Security Week

1. TigerByte Cyber Emerges From Stealth With $3 Million in Funding

   The company has secured over $7 million in contracts with US government agencies, including the US Space Force, the US Navy, and DARPA.

   The post TigerByte Cyber Emerges From Stealth With $3 Million in Funding appeared first on SecurityWeek.

2. In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw

   Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug exploited.

   The post In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw appeared first on SecurityWeek.

3. AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code

   Hacktron researchers earned a bug bounty after demonstrating access to OpenAI employee accounts. 

   The post AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code appeared first on SecurityWeek.

4. 23 Million User Records Compromised in Gyazo Data Breach 

   Gyazo maker Helpfeel said the attacker exploited a vulnerability in its image upload server to gain unauthorized access.

   The post 23 Million User Records Compromised in Gyazo Data Breach  appeared first on SecurityWeek.

5. Microsoft Patches 18 Vulnerabilities in AI, Cloud Products

   Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.

   The post Microsoft Patches 18 Vulnerabilities in AI, Cloud Products appeared first on SecurityWeek.

6. NightmareStresser DDoS Service Disrupted in International Operation

   Active since at least 2022, NightmareStresser was one of the longest-running DDoS-for-hire services in the world.

   The post NightmareStresser DDoS Service Disrupted in International Operation appeared first on SecurityWeek.

7. Brevo Supply Chain Attack Injects Malware Into 100,000 Websites

   Hackers used a compromised API key to deploy a Cloudflare worker that injected malicious scripts.

   The post Brevo Supply Chain Attack Injects Malware Into 100,000 Websites appeared first on SecurityWeek.

8. Critical Orkes Conductor Vulnerability Exploited in Attacks

   CVE-2026-58138 is an unauthenticated remote code execution vulnerability that attackers can exploit via inline workflow definitions.

   The post Critical Orkes Conductor Vulnerability Exploited in Attacks appeared first on SecurityWeek.

9. MIND Secures $72 Million for AI-Powered DLP

   The company will use the funding to accelerate platform development and expand its presence in key enterprise markets.

   The post MIND Secures $72 Million for AI-Powered DLP appeared first on SecurityWeek.

10. Check Point, Kaspersky, Tanium Patch Product Vulnerabilities

    Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.

    The post Check Point, Kaspersky, Tanium Patch Product Vulnerabilities appeared first on SecurityWeek.