SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced by companies in October 2026.

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

Google promises a $250,000 root-in-cloud bug bounty reward for high-impact architectural flaws leading to admin control.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was ...

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering ...

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

Google on Monday announced new security updates for Android that resolve more than 200 vulnerabilities, including two dozen critical-severity issues. The first part of the patches arrives on devices ...

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Ivanti has patched CVE-2026-111357 and CVE-2026-118527, two Connect Secure zero-days chained with CVE-2026-104935 in attacks.

Syrian Electronic Army hacker Ahmad Umar Agha, who hijacked AP’s Twitter account in 2013, gets 42 months after a decade on ...