Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,400 stories synthesized.
Fortinet's FortiAIGate now integrates with Oracle Cloud Infrastructure (OCI) to provide robust security for enterprise AI agents, mitigating risks like prompt injection and data leaks.
A new ClickFix campaign has been identified, employing a deceptive Cloudflare verification page to lure both macOS and Windows users into potential compromise.
Key findings • Cisco CVE-2026-76418 added to CISA KEV due to confirmed active exploitation. • The vulnerability poses an immediate and severe risk to affected systems. • Organizations mus…
Key findings • GitLab CVE-2026-97229 added to CISA KEV due to active exploitation. • The zero-day vulnerability poses an immediate and severe threat to affected GitLab instances. • Organi…
Counterfeiters are shifting their focus from physical bottles to the digital data underpinning wine authenticity, posing new cybersecurity challenges for the industry.
Hacktivists claiming to be the 'Department of Peace' have leaked data on more than 41,000 Department of Homeland Security employees and contractors, alleging a breach of an Okta single sign-on service.
APT actor UAT-11473 exploited a Cisco SD-WAN vulnerability to deploy KeyDrift malware, targeting space, defense, and policy research sectors.
A U.S.-China Economic and Security Review Commission report indicates Beijing is building the means to disrupt trans-Pacific undersea communication cables, potentially crippling regional connectivity without open conflict.
Japan Airlines disclosed a data breach impacting nearly 92,000 customers, with sensitive information like passport numbers compromised, as the nation grapples with a surge in cyber incidents.
CISA has added two actively exploited vulnerabilities, one in Broadcom VMware ESXi and another in the Linux Kernel, to its Known Exploited Vulnerabilities (KEV) Catalog.
The GhostAction supply chain attack campaign, which previously targeted GitHub repositories, has adapted its tactics to focus on compromising developer endpoints and cloud access, though its latest wave of attacks has shown limited success.
Volt Typhoon, a China-nexus APT group, utilized a sophisticated, ephemeral network called 'Silent Train' to conduct multiple zero-day exploitation campaigns against critical infrastructure and strategic entities.
As the critical 2026 holiday shopping season approaches, retailers face a heightened threat landscape, with cybercriminals targeting operations through ransomware, data extortion, and increasingly sophisticated AI-driven attacks.
The U.S. Treasury Department has sanctioned Russian and North Korean nationals and companies for their alleged roles in laundering millions of dollars earned by North Korean IT workers operating illicitly.
WordPress 7.1.4 addresses critical security flaws including remote code execution during upgrades, stored XSS in various blocks and APIs, and a denial-of-service issue.
GitHub introduces a package firewall for npm, inspecting packages against enterprise policies to block malware, critical vulnerabilities, and newly released versions before installation.
Moldova is investigating a significant cyberattack that targeted government digital infrastructure, potentially exposing sensitive personal data and disrupting public services, with Prime Minister Vasile Tofan suggesting possible foreign state involvement.
A security researcher exploited a chain of logic flaws in Microsoft Edge, bypassing its sandbox without memory corruption, to win $175,000 at Pwn2Own Berlin.
ANY.RUN's Interactive Sandbox now provides 'Related Threat Context,' linking current investigations to past analyses to accelerate SOC decision-making and threat detection.
China-backed Volt Typhoon group employs 'Silent Train' infrastructure, rapidly rebuilding compromised networks to evade detection and infiltrate hundreds of critical systems.
The CISO's responsibilities are rapidly expanding to address the risks and opportunities presented by the widespread adoption of AI agents within enterprises.
TeamViewer has released updates to address three high-severity vulnerabilities, including two that could allow arbitrary code execution and one enabling privilege escalation on macOS.
Japanese internet service provider GMO Internet has advised its customers to disconnect their PCs due to a potential ransomware attack, with attackers demanding a significant ransom.
Multiple vulnerabilities in Cloudflare's image processing endpoint were chained by researchers to bypass Content Security Policy (CSP) and execute arbitrary JavaScript.