Code Defender

The statement came a day after a hacking group calling itself Black Spark claimed it had spent more than a month inside Microolap’s network and gained access to its internal systems, including EtherSensor, the company’s network traffic analysis platform.

The Hospital for Sick Children — which was hit in a ransomware incident in 2022 that disabled some of its systems — released a statement on Thursday warning of a data theft incident they believe is tied to a third-party software application.

The bank said there is no evidence that its own systems, networks or data repositories were compromised.

Lawmakers say little is known about how recent cuts have impacted CISA and how the knowledge that was lost has been replaced.

The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.

The post CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities appeared first on SecurityWeek.

Most of the fixes resolve code execution, privilege escalation, and information disclosure vulnerabilities.

The post Microsoft Rolls Out 22 Fresh Security Patches appeared first on SecurityWeek.

Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base.

The post Contractors’ CMMC Confidence Rises as Ability to Prove It Falls Behind appeared first on SecurityWeek.

Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.

The post Rust Supply Chain Attack Linked to North Korean Hackers appeared first on SecurityWeek.

Microsoft on Thursday warned of a maximum-severity security flaw in Entra ID that it said has been exploited in the wild, but noted that no customer action is required.

The vulnerability, tracked as CVE-2026-69836 (CVSS score: 10.0), is a case of remote code execution impacting the tech giant’s cloud-based identity and access management service. It was previously called Azure Active Directory

A newly disclosed security flaw in GitLab has come under active exploitation within days of public disclosure, according to watchTowr.

The vulnerability in question is CVE-2026-19478 (CVSS score: 9.4), a case of code injection that allows an unauthenticated attacker to modify or delete publicly accessible GitLab projects and rewrite their data under certain conditions without requiring