Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,755 stories synthesized.
Akamai Technologies has announced a $205 million agreement to acquire browser security firm LayerX to bolster its zero trust portfolio with AI usage control capabilities.
California-based lender American Lending Center has confirmed that a ransomware attack detected in July 2025 resulted in the theft of sensitive personal data belonging to 123,000 individuals.
Security experts are warning that on-camera age-verification systems are fundamentally flawed and easily bypassed, raising questions about both their technical reliability and their broader implications for user privacy.
New research reveals that 84% of high-severity security incidents now involve the abuse of legitimate administrative tools rather than traditional malware, prompting a shift toward proactive attack surface reduction.
A thriving underground marketplace on Telegram is providing thieves with sophisticated phishing tools and services to bypass Apple’s Activation Lock, turning stolen iPhones into profitable resale commodities.
The Gremlin stealer has evolved into a sophisticated, modular threat that uses advanced obfuscation and new financial-theft modules to evade detection and hijack user sessions.
OpenAI has been forced to rotate code-signing certificates and update several desktop applications after a supply chain attack on the TanStack library led to the compromise of two employee devices and the exfiltration of internal credentials.
Rocky Linux has introduced an opt-in Security Repository that allows the distribution to deliver urgent security patches ahead of upstream releases when public exploits are available.
Microsoft has confirmed that a zero-day cross-site scripting vulnerability in on-premises Exchange Server is being actively exploited in the wild, prompting an immediate addition to CISA's Known Exploited Vulnerabilities catalog.
Opportunistic scammers are increasingly leveraging global geopolitical tensions to fuel a surge in social engineering attacks, ranging from fake charities to sophisticated infostealer campaigns.
The UK's Science, Innovation and Technology Committee is calling for stricter online safety laws, arguing that social media platforms should be regulated with the same scrutiny as hazardous consumer products to better protect young users.
Security researchers have identified a new, China-linked malware implant called TencShell that uses customized open-source tooling and mimics legitimate web traffic to compromise global manufacturing targets.
Google has released Chrome 148 to address 79 vulnerabilities, including 14 critical-severity bugs that could potentially lead to remote code execution.
Financial services organizations are facing a sharp increase in cyberattacks, with hands-on-keyboard intrusions rising by 43% globally as eCrime and nation-state actors intensify their campaigns.
Security researchers have warned that the adoption of new, modular malware libraries is forcing a shift in how defenders must approach threat detection to counter increasingly evasive payloads.
Cisco has patched a critical authentication bypass zero-day in its Catalyst SD-WAN software that is currently being exploited by a sophisticated threat actor to gain administrative control.
Microsoft is urging administrators to secure on-premises Exchange Servers against a critical spoofing vulnerability that is currently being exploited in the wild.
New research from the Vector Institute warns that traditional deepfake detection tools are failing in real-world environments because they rely on outdated forensic assumptions that modern generative models have already surpassed.
A new study reveals that "zombie linkages"—trust records tied to expired or transferred domains—persist across Web PKI, software repositories, and blockchain naming systems, creating long-term security risks.
Toni de la Fuente, founder of Prowler, argues that artificial intelligence is acting as a force multiplier for cloud security tools rather than a replacement for them.
Organizations are pivoting from rapid AI adoption to a focus on measurable ROI and increased human oversight as 2026 data reveals widespread executive skepticism regarding AI's current business value.
Security researchers have identified a series of critical vulnerabilities, including a new flaw in NGINX and a zero-day exploit affecting Cisco systems, alongside a concerning bug in Outlook's link preview feature.
Several cybersecurity vendors have announced new product updates this week, focusing on AI governance, cloud security posture management, and physical data protection.
CISA has mandated that all federal agencies patch a critical, actively exploited authentication bypass vulnerability in Cisco Catalyst SD-WAN systems by May 17, 2026.