Category: SecurityWeek

Keyfactor, which helps organizations connect humans, machines, and AI with cryptographic security, has secured a strategic growth investment exceeding $1 billion. The massive capital injection comes as enterprises are grappling with what is sometimes described as “identity sprawl“, where machine identities can significantly outnumber human identities. Rather than relying on isolated, fragmented security tools, Keyfactor […]

The post Keyfactor Scores $1 Billion+ Investment for AI, Post-Quantum Security appeared first on SecurityWeek.

Securonix says the sophisticated framework abuses compromised websites, Blogspot, PowerShell, and fileless techniques to evade detection and deploy the PureLog information stealer.

The post Blogspot-Hosted Payloads Delivered in ‘Veil#Drop’ Attacks appeared first on SecurityWeek.

Moving from isolated, technical data to a continuous risk lifecycle can help organizations align security controls with actual business consequences.

The post The Shift Toward Business-Aligned Risk Management appeared first on SecurityWeek.

The threat actor uses modular RATs and information stealers in financially motivated and cyber espionage campaigns.

The post Armored Likho APT Targeting Government, Electric Power Entities appeared first on SecurityWeek.

The PolinRider campaign has compromised more than 100 legitimate open source packages and repositories to deliver a backdoor and information stealer to developers.

The post North Korean Hackers Target Open Source Developers in Supply Chain Attacks  appeared first on SecurityWeek.

Organizations are urged to patch after proof-of-concept code makes the Linux root escalation flaw easier to exploit.

The post Proof-of-Concept Exploit Released for Linux ‘Bad Epoll’ Root Access Vulnerability appeared first on SecurityWeek.

Researchers uncovered two campaigns embedding indirect prompt injections in malicious websites to exploit autonomous AI agents browsing the web.

The post Prompt Injection Attacks Trick AI Agents Into Making Crypto Payments appeared first on SecurityWeek.

Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the US over ATM jackpotting.

The post In Other News: Canadian Hacker Jailed, Open Source Zero-Days, Two Sentenced for ATM Jackpotting appeared first on SecurityWeek.

Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.

The post Agentic AI Used to Conduct Ransomware Attack via Langflow appeared first on SecurityWeek.

Medical technology giant Medtronic is notifying more than 3.8 million individuals that their personal and medical information was compromised in a recent data breach. The incident occurred in April 2026, when the infamous extortion group ShinyHunters accessed the company’s corporate IT systems. Medtronic confirmed the attack in late April, noting that its products and manufacturing […]

The post Medtronic Data Breach Impacts 3.8 Million People appeared first on SecurityWeek.