The hacking group has been using Group Policy to deploy cyberespionage tools on governmental networks.

The post Chinese APT ‘LongNosedGoblin’ Targeting Asian Governments appeared first on SecurityWeek.

Millions of developers can now use the secure, production-ready images made by Docker.

The post Docker Makes 1,000 Hardened Images Free and Open Source appeared first on SecurityWeek.

The exchange has been allegedly involved in laundering money for ransomware groups and other transnational cybercriminal organizations.

The post US Shuts Down Crypto Exchange E-Note, Charges Russian Administrator appeared first on SecurityWeek.

Downloaded from a code library, the information pertains to current and former staff and affiliates, and to alumni and students.

The post University of Sydney Data Breach Affects 27,000 Individuals  appeared first on SecurityWeek.

Linked to the Aisuru IoT botnet, Kimwolf was seen launching over 1.7 billion DDoS attack commands and increasing its C&C domain’s popularity.

The post ‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices appeared first on SecurityWeek.

Data from Chainalysis and Amazon offers a glimpse into North Korea’s cyber activities surrounding cryptocurrency theft and fake IT workers.

The post North Korea’s Digital Surge: $2B Stolen in Crypto as Amazon Blocks 1,800 Fake IT Workers appeared first on SecurityWeek.

ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks.

The post UEFI Vulnerability in Major Motherboards Enables Early-Boot Attacks appeared first on SecurityWeek.

Tracked as CVE-2025-37164, the critical flaw could allow unauthenticated, remote attackers to execute arbitrary code.

The post HPE Patches Critical Flaw in IT Infrastructure Management Software appeared first on SecurityWeek.

Tracked as CVE-2025-59374, the issue is a software backdoor implanted in Asus Live Update in a supply chain attack.

The post CISA Warns of Exploited Flaw in Asus Update Tool appeared first on SecurityWeek.

Threat actors stole names, Social Security numbers, and financial and health information, and deployed ransomware on RBHA’s systems.

The post 113,000 Impacted by Data Breach at Virginia Mental Health Authority appeared first on SecurityWeek.

The Italian company has raised nearly $200 million in 2025 for its widely used embedded cybersecurity platform.

The post IoT Security Firm Exein Raises €100 Million appeared first on SecurityWeek.

France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry

The post France Probes ‘Foreign Interference’ After Remote Control Malware Found on Passenger Ferry appeared first on SecurityWeek.

The medium-severity flaw has been exploited in combination with a critical bug for remote code execution.

The post SonicWall Patches Exploited SMA 1000 Zero-Day appeared first on SecurityWeek.

The critical zero-day is tracked as CVE-2025-20393 and it impacts Secure Email Gateway and Secure Email and Web Manager appliances.

The post China-Linked Hackers Exploiting Zero-Day in Cisco Security Gear appeared first on SecurityWeek.

The trucking industry group has released its 2026 Transportation Industry Cybersecurity Trends Report.

The post NMFTA Warns of Surge and Sophistication of Cyber-Enabled Cargo Theft appeared first on SecurityWeek.

A first-person journey from undetected fraud to defending trust—how life events, neurodiversity, and hard-won insight shaped a former fraudster into a fraud fighter.

The post Hacker Conversations: Alex Hall, One-Time Fraudster appeared first on SecurityWeek.

The malware provides full device control and real-time surveillance capabilities like those of advanced spyware.

The post New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps appeared first on SecurityWeek.

The perimeter is gone. Credentials are no longer sufficient. And security can no longer rely on static controls in a dynamic threat environment.

The post Five Cybersecurity Predictions for 2026: Identity, AI, and the Collapse of Perimeter Thinking appeared first on SecurityWeek.

Led by Bain Capital Ventures, the investment round brings the total raised by the company to $146.5 million.

The post Adaptive Security Raises $81 Million in Series B Funding appeared first on SecurityWeek.

The malware hijacks purchase commissions, tracks users, removes security headers, injects hidden iframes, and bypasses CAPTCHA.

The post GhostPoster Firefox Extensions Hide Malware in Icons appeared first on SecurityWeek.