Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 323 stories synthesized.
The emergence of AI agents capable of identifying obscure vulnerabilities, coupled with the proliferation of flawed AI-generated code, is forcing security teams to rethink their defensive strategies.
A critical-severity security defect, present since 2008, has been patched in NGINX Plus and NGINX open source, with proof-of-concept code now publicly available.
THORChain has confirmed a security incident resulting in the theft of approximately $10.7 million from one of its six vaults.
A critical security flaw in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript into WooCommerce checkout pages.
The latest Metasploit wrap-up highlights new persistence mechanisms and vulnerabilities in Marvell and GestioIP products.
Competitors at Pwn2Own Berlin 2026 successfully exploited 15 unique zero-day vulnerabilities in products including Windows 11, Microsoft Exchange, and Red Hat Enterprise Linux.
Malicious actors have injected credential-stealing code into recent versions of the popular node-ipc npm package, marking a new supply chain attack.
The Russian state-sponsored group Turla has upgraded its Kazuar backdoor into a modular peer-to-peer (P2P) botnet designed for long-term persistence and stealthy data collection.
Two vulnerabilities in the widely used Avada Builder plugin for WordPress allow attackers to read arbitrary files and extract sensitive database information.
This SecurityWeek roundup covers developments in encryption legislation, Cisco's AI security specifications, and recent data breaches.
Microsoft is updating its Edge browser to prevent saved passwords from being loaded into memory in clear text at startup, reversing its earlier "by design" stance.
The REMUS infostealer has rapidly evolved to focus on session theft and operates as a malware-as-a-service (MaaS), making stolen authentication tokens more valuable than passwords, according to Flare.
A set of four chained vulnerabilities in OpenClaw, dubbed "Claw Chain," has been disclosed, enabling attackers to steal data, escalate privileges, and maintain persistence.
Adversaries are increasingly targeting CI/CD pipeline infrastructure, moving beyond traditional supply chain attacks to subvert the software delivery lifecycle itself.
Attackers compromised the JDownloader website between May 6-7, 2026, replacing legitimate installer downloads with malware.
Google Workspace administrators can now apply a single, default Context-Aware Access policy across all SAML applications, simplifying security management and enhancing baseline protection.
Meta is confusing users with its approach to chat privacy, introducing end-to-end encrypted AI chats on WhatsApp while removing the same encryption from Instagram direct messages.
Microsoft is implementing a new feature to automatically roll back faulty drivers delivered through Windows Update, aiming to enhance system stability.
This week's cybersecurity news includes the dismantling of the 'Crimenetwork' dark web marketplace and the arrest of its administrator, alongside other notable security events.
Akamai is acquiring LayerX for $205 million to enhance its zero trust security portfolio with LayerX's browser-based AI usage control and secure enterprise browser technology.
American Lending Center has reported a data breach resulting from a ransomware attack that potentially impacts 123,000 individuals, with the investigation concluding nearly a year after the initial discovery.
AI-based video age-verification systems have been shown to be susceptible to simple physical bypasses, such as wearing a fake mustache.
Modern threat actors are increasingly weaponizing trusted administrative utilities like PowerShell and MSBuild to conduct attacks, making detection difficult for security teams.
Researchers have identified a Telegram-based underground market selling tools and phishing infrastructure used to bypass Apple's Activation Lock on stolen iPhones.
