Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,755 stories synthesized.
INTERPOL's Operation Ramz has led to the arrest of over 200 individuals and the seizure of 53 servers used for phishing, malware, and online fraud across 13 countries in the Middle East and North Africa.
A CISA contractor left highly sensitive AWS GovCloud administrative keys, plaintext passwords, and internal system details exposed in a public GitHub repository for months, in what researchers call one of the worst government data leaks in recent history.
A batch of 12 vulnerabilities spanning heap overflows, use-after-free, and policy bypasses was disclosed for ImageMagick on May 18, 2026, affecting multiple coders and operations.
Ten vulnerabilities were disclosed in OpenTelemetry's eBPF Instrumentation agent on May 18, 2026, including high-severity remote crash bugs in Memcached, MongoDB, and Postgres protocol parsers.
Microsoft patched three vulnerabilities in Edge on May 18, 2026, including a high-severity RCE (CVE-2026-45495) and two medium-severity spoofing and bypass flaws, with no active exploitation reported.
Three high-severity vulnerabilities were disclosed in the CI4MS content management system on May 18, 2026, including two stored XSS bugs from a broken HTML-purify rule and a file-editor flaw that allows attackers to delete or rename critical application files.
A newly disclosed Linux kernel vulnerability, CVE-2026-46333, allows unprivileged local users to read files normally restricted to root, including SSH keys and password files, affecting multiple LTS kernel versions.
Iran-linked threat actors linked to Iran have exploited unsecured automatic tank gauge systems to tamper with fuel level readings at US gas stations, expanding the scope of Iran's cyber offensive amid ongoing military conflict.
Check Point's weekly threat intelligence report covers multiple incidents including a Lapsus$ source code leak at Vodafone, a $10.7 million THORChain vault breach, ransomware attacks on West Pharmaceutical and Foxconn, and critical patches for NGINX, Cisco, and Apple zero-days.
SentinelOne has uncovered a new variant of the SHub Stealer, dubbed 'Reaper,' targeting macOS with a multi-stage infection chain that spoofs Microsoft, Apple, and Google at different stages.
The convergence of rapid AI-driven software development and autonomous vulnerability-discovery agents is fundamentally altering the threat landscape, rendering traditional security-through-obscurity strategies obsolete.
SentinelOne Labs reveals how black-box red-teaming of a government education AI assistant found robust semantic defenses but uncovered critical vulnerabilities to structural attacks like JSON encapsulation and Base64 obfuscation.
Kaspersky's Q1 2026 mobile threat report reveals over 2.67 million attacks blocked, a surge in banking Trojans, and the discovery of the SparkCat crypto stealer on both Google Play and the App Store.
Kaspersky's Q1 2026 threat report reveals over 343 million web attacks blocked, 2,938 new ransomware variants, and Clop accounting for 14% of data leak site victims.
Attackers launched three separate supply-chain campaigns against npm, PyPI, and Docker Hub within 48 hours, shifting focus from code tampering to harvesting API keys, cloud credentials, and tokens from developer environments and CI/CD pipelines.
A researcher has published a zero-day exploit named YellowKey that bypasses default Windows 11 BitLocker encryption by defeating TPM-stored decryption keys, posing a critical risk to government and enterprise deployments.
Ivanti, Fortinet, SAP, VMware, and n8n have released security updates addressing multiple critical vulnerabilities, including remote code execution, SQL injection, and privilege escalation flaws.
Microsoft is changing Edge's password handling so that saved credentials are no longer decrypted and held in plaintext in process memory at startup, closing a long-standing weakness unique among Chromium browsers.
Microsoft has confirmed that the May 2026 Windows 11 security update KB5089549 fails to install on devices with insufficient EFI System Partition space, triggering 0x800f0922 errors.
Threat actors are actively exploiting a critical heap buffer overflow in NGINX (CVE-2026-42945) just days after F5 released patches and a public proof-of-concept emerged, with over 5.7 million internet-exposed servers potentially vulnerable.
A proof-of-concept exploit has been released for CVE-2026-1234, a local privilege escalation vulnerability in the Linux kernel's rxgk module that allows unprivileged attackers to gain root access.
Microsoft and the Institute of Science Tokyo have disclosed MetaBackdoor, a novel backdoor attack that embeds malicious behavior in LLM weights triggered by input length, evading all standard content filters.
Cloudflare reveals findings from Project Glasswing, where Anthropic's Mythos Preview LLM demonstrated advanced exploit chain construction and automated proof generation, outperforming general-purpose frontier models.
Security researchers collected $1,298,250 for exploiting 47 zero-day vulnerabilities across enterprise and AI products at Pwn2Own Berlin 2026, with DEVCORE winning the contest.