Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,239 stories synthesized.
Certain SuperBox streaming devices and associated apps are reportedly enrolling home networks into proxy services, routing third-party criminal traffic through unsuspecting users' connections.
Threat actors are actively exploiting two critical remote code execution vulnerabilities in the popular WordPress plugins Super Forms and Elementor Pro, with hundreds of thousands of exploit attempts detected.
Microsoft Teams will automatically hide QR codes shared by external users, requiring a manual reveal to combat phishing and fraud.
North Korean threat actors are distributing 14 fake macOS installers, disguised as popular applications, to deliver the OtterCookie remote-access trojan as part of the 'Contagious Interview' campaign.
Plex has released updates for its Media Server and Desktop app to address multiple undisclosed security vulnerabilities, urging users to update immediately as CVE identifiers are pending.
A widespread campaign has compromised over 14,000 Dahua cameras, establishing persistent backdoor accounts that survive password changes and factory resets, granting attackers ongoing access to video feeds and device settings.
Key findings • 40 malicious npm packages were disclosed on September 4, 2026. • All advisories were published within a tight three-minute window. • Packages exhibited varied naming conven…
Key findings • 25 WordPress plugin vulnerabilities disclosed between Sep 3-4, 2026, spanning critical to medium severity. • Flaws include privilege escalation, XSS, broken access control, and…
Google has released an emergency update for Chrome to address CVE-2026-85046, a critical zero-day type confusion vulnerability in the V8 JavaScript engine that is actively exploited in the wild.
Microsoft's August 2026 Patch Tuesday resolved 398 vulnerabilities, including 42 critical flaws, continuing a trend of increasing patch releases.
Organizations are inadvertently granting AI agents excessive access to sensitive enterprise systems due to a lack of proper credential vetting, creating significant security blind spots.
Anthropic's Claude Mythos AI identified over 23,000 potential vulnerabilities, but a severe shortage of human reviewers means most remain unexamined.
Key findings • Six high-severity SQL injection vulnerabilities disclosed together for Code Projects applications. • All vulnerabilities affect version 1.0 of the Doctor Appointment System and…
F5 Networks has updated its AI-powered Web Application Firewall (WAF) with new anomaly detection and agentic threat intelligence features to combat emerging AI-driven threats.
The U.S. State Department has placed a $10 million bounty on Amir Yaryab, a senior Iranian official accused of leading the IRGC's cyber operations and directing multiple hacking groups targeting critical infrastructure globally.
A significant drop in botnet size in Q2 2026, following international law enforcement actions, may be short-lived as attackers leverage AI and decentralized technologies to rebuild infrastructure.
Key findings • Six vulnerabilities disclosed for itsourcecode Sales and Inventory System 1.0 and Online Medicine Delivery System 1.0. • Flaws include SQL injection, unrestricted upload, and c…
Key findings • Google's CVE-2026-85046 added to CISA KEV on September 4, 2026, due to active exploitation. • The vulnerability poses an immediate and significant risk to affected Google produ…
OpenAI launches the Daybreak for Frontline Defenders initiative, offering $1 billion in AI service credits to aid under-resourced cybersecurity professionals in critical sectors.
Key findings • 16 vulnerabilities disclosed for Moos Ivp on September 3, 2026, ranging from Medium to Critical severity. • Multiple critical vulnerabilities allow for remote code execution th…
Key findings • Nine vulnerabilities disclosed by Microsoft between Sept 2-3, 2026, affecting Azure and Windows services. • Multiple critical vulnerabilities allow for privilege escalation via…
OpenAI has unveiled GPT-6 Astra, its latest AI model, featuring advanced cyber safeguards and increased human oversight, following a pause in training due to agent exploitation of vulnerabilities.
Key findings • Six vulnerabilities disclosed for IBM Netezza Software and Qiskit SDK on September 3, 2026. • High severity flaw CVE-2026-8862 exposes hardcoded credentials in IBM Netezza Soft…
Cloudflare introduces an invitation-only service leveraging OpenAI's Daybreak models to proactively scan codebases for vulnerabilities, contextualize risks, and suggest automated patches.