Cybersecurity News and Updates

The IP intelligence company will use the fresh investment to accelerate and scale its operations.

The post Spur Raises $200 Million for IP Intelligence Platform appeared first on SecurityWeek.

Hugging Face has published an anatomy of the attack and OpenAI has shared additional information from its investigation.

The post OpenAI’s Rogue AI Ventured Beyond Hugging Face appeared first on SecurityWeek.

The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period.

The post US, Australia Release OT Isolation Guidance for Critical Infrastructure  appeared first on SecurityWeek.

A total of five vulnerabilities have been patched in VMware ESXi, vCenter, Workstation, and Fusion.

The post Critical VM Escape Vulnerability Patched in VMware ESXi appeared first on SecurityWeek.

The Federal Security Service of the Russian Federation (FSB) on Wednesday said it charged Telegram founder Pavel Durov for allegedly facilitating terrorist activities and for failing to remove prohibited information in violation of Russian law.

The principal security agency said the instant messaging platform “failed to remove numerous channels, chats, and bots on the platform that are

OpenAI on Tuesday revealed the rogue artificial intelligence (AI) agent that escaped its sealed evaluation environment and broke into Hugging Face’s production environment also hacked multiple third-party accounts and services as part of the attack.

The latest disclosure shows that the security incident, which stemmed from an internal security test, was more extensive in scope than previously

Cybersecurity researchers have shared additional technical details about a recently patched critical security flaw impacting Check Point Security Management Server and Multi-Domain Security Management Server (MDS) that has come under active exploitation in the wild.

The vulnerability, tracked as CVE-2026-16232 (CVSS score: 9.3), is an authentication bypass in the SmartConsole login process that

Gitea, the self-hosted Git platform, has patched a critical remote code execution vulnerability. A user with ordinary repository write access can turn attacker-controlled patch content into a live Git hook and run shell commands as the Gitea service account.

Tracked as CVE-2026-60004 (CVSS score: 9.8), the flaw affects Gitea versions 1.17 and later before 1.27.1 and is fixed in 1.27.1. The

Researchers propose focusing on identification of certain cognitive elements in LLMs that indicate when AI systems may take an unwanted action.

OpenAI’s recent AI agent sandbox escape proves traditional security principles matter more than ever: limit access, isolate execution, log everything.