SecurityWeek Briefing

"Abstract raises $25 million to expand composable security operations platform."

Views expressed in this cybersecurity, cyber crime update are those of the reporters and correspondents.  Accessed on 23 July 2026, 1419 UTC.

Content and Source:  "SecurityWeek" via email subscription from https://feedly.com.

https://feedly.com/i/subscription/content/feed%2Fhttp%3A%2F%2Ffeeds.feedburner.com%2FSecurityweek.

Please check subscription link or scroll down to read your selections.  Thanks for joining us today.

Russ Roberts (https://www.hawaiicybersecurityjournal.net).

SecurityWeek

99K followers46 articles per week

#security#tech

86

Today

Abstract Raises $25 Million to Expand Composable Security Operations Platform

by SecurityWeek News / 19min

The latest investment round brings the total raised by Abstract to nearly $50 million. The post appeared first on SecurityWeek .

Nuclear-Sabotage Malware Benchmark Trips Up Most Frontier AI Models

AI advances malware analysis

•

by Eduard Kovacs / 1h

SentinelOne’s new benchmark, built on the Fast16 case, shows which AI models can sustain a malware investigation and which cannot. The post appeared first on SecurityWeek .

Upbound Group Says Data Breach Led to $13 Million in Fraudulent Contract Losses

Impact (Enterprise TA0040)

•

by Eduard Kovacs / 3h

•

Upbound loses 13M to fraud

Hackers recently obtained non-sensitive customer information and other documents from the company. The post appeared first on SecurityWeek .

Assaf Keren Appointed New CISO of Meta

Meta names Assaf Keren CISO

•

by SecurityWeek News / 4h

He replaces Guy Rosen, who announced his retirement from the company after 13 years. The post appeared first on SecurityWeek .

Yesterday

New Check Point Zero-Day Vulnerability Exploited in the Wild

CVE-2026-16232

•

by Eduard Kovacs / 5h

The vulnerability tracked as CVE-2026-16232 has been exploited against customers with certain configurations. The post appeared first on SecurityWeek .

US Warns of Iranian Hackers Targeting Siemens, Schneider, and Rockwell ICS Devices

Exfiltration (Enterprise TA0010)

•

by Eduard Kovacs / 8h

An updated advisory from federal agencies provides information on the techniques used to hack programmable logic controllers. The post appeared first on SecurityWeek .

Vibe-Coded Apps Riddled With Exploitable Security Flaws

by Kevin Townsend / 20h

Analysis found 434 exploitable flaws in AI-generated apps, with denial-of-service, authorization and secrets exposure risks among the most common issues. The post appeared first on SecurityWeek .

Suno, Paidwork Data Breaches Affect Tens of Millions of Accounts

Suno scraped millions of songs

•

by Eduard Kovacs / 23h

Hackers leaked names, email addresses, phone numbers, passwords, and financial information stolen from the two platforms. The post appeared first on SecurityWeek .

Palo Alto Networks to Acquire Observability Platform Provider Embrace

Palo Alto acquires Embrace

•

by SecurityWeek News / 23h

Acquisition follows January's Chronosphere deal, deepening Palo Alto Networks' push beyond core security into observability. The post appeared first on SecurityWeek .

Flaw in Adobe Extension With 300M Installs Enabled WhatsApp Data Theft

by Eduard Kovacs / 23h

An attacker only needed to convince the targeted user to visit a malicious website to exfiltrate WhatsApp messages and contacts. The post appeared first on SecurityWeek .

When Identity Verification Fails: Lessons from a Real-World SIM Swap and Near Account Takeover

by Torsten George / 1d

Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge. The post appeared first on SecurityWeek .

StrongestLayer Raises $4.1 Million in Seed Funding Extension

3 TTPs

•

by Ionut Arghire / 1d

•

StrongestLayer raises 4.1M

The startup will use the fresh investment to accelerate its go-to-market strategy and to expand its platform. The post appeared first on SecurityWeek .

Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks

6 TTPs

•

by Eduard Kovacs / 1d

•

CVE-2026-50522 & 1 other

CVE-2026-50522 is being exploited by threat actors to steal machine keys and retain long-term access. The post appeared first on SecurityWeek .

Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation

Glow raises 180M

•

by Ionut Arghire / 1d

Using AI, the startup provides adaptive prevention through environment mapping, risk analysis, and automated policy enforcement. The post appeared first on SecurityWeek .

Jul 21, 2026

Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates

by Eduard Kovacs / 1d

Many of the vulnerabilities fixed with the July 2026 Critical Patch Update were likely discovered by AI. The post appeared first on SecurityWeek .

Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife

3 TTPs

•

by Eduard Kovacs / 1d

•

fairlife ransomware halts production

The Anubis ransomware group claims to have stolen 1 TB of confidential data from the Coca-Cola subsidiary. The post appeared first on SecurityWeek .

OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face

3 TTPs

•

by Eduard Kovacs / 1d

The admission comes days after Hugging Face disclosed an attack powered by autonomous AI agents. The post appeared first on SecurityWeek .

Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains

Trump tightens defense supply waivers

•

by SecurityWeek News / 1d

New executive order calls for end-to-end visibility into defense supply chains, including software dependencies, foreign ownership and cyber-related supplier risks. The post appeared first on SecurityWeek .

Cisco Launches Low-Cost AI Models for Source Code Security

Cisco launches Antares security models

•

by Kevin Townsend / 1d

The open-weight Antares models are designed to pinpoint known vulnerabilities in codebases faster and at a fraction of the cost of larger AI models. The post appeared first on SecurityWeek .

Empirical Security Raises $25 Million in Series A Funding

Empirical Security raises 25M

•

by Ionut Arghire / 2d

The startup will use the investment to accelerate the development of its threat prediction and discovery products. The post appeared first on SecurityWeek .

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity

by SecurityWeek News / 2d

Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering proven impact in industrial cybersecurity; winners to be announced live at the 2026 ICS Cybersecurity Conference in Nashville The post appeared first on SecurityWeek .

New HollowGraph Malware Abuses Microsoft 365 Calendar for C&C Communication

7 TTPs

•

by Ionut Arghire / 2d

•

HOLLOWGRAPH uses Microsoft 365 calendars

Part of a larger toolkit, HollowGraph uses a compromised 365 account’s calendar as a two-way dead-drop. The post appeared first on SecurityWeek .

CISO Conversations: Andreas Gaetje – From Economics to CISO at Körber AG

by Kevin Townsend / 2d

Gaetje’s story shows that you don’t need to be a ‘deep bit-crawler’ to become a Chief Information Security Officer. The post appeared first on SecurityWeek .

Estée Lauder Discloses Impact From Oracle EBS Zero-Day Hack

3 TTPs

•

by Ionut Arghire / 2d

Hackers exfiltrated personal, financial, and health information from the company’s Oracle EBS instance in August 2025. The post appeared first on SecurityWeek .

Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data

Collection (Enterprise TA0009)

•

by Eduard Kovacs / 2d