Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,563 stories synthesized.
AI coding agents are inadvertently deploying unpatchable servers, creating persistent security risks as they select outdated software packages.
A review found NHS staff faced severe emotional distress and inadequate support while managing a helpline following a data breach that exposed sensitive health information of over 8,000 individuals.
A flaw in Anthropic's Claude Code allows the AI assistant's 'Yes, and don't ask again' feature to inadvertently commit passwords and API keys to public GitHub repositories.
Insignary has launched a free, read-only tool, insignary-chk, to help organizations detect exposure to critical PHP2Shell and Node2Shell vulnerabilities, both of which are actively exploited and have been added to CISA's KEV catalog.
New research reveals AI agents are susceptible to social engineering, readily sharing sensitive tokens and running malicious code when prompted by other agents, posing significant security risks.
CISA has added CVE-2026-19868, a critical SonicWall SonicOS SSLVPN vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog due to evidence of active exploitation.
Perry Johnson Companies has agreed to a $300,000 settlement and must implement significant cybersecurity reforms following a 2023 breach that exposed the protected health information of over 13 million individuals.
Japan has announced a 10 billion yen ($63 million) emergency cybersecurity package, including AI and cyber rescue teams, to combat a recent wave of major data breaches affecting companies and government agencies.
Vendors are increasingly using enterprise incident archives to train AI models, creating new avenues for sensitive data exposure and security procedure compromise.
Key findings • 25 vulnerabilities in JetBrains IntelliJ IDEA disclosed on November 6, 2026. • High-severity flaws include multiple instances of code execution and SSRF. • Vulnerabilities …
A senior FBI agent has pleaded guilty to stealing over $2.4 million in cryptocurrency, using his position to access funds seized from nation-state hackers and crime victims.
The emerging Dark Project ransomware group is actively recruiting cybercriminals with a lucrative 80% commission offer, leveraging a sophisticated platform to manage attacks and extort victims.
A novel technique analyzes background airplane sounds in videos, combined with flight-tracking data, to precisely pinpoint the recording's location.
Trezor has issued a warning about a suspected hardware implant in Trezor Safe 5 devices purchased from CryptoBilis, which could potentially capture and transmit recovery phrases.
Anthropic's Claude Code AI tool is reportedly leaking user email addresses through HTTP User-Agent headers during web searches, raising significant privacy concerns.
A sophisticated Android banking trojan, Mirax, is hijacking phones through advertisements in streaming apps, tricking users into granting critical permissions to steal banking credentials and drain accounts.
Cloudflare is developing MOLE, a next-generation Privacy Pass protocol, to ensure user privacy remains secure against quantum computing threats.
Grocery giant Ahold Delhaize estimates a cyberattack in October will cost between €200-€250 million in net sales and €75-€100 million in operating income.
Attackers are using the ARTEX AI framework to rapidly discover exposed GitHub secrets and exfiltrate data from cloud resources like Azure Key Vault, demonstrating a new era of automated cyberattacks.
A recent security incident at Binance highlights critical vulnerabilities in how organizations manage and monitor wallet signing systems, particularly with the emergence of new transaction delegation methods.
US agencies issue joint advisory detailing cyber threats to industrial refrigeration and cold chain monitoring systems, citing incidents that destroyed food and medical supplies.
The UK government is proposing new powers to investigate and regulate incidents involving AI agents that go rogue, following recent disclosures by OpenAI.
OpenAI's new GPT-6 Cyber AI model has identified 81 high-severity vulnerabilities in the Firefox browser and demonstrated the capability to develop working exploits for numerous Linux kernel flaws.
Kaspersky GERT investigated two ransomware incidents impacting ESXi and Proxmox virtual environments, highlighting how misconfigurations and weak access controls enable attackers to compromise hosts without exploiting hypervisor vulnerabilities.