SecurityWeek tracked 37 cybersecurity merger and acquisition (M&A) deals announced by companies in October 2026.

Hackers breached Revolve’s online shopping platform and stole the personal and payment card information of at least 180,000 people.

Google promises a $250,000 root-in-cloud bug bounty reward for high-impact architectural flaws leading to admin control.

A threat actor published a malicious Claude Code extension to the Cursor marketplace in a new supply chain attack.

Chainalysis has disclosed a data breach after hackers used offensive agentic techniques to access its systems.

DebugBear says its DNS records were compromised via its domain registrar, and early findings show a single customer was ...

The FBI attributed the Binance hack to North Korea’s TraderTraitor and published over 600 attacker addresses as laundering ...

Northstar Security has emerged from stealth with $7 million in seed funding led by Wing Venture Capital for its AI security agents.

Syrian Electronic Army hacker Ahmad Umar Agha, who hijacked AP’s Twitter account in 2013, gets 42 months after a decade on ...

Palo Alto Networks firewalls have been rooted via PHP2Shell exploits, but no WordPress site has been compromised.

Anthropic disputes the scope of an ex-DOGE startup’s intrusion, a UEFI flaw affects most servers, and Cloudflare fixes an AI data leak.

Passkeys replace shared secrets with cryptographic credentials. There is no password for an attacker to steal, intercept ...