A forthcoming update to the UK General Data Protection Regulation (GDPR) is about to introduce major changes in the governance of the Information Commissioner’s Office (ICO). The national data protection regulator will move from a single-leader model – under the… Read More "UK’s Data Watchdog Gets a Makeover to Match Growing Demands"
Two critical-severity vulnerabilities in the ShareFile content collaboration and file-sharing platform could be chained together for unauthenticated remote code execution (RCE), attack surface management firm WatchTowr warns. One of the bugs, tracked as CVE-2026-2699 (CVSS score of 9.8), allows unauthenticated… Read More "Critical ShareFile Flaws Lead to Unauthenticated RCE"
ESET researchers have uncovered two Android spyware campaigns targeting individuals interested in secure communication apps, namely Signal and ToTok. These campaigns distribute malware through deceptive websites and social engineering and appear to target residents of the United Arab Emirates (UAE).… Read More "New spyware campaigns target privacy-conscious Android users in the UAE"
Ransomware actors are extorting bigger payments from a smaller number of victims, as the number of those victims surges but overall revenues fall, according to Chainalysis. The blockchain analytics firm revealed in its analysis of cryptocurrency payments to threat actors… Read More "Ransomware Payments Decline 8% as Attacks Surge 50%"
SecurityWeek’s weekly cybersecurity news roundup offers a concise overview of important developments that may not receive full standalone coverage but remain relevant to the broader threat landscape. This curated summary highlights key stories across vulnerability disclosures, emerging attack methods, policy… Read More "In Other News: ChatGPT Data Leak, Android Rootkit, Water Facility Hit by Ransomware"
The next major breach hitting your clients probably won’t come from inside their walls. It’ll come through a vendor they trust, a SaaS tool their finance team signed up for, or a subcontractor nobody in IT knows about. That’s the new attack surface,… Read More "Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture"
Manufacturers operate in one of the most unforgiving threat environments and face a unique set of pressures that make attacks particularly damaging 03 Oct 2025 • , 5 min. read Manufacturers face a unique mix of risk: they have an… Read More "Strengthening cyber-defenses amid surging threats"
A credential theft campaign that targeted C-suite executives and senior personnel at major global organizations from November 2025 to March 2026 has been uncovered by researchers at Abnormal. They have detailed a previously undocumented phishing-as-a-service (PhaaS) platform called Venom that… Read More "New Phishing Platform Used in Credential Theft Campaigns"
Chinese hackers have exploited a zero-day vulnerability in the TrueConf video conferencing software in attacks against government entities in Asia, Check Point reports. The exploited bug, tracked as CVE-2026-3502 (CVSS score of 7.8), exists because the application does not properly… Read More "TrueConf Zero-Day Exploited in Asian Government Attacks"
Ravie LakshmananApr 03, 2026Threat Intelligence / Malware The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman… Read More "UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack"
