SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced by companies in October 2026.

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering ...

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was ...

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Google promises a $250,000 root-in-cloud bug bounty reward for high-impact architectural flaws leading to admin control.

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

Ivanti has patched CVE-2026-111357 and CVE-2026-118527, two Connect Secure zero-days chained with CVE-2026-104935 in attacks.

Syrian Electronic Army hacker Ahmad Umar Agha, who hijacked AP’s Twitter account in 2013, gets 42 months after a decade on ...

Northstar Security has emerged from stealth with $7 million in seed funding led by Wing Venture Capital for its AI security agents.

An integer overflow tracked as CVE-2026-111585 could be used to execute arbitrary code on the viewer’s system.

Drupal has patched CVE-2026-118539, an exploited Commerce Core access bypass that may financially impact online store owners.