Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,755 stories synthesized.
OTT Cybersecurity has released version 3.1.0 of Lyrie, an open-source autonomous pentesting agent that adds XChaCha20-Poly1305 memory encryption, seven new PoC generators, and a cryptographic Agent Trust Protocol for AI agent identity verification.
Regulatory attorney Elizabeth Hodge warns that AI stealthily embedded into existing healthcare software and tools — often without vendor disclosure — creates privacy risks on par with shadow AI.
Linux creator Linus Torvalds has declared the kernel's security mailing list 'almost entirely unmanageable' due to a flood of duplicate vulnerability reports generated by AI-powered bug-hunting tools.
Three vulnerabilities were disclosed in Vercel's AI SDK on May 17, 2026, including a high-severity SSRF in the provider-utils package and a CI pipeline command injection flaw.
A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows systems.
Debian 13.5 has been released as a point update for the 'trixie' stable distribution, bundling over 100 security advisories and fixes for more than 130 packages.
Grafana Labs disclosed that an unauthorized party accessed its GitHub environment using a stolen token, enabling the download of the company's source code.
The American Hospital Association and Rubrik are calling for a shift in healthcare cybersecurity strategy, emphasizing that hospitals must prioritize immutable backups and rapid recovery over the unattainable goal of total attack prevention.
Federal agencies, including NIST and the DoD, have issued a series of updated security and privacy guidelines aimed at strengthening incident response, identity verification, and risk management across the government.
SecurityScorecard has acquired internet scanning startup Driftnet to bolster its real-time visibility into exposed infrastructure, AI-related risks, and malicious attack patterns.
Decentralized cryptocurrency platform THORChain has confirmed a $10.7 million theft following the compromise of one of its six operational vaults.
A critical, unauthenticated vulnerability in the Funnel Builder WordPress plugin is being actively exploited to inject payment skimmers into WooCommerce checkout pages, affecting over 40,000 websites.
The Metasploit Framework has added four new modules, including exploits for critical vulnerabilities in Marvell QConvergeConsole, GestioIP, and Dolibarr ERP/CRM, alongside a new Vim-based persistence mechanism.
Russian state-sponsored threat actor Secret Blizzard has evolved its long-standing Kazuar backdoor into a modular P2P botnet, enhancing its ability to conduct stealthy, long-term espionage against government and defense targets.
Microsoft has declined to issue a CVE for a critical privilege escalation vulnerability in Azure Backup for AKS, despite independent validation by CERT/CC and evidence suggesting the company silently patched the flaw.
A critical, actively exploited zero-day vulnerability in Cisco Catalyst SD-WAN Controller allows unauthenticated attackers to gain full administrative access, triggering an emergency CISA mandate.
A new infostealer dubbed REMUS has rapidly matured into a professionalized Malware-as-a-Service operation, shifting its focus from basic credential theft to sophisticated session hijacking and campaign management.
A set of four vulnerabilities in the OpenClaw platform, dubbed "Claw Chain," allows attackers to bypass sandbox protections, escalate privileges, and establish persistent access to compromised systems.
Adversaries are increasingly bypassing traditional security perimeters by compromising CI/CD infrastructure, turning trusted automation tools into vehicles for persistent, stealthy, and scalable attacks.
The JDownloader website was compromised for two days in May 2026, resulting in the distribution of malicious installers that deployed a remote access Trojan to Windows and Linux users.
Google has updated its Context-Aware Access feature to allow Workspace administrators to apply a single, default security policy across all SAML-based applications.
Microsoft has issued a warning regarding a high-severity zero-day vulnerability in on-premises Exchange Servers that allows for remote spoofing and potential arbitrary code execution.
Meta has simultaneously introduced enhanced privacy protections for AI chats on WhatsApp while completely removing end-to-end encryption for direct messages on Instagram.
Microsoft is introducing a new automated recovery feature that allows the company to remotely roll back faulty Windows drivers distributed through Windows Update, eliminating the need for manual user intervention.