Cybersecurity News and Updates

Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads.

According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026.

“The technique’s appeal is that node.exe (the

Sealed court information and sensitive personal data were exposed in a breach of a Thomson Reuters records platform affecting courts in at least 12 U.S. states, the U.S. Virgin Islands and Canada.

The “Spring Ring” operation aims to compromise users of the collaboration suite to remotely access their sessions, spread malware, and even take over infrastructure.

Former cybercriminal Brett Johnson provides a look inside the mind of a threat actor and discusses where AI provides the most value for attackers.

The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor’s edge devices.

New research suggests the coming Vulnpocalypse may not be so overwhelming for enterprise security teams — if they have the right strategies.

The security defect allows remote attackers to bypass authentication through argument bearer manipulation.

The post Exploit Published for Fresh Cleo Harmony Vulnerability appeared first on SecurityWeek.

The industrial giant has released advisories for its RSLinx Classic, ArmorStart, ControlFLASH, FactoryTalk, and other products.

The post Rockwell Automation Patches Over a Dozen Vulnerabilities Across Products appeared first on SecurityWeek.

Late amendments to the Cyber Security and Resilience Bill would give ministers new powers to restrict risky technology providers as supply chain attacks intensify.

The post UK Moves to Block High-Risk Tech Suppliers From Critical Infrastructure appeared first on SecurityWeek.

The security tool intercepts potentially dangerous agent actions, blocking clear threats and requesting human approval when intent is uncertain.

The post OpenLeash Adds a Human Check to Risky AI Agent Actions appeared first on SecurityWeek.