Ransomware payments reached the highest level in 2023, at $1.1 billion paid in 1,512 reported incidents.

The post Ransomware Payments Surpassed $4.5 Billion: US Treasury appeared first on SecurityWeek.

The bug allows attackers to carry out XML External Entity (XXE) injection attacks via crafted XFA files inside PDF files.

The post Critical Apache Tika Vulnerability Leads to XXE Injection appeared first on SecurityWeek.

The cybersecurity startup detects impersonation risk in real-time, across video, phone, and chat communication.

The post Imper.ai Emerges From Stealth Mode With $28 Million in Funding appeared first on SecurityWeek.

Warp Panda has been using the BrickStorm, Junction, and GuestConduit malware in attacks against US organizations.

The post US Organizations Warned of Chinese Malware Used for Long-Term Persistence appeared first on SecurityWeek.

The startup will invest in expanding its engineering and research teams, deepening product integrations, and scaling go-to-market efforts.

The post Lumia Security Raises $18 Million for AI Security and Governance appeared first on SecurityWeek.

Helmet Security has built an end-to-end platform that secures the infrastructure for agentic AI communication.

The post Helmet Security Emerges From Stealth Mode With $9 Million in Funding appeared first on SecurityWeek.

Hackers stole the names, addresses, Social Security numbers, and financial and medical information of 9,542 people.

The post Inotiv Says Personal Information Stolen in Ransomware Attack appeared first on SecurityWeek.

The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).

The post Reporters Without Borders Targeted by Russian Hackers appeared first on SecurityWeek.

Freedom Mobile says hackers stole customers’ personal information from its account management platform.

The post Personal Information Compromised in Freedom Mobile Data Breach appeared first on SecurityWeek.

The compromised personal and financial information includes names, addresses, Social Security numbers, and card numbers.

The post Marquis Data Breach Impacts Over 780,000 People appeared first on SecurityWeek.

The startup will invest the funds in accelerating development of its second-generation fully homomorphic encryption (FHE) platforms.

The post Niobium Raises $23 Million for FHE Hardware Acceleration appeared first on SecurityWeek.

A critical-severity vulnerability in the King Addons for Elementor plugin for WordPress has been exploited to take over websites.

The post Critical King Addons Vulnerability Exploited to Hack WordPress Sites appeared first on SecurityWeek.

Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.

The post Microsoft Silently Mitigated Exploited LNK Vulnerability appeared first on SecurityWeek.

Chrome 143 stable was released with patches for 13 vulnerabilities, including a high-severity flaw in the V8 JavaScript engine.

The post Chrome 143 Patches High-Severity Vulnerabilities appeared first on SecurityWeek.

The cybersecurity startup will use the investment to accelerate product innovation and global expansion.

The post Zafran Security Raises $60 Million in Series C Funding appeared first on SecurityWeek.

The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.

The post Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors appeared first on SecurityWeek.

The Swiss cybersecurity firm will scale its R&D, sales and marketing teams as it pursues expansion across Europe.

The post Saporo Raises $8 Million for Identity Security Platform appeared first on SecurityWeek.

Names, addresses, email addresses, and phone numbers were compromised in a five-month-long data breach.

The post Personal Information of 33.7 Million Stolen From Coupang appeared first on SecurityWeek.

Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks.

The post Android Zero-Days Patched in December 2025 Security Update appeared first on SecurityWeek.

Hackers stole the personal information of customers and employees before deploying ransomware and crippling Asahi’s operations in Japan.

The post Asahi Data Breach Impacts 2 Million Individuals appeared first on SecurityWeek.