SC Staff

Let's recap the week so far with Security Weekly News; Obfuscated malware in NPM packages, tens of thousands of hacked IoT cameras. Find out what it all means for your digital survival.

Microsoft has unveiled a new European Security Programme aimed at bolstering cybersecurity for all 27 EU member states, EU candidates, the UK, and several neighboring countries, as digital threats escalate across the continent, reports Computer Weekly.

As cybersecurity threats grow more complex and frequent, enterprises are turning to real-time cyber risk intelligence to identify and neutralize risks before they escalate, according to RT Insights.

A growing wave of AI-driven cyberattacks is targeting financial institutions worldwide, with iProovs Security Operations Center uncovering a coordinated campaign led by the threat actor known as Grey Nickel, Intelligent CISO reports.

BleepingComputer reports that an international money laundering ring involving cryptocurrency scams has resulted in five men pleading guilty to laundering nearly $37 million stolen from U.S. victims.

The Office of Personnel Management was found to have violated the law by providing the Department of Government Efficiency with access to its databases containing information on current and former federal workers, as well as job seekers, following the inauguration of President Donald Trump, according to The Hill.

The House Appropriations Subcommittee on Homeland Security has voted to advance spending legislation that would provide the Cybersecurity and Infrastructure Security Agency with $2.7 billion for fiscal year 2026, which is $134.8 million lower than the agency's budget this year, reports CyberScoop.

SecurityWeek reports that Adobe has fixed hundreds of flaws impacting several of its offerings, including code execution vulnerabilities in Acrobat Reader and Adobe Commerce, as part of this month's Patch Tuesday.

Marks & Spencer has resumed online ordering capabilities more than a month after such services were disrupted as a result of the Scattered Spider hacking collective's compromise of its systems during the Easter weekend, according to The Guardian.

Updates have been released by Ivanti to fix a trio of high-severity hardcoded key flaws impacting its Workspace Control platform, which could be leveraged to compromise vulnerable systems' database credentials and facilitate further lateral movement, Cyber Security News reports.