Antivirus and Security news

Four Risks Boards Cannot Treat as Background Noise

The goal isn’t about preventing every attack but about keeping the business running when attacks succeed. The post Four Risks Boards Cannot Treat as Background Noise appeared first on SecurityWeek. more…

Claude Code Flaws Exposed Developer Devices to Silent Hacking

Anthropic has patched vulnerabilities whose impact was demonstrated by Check Point via malicious configuration files. The post Claude Code Flaws Exposed Developer Devices to Silent Hacking appeared first on SecurityWeek. more…

Gambit Security Emerges From Stealth With $61 Million in Funding

The seed and Series A investment will enable the startup to accelerate product development and expand sales and customer success teams. The post Gambit Security Emerges From Stealth With $61 Million in Funding appeared first on SecurityWeek. more…

Zyxel Patches Critical Vulnerability in Many Device Models

The issue impacts the UPnP function of multiple device models and could be exploited for remote code execution. The post Zyxel Patches Critical Vulnerability in Many Device Models appeared first on SecurityWeek. more…

Anthropic buys Vercept, deepening push into AI task automation

Anthropic has acquired Seattle-based AI startup Vercept, signaling further consolidation in the emerging market for AI agents that can directly operate software applications. Vercept, a graduate of Seattle’s AI-focused incubator A12, developed cloud-based agents capable of controlling a remote MacBook, part of a broader effort to rethink how work gets done as enterprises explore AI-driven […] more…

US Sanctions Russian Exploit Broker Operation Zero

The broker acquired eight zero-day exploits from a US defense contractor executive jailed for his actions. The post US Sanctions Russian Exploit Broker Operation Zero appeared first on SecurityWeek. more…

Trend Micro Patches Critical Apex One Vulnerabilities

TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products. The post Trend Micro Patches Critical Apex One Vulnerabilities appeared first on SecurityWeek. more…

Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers

Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges. The post Cisco Patches Catalyst SD-WAN Zero-Day Exploited by Highly Sophisticated Hackers appeared first on SecurityWeek. more…

LinkedIn moves to offer skill validations in the AI era

Job seekers can list skills in LinkedIn profiles, but verifying whether they actually have them typically falls to recruiters. But with more and more employers now seeking AI fluency in candidates, LinkedIn is taking steps to prove that job candidates really have they skills they claim. The Verified AI Skills program unveiled in January involves […] more…

US orders diplomats to push back on data sovereignty

The US government has ordered its diplomats to actively oppose other countries’ attempts to introduce so-called data sovereignty laws that restrict how and where foreign technology companies can store and handle citizens’ data, according to Reuters. In an internal memo from Secretary of State Marco Rubio, the US describes such rules as a threat to […] more…

US DoD to Anthropic: compromise AI ethics or be banished from supply chain

A growing rift between the US Department of Defense (DoD) and Anthropic over how AI can be used by the military has led to Defense Secretary Pete Hegseth issuing a blunt ultimatum: work with us on our terms or risk being banned from Pentagon programs. According to news site Axios, Hegseth gave Anthropic until Friday, […] more…

MWC: When it comes to 6G, Apple is a leader, not a follower

Does anyone remember when Apple was about to collapse because it didn’t offer 5G iPhones? Well, things have changed since then and as we make our way toward the 6G network transition expected in 2030 or so, Apple is ready to take part. How do I know this? Because Apple will have a presence at […] more…

The Blast Radius Problem: Stolen Credentials Are Weaponizing Agentic AI

More than half (56%) of the 400,000 vulnerabilities IBM X-Force tracked in 2025 required no authentication before exploitation. The post The Blast Radius Problem: Stolen Credentials Are Weaponizing Agentic AI appeared first on SecurityWeek. more…

Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments

The UNC2814 threat actor has been active since at least 2017, targeting organizations across 42 countries. The post Google Disrupts Chinese Cyberespionage Campaign Targeting Telecoms, Governments appeared first on SecurityWeek. more…

SolarWinds Patches Four Critical Serv-U Vulnerabilities

The four security defects could be exploited for remote code execution but require administrative privileges. The post SolarWinds Patches Four Critical Serv-U Vulnerabilities appeared first on SecurityWeek. more…

Medical Device Maker UFP Technologies Hit by Cyberattack

UFP Technologies appears to have been targeted in a ransomware attack that involved data theft and file-encrypting malware. The post Medical Device Maker UFP Technologies Hit by Cyberattack appeared first on SecurityWeek. more…

« Older posts