Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,239 stories synthesized.
A novel vulnerability in proprietary LLM APIs allows attackers to extract sensitive reasoning traces by exploiting the interchangeability of encrypted data blocks across different models.
A sophisticated ClearFake infection chain leverages WebDAV and Cloudflare Workers to distribute Amatera stealer, ZigCryptoStealer, and NetSupport Manager, targeting users with fake CAPTCHA prompts.
Attackers are leveraging the Google Visualization API to serve malicious JavaScript for cryptocurrency theft, tricking users into injecting code into their browsers.
Recent cyberattacks on water utilities exploited operational technology systems connected through public cellular networks, bypassing traditional IT security and highlighting critical gaps in asset visibility and network segmentation.
The Panzer ransomware-as-a-service (RaaS) operation is targeting Italian manufacturers and telecom firms, offering tools compatible with Windows, Linux, FreeBSD, and VMware ESXi for widespread disruption.
Britain has unveiled a comprehensive new space strategy backed by £7.8 billion in funding, aiming to enhance national security, drive economic growth, and secure its position in the evolving global space domain through 2030.
New research reveals AI-powered customer service bots can be manipulated through prompt injection and email spoofing to leak sensitive data or execute unauthorized actions.
Jellyfin 12.0 introduces critical security fixes, patching vulnerabilities related to file access, setup, plugins, parental controls, and the web interface, while also deprecating legacy client logins.
The BigBear 2.0 phishing operation, a rebranded Evilginx2 framework, targets Microsoft 365 accounts by stealing session cookies post-MFA, enabling account takeover.
Palo Alto Cortex XDR has been named the top Extended Detection and Response (XDR) platform for 2026, according to a new evaluation that scored solutions on data coverage, correlation quality, response automation, openness, and operability.
A new report ranks the top 10 Firewall-as-a-Service (FWaaS) providers for 2026, with Zscaler leading due to its extensive security cloud and zero-trust architecture.
An unidentified threat actor compromised Coder's Terraform module registry, redirecting traffic to malicious servers and injecting credential-stealing code into Terraform modules.
Dutch telecom Odido and its subsidiary Ben suffered a massive data breach affecting over 6 million customers, compromised by ShinyHunters through a single social engineering phone call.
Fortinet has disclosed a broken access control vulnerability in its FortiSOAR platform that could allow authenticated attackers with no permissions to access sensitive data and inject messages.
An unverified ownership vulnerability in FortiClient Windows allows authenticated attackers to terminate arbitrary processes via an exposed communication port.
A critical vulnerability in Fortinet's Agentless ZTNA portal allows unauthenticated attackers to intercept sensitive traffic via man-in-the-middle attacks.
Fortinet has issued a security advisory for an improper authentication vulnerability in the FortiPAM Server's Chrome Extension, potentially allowing attackers to proxy user traffic.
A critical authentication bypass vulnerability (CVSS 9.6) in FortiMonitorOnSight's web portal allows unauthenticated attackers to forge or reuse JWT tokens due to a static signing key.
A critical improper access control vulnerability in Fortinet's FortiSandbox products allows unauthenticated attackers to access sensitive information by manipulating NAT rules.
A critical command injection vulnerability in FortiSandbox allows privileged attackers to execute arbitrary code through malicious HTTP requests.
A critical vulnerability in Fortinet's FortiAnalyzer SNMP daemon could allow authenticated attackers to cause a denial of service by sending specific SNMP requests.
A critical access control flaw in Fortinet's FortiManager allows administrators to bypass workflow session approvals through crafted HTTP requests.
A NULL Pointer Dereference vulnerability in FortiOS, FortiProxy, and FortiPAM could allow authenticated attackers to crash the httpsd daemon.
Fortinet has issued an advisory for an open redirect vulnerability in its FortiSIEM product, allowing authenticated attackers to redirect users to arbitrary websites.