.com/apify-confi…
Apify Confirms Customer Data Accessed in Cyberattack

Apify Confirms Customer Data Accessed in Cyberattack

The web scraping company says an intruder accessed customer accounts and obtained personal information or stored data.

securityweek.com
2
1
4
2,245
Hackers Exploit New N-central Zero-Day Hours After PoC Publication securityweek.com/hackers-exp…
Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Hackers Exploit New N-central Zero-Day Hours After PoC Publication

Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.

securityweek.com
3
1
3
2,059
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks securityweek.com/silentair-h…
SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

SilentAir Hackers Intercept Calls, SMS From Inside Mobile Networks

Enea says SilentAir hijacked mobile network nodes to intercept calls and messages, with Taiwanese subscribers the primary targets.

securityweek.com
3
2
3
2,330
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure securityweek.com/law-enforce…
Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure

Investigators seized 235 servers and 257 domains, along with 6.4 million victim credentials as part of Operation Endgame.

securityweek.com
1
1
2
2,049
Citrix Patches 10 Critical NetScaler Vulnerabilities securityweek.com/citrix-patc…
Citrix Patches 10 Critical NetScaler Vulnerabilities

Citrix Patches 10 Critical NetScaler Vulnerabilities

Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.

securityweek.com
1
2
3
2,102
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools securityweek.com/openai-unve…
OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

OpenAI Unveils Daybreak Red Team, Defense Factory Security Tools

Daybreak Red Team pentests web applications with AI agents, while Defense Factory investigates security findings and prepares patches.

securityweek.com
1
1,754
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’ securityweek.com/nightmare-e…
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘SignDrop’

It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.

securityweek.com
5
2,515
Load more