Vulnerabilities
Researchers Disclose Unpatched "XRING" Flaw That Lets Remote Clients Crash HTTP/3 XQUIC Servers
An unpatched HTTP/3 QUIC-library finding — defender teams review protocol posture this week.
Latest
Data Breaches
DHS Database Hacked, SecurityWeek Roundup Reports; Adobe, Canada Also Featured
A federal-agency database breach lands in the weekly roundup — sector-advisory tracking this week.
Threat Intelligence
Microsoft Details "GigaWiper," a Malware Family Combining Espionage and Destructive Capabilities
A new destructive-plus-espionage malware family lands on defenders' desks — detection-engineering review this week.
Policy & Government
European Commission Refers Ireland, Spain, France and the Netherlands to the CJEU Over NIS2 Delays
A sharp regulatory-enforcement move from the European Commission — compliance stakes rise this week.
Vulnerabilities
Palo Alto Networks Patches 13 Vulnerabilities in Coordinated Advisory
A large-scale Palo Alto patch cycle — defender verification across product fleets this week.
Policy & Government
UK Government Launches “Cyber Shield” Agentic-AI Defense Plan and Cyber Resilience Pledge
A national-scale agentic-AI defense plan from the UK — defender teams and industry partners align this week.
Cybercrime
Interpol Reports 5,800 Arrests Across 97 Countries in Global Cybercrime Crackdown
A scale-significant multi-country cybercrime disruption — law-enforcement coverage this week.
Supply Chain Attack
npm 12 Ships With Install Scripts Disabled by Default to Cut Supply-Chain Risk
A meaningful ecosystem-policy signal from npm after months of contributor-account compromises — defender developers review CI/CD posture this week.
Vulnerabilities
Microsoft Patches RoguePlanet Defender Flaw That Could Grant SYSTEM Privileges
The RoguePlanet Defender saga closes with Microsoft's patch — defender teams accelerate verification this week.
Linux
Researchers Disclose "GhostLock," a 15-Year-Old Linux Flaw Enabling Root and Container Escape
Another long-standing Linux finding lands with defender-team implications across distributions and container platforms.
Supply Chain Attack
Researchers Disclose "HalluSquatting" Technique Targeting AI Coding Assistants
An AI-hallucination supply-chain finding with organization-wide implications — defender review this week.
Vulnerabilities
Google Awards $250,000 Bounty for Linux KVM Guest-to-Host Escape
A significant Google bounty award draws attention to a Linux virtualization finding — defender review continues this week.