Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,233 stories synthesized.
Threat actors are increasingly integrating Web3 technologies and exploiting open-source software supply chains to breach enterprise cloud environments, according to Unit 42.
Oracle Health's Cerner EHR system breach, initially reported in 2025, has now affected an estimated 20 million patients, making it one of the largest health data compromises of that year.
The U.S. State Department has announced a $10 million reward for information leading to the arrest of Zhang Yu, a Chinese national allegedly involved in the widespread Hafnium hacking campaign.
Federal contractors handling sensitive unclassified information will soon face stricter cybersecurity mandates, including mandatory 72-hour breach reporting and adherence to NIST standards.
Cisco Talos has disclosed several vulnerabilities affecting Adobe Photoshop, Apple macOS, Foxit Reader, and Microsoft Windows, with vendors having already released patches.
AWS introduces Strands Box, an open-source AI agent sandbox that uses OS-level isolation and temporal awareness to prevent autonomous agents from executing unintended or harmful actions.
A breach at Discord security bot provider Double Counter exposed millions of Discord IDs, usernames, IP addresses, and email addresses due to an attacker exploiting an old server running Metabase.
Four US states are suing networking giant TP-Link, alleging deceptive marketing practices regarding router security and undisclosed ties to China, citing national security risks.
US Security Operations Centers are struggling with overwhelming alert volumes, fragmented toolsets, and sophisticated phishing, leading to significant operational bottlenecks.
Law enforcement agencies in the US and France have seized two websites used to distribute child sexual exploitation material, including AI-generated deepfakes, leading to an arrest.
Cloudflare introduces an advanced AI agent harness designed to automate and enhance the analysis of security alerts, addressing the 'alert paradox' faced by human analysts.
Microsoft's FORGE Lab has discovered 140 Windows CVEs and 155 reports across 23 open-source projects, highlighting the critical need to scale vulnerability validation and remediation alongside AI-driven discovery.
A critical vulnerability in LMCache's multiprocess mode, affecting LLM acceleration servers like vLLM, enables unauthenticated attackers to execute arbitrary code remotely.
A sophisticated malware campaign dubbed PoeLLM has compromised over 3,400 servers by ingeniously using a poem posted on GitHub as a dynamic lookup table to generate command-and-control server addresses.
Atlassian products are affected by CVE-2026-21589, an arbitrary file access vulnerability that allows attackers to read sensitive files by exploiting a unique directory traversal mechanism.
A sophisticated initial access broker known as CyberXero is employing AI tools like Claude Code and PentAGI alongside Cobalt Strike to conduct extensive cyberattacks targeting WordPress, e-commerce sites, and Ukrainian energy infrastructure.
Southern Company disclosed a data breach affecting Georgia Power and Alabama Power customers, with hackers accessing utility account information for approximately 400,000 accounts.
Two major South Korean churches have suffered significant data breaches, compromising the personal and financial information of over one million congregants.
The U.S. Senate has unanimously passed the Health Care Cybersecurity and Resiliency Act of 2026, aiming to strengthen federal cybersecurity standards for healthcare organizations in the wake of the massive Change Healthcare breach.
An alleged core member of the Qilin ransomware operation has been arrested in Japan and extradited to Germany to face hacking charges.
Vijil launches Diamond Adaptive Red Teaming for Agents (DART), an AI-powered tool that uses adversarial agents to find security flaws and policy violations in enterprise AI systems.
Edgescan introduces Edgescan Atomic, an AI-driven autonomous penetration testing solution designed to continuously validate attack paths and an organization's security posture.
Google's October security updates for Android 14 and newer fix critical vulnerabilities, but many users face delayed patches due to older devices and vendor timelines.
Hoxhunt's expanded Respond platform now automates phishing investigations and email removal, aiming to drastically reduce the workload on security operations teams.