The Experience Manager security update resolves 117 vulnerabilities, including 116 identified as cross-site scripting (XSS) bugs.

The post Adobe Patches Nearly 140 Vulnerabilities appeared first on SecurityWeek.

Microsoft has addressed a Windows vulnerability exploited as zero-day that allows attackers to obtain System privileges.

The post Microsoft Patches 57 Vulnerabilities, Three Zero-Days appeared first on SecurityWeek.

Promotions across Microsoft’s security organization reinforce the company’s shift toward AI-driven defense and tighter operational oversight under Global CISO Igor Tsyganskiy.

The post Microsoft Names New Operating CISOs in Strategic Move to Strengthen Cyberdefense appeared first on SecurityWeek.

The AI-powered platform autonomously conducts security design reviews and proactively identifies design flaws across development work.

The post Prime Security Raises $20 Million to Build Agentic Security Architect appeared first on SecurityWeek.

Learn how GRC and SOC teams can turn shared threat intelligence into faster action, clearer communication, and stronger organizational resilience.

The post Webinar Today: Inside the First 72 hours of a Cyber Event appeared first on SecurityWeek.

North Korean threat actors are believed to be behind CVE-2025-55182 exploitation delivering EtherRAT.

The post React2Shell Attacks Linked to North Korean Hackers appeared first on SecurityWeek.

The funding round was led by KKR, with participation from Sixth Street Growth, TenEleven, and Carrick Capital Partners.

The post Identity Security Firm Saviynt Raises $700 Million at $3 Billion Valuation  appeared first on SecurityWeek.

The US seeks information on the leader of Emennet Pasargad, Mohammad Bagher Shirinkar, and long-time employee Fatemeh Sedighian Kashi.

The post US Posts $10 Million Bounty for Iranian Hackers appeared first on SecurityWeek.

Proofpoint said Hornetsecurity brings in nearly $200 million in annual recurring revenue, with a 20% year-over-year growth rate.

The post Proofpoint Completes $1.8 Billion Acquisition of Hornetsecurity  appeared first on SecurityWeek.

The botnet attempts to steal credentials from infected TBK DVR devices, in addition to abusing them to launch DDoS attacks.

The post New ‘Broadside’ Botnet Poses Risk to Shipping Companies appeared first on SecurityWeek.

The Italian startup will use the investment to build proprietary AI models, accelerate global expansion, and hire new talent.

The post Equixly Raises $11 Million for AI-Powered API Penetration Testing appeared first on SecurityWeek.

Vitas, the largest for-profit hospice chain in the United States, discovered a cybersecurity intrusion in October.

The post Over 300,000 Individuals Impacted by Vitas Hospice Data Breach appeared first on SecurityWeek.

Chrome’s new agentic browsing protections include user alignment critic, expanded origin-isolation capabilities, and user confirmations.

The post Google Fortifies Chrome Agentic AI Against Indirect Prompt Injection Attacks appeared first on SecurityWeek.

From a basement computer lab to the C-Suite: How Keith McCammon built his career and Red Canary with zero formal training.

The post CISO Conversations: Keith McCammon, CSO and Co-founder at Red Canary appeared first on SecurityWeek.

The cybersecurity startup will use the investment to accelerate product development and fuel global expansion.

The post Resemble AI Raises $13 Million for AI Threat Detection appeared first on SecurityWeek.

Tri-Century Eye Care was targeted recently by the Pear ransomware group, which claimed to have stolen over 3 Tb of data. 

The post Tri-Century Eye Care Data Breach Impacts 200,000 Individuals appeared first on SecurityWeek.

Ransomware payments reached the highest level in 2023, at $1.1 billion paid in 1,512 reported incidents.

The post Ransomware Payments Surpassed $4.5 Billion: US Treasury appeared first on SecurityWeek.

The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files.

The post Critical Apache Tika Vulnerability Leads to XXE Injection appeared first on SecurityWeek.

An increasing number of threat actors have been attempting to exploit the React vulnerability CVE-2025-55182 in their attacks.

The post Exploitation of React2Shell Surges appeared first on SecurityWeek.

Other noteworthy stories that might have slipped under the radar: Akamai patches HTTP smuggling vulnerability, Claude Skills used to execute ransomware, PickleScan flaws.

The post In Other News: X Fined €120 Million, Array Flaw Exploited, New Iranian Backdoor appeared first on SecurityWeek.