Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,239 stories synthesized.
A sophisticated threat campaign dubbed 'Phantom Deal' is impersonating executives and advisors to trick midlevel employees in large enterprises into authorizing fraudulent financial transfers through elaborate merger and acquisition scams.
Autonomous AI agents are creating new identity security risks by combining their own identities with delegated user credentials, necessitating enhanced enterprise governance.
Key findings • 25 vulnerabilities disclosed for Elastic Kibana between Sept 1-3, 2026, primarily authorization and resource management flaws. • High severity flaws include unauthorized config…
Wordfence Intelligence's latest weekly report details 246 vulnerabilities across 174 WordPress plugins and 5 themes disclosed between August 24-30, 2026, with several critical flaws.
Key findings • Ten MongoDB vulnerabilities disclosed on September 3, 2026, affecting drivers and extensions. • Multiple BSON parsing and memory handling flaws found across C++, PHP, and C dri…
A new ThreatsDay report from The Hacker News outlines prevalent cyberattack vectors including sophisticated CEO phishing kits, compromised Dropbox accounts, and exploitable OAuth authorization flaws.
Cisco Talos highlights the 'AI safety penalty,' where advanced AI models' guardrails hinder legitimate defensive tasks, creating an asymmetry that benefits attackers.
U.S. authorities have seized cryptocurrency funds tied to Hamas, while separate incidents highlight exploitation of blockchain networks and software vulnerabilities.
Attackers are exploiting leaked AWS IAM keys to hijack access to expensive AI models, a technique dubbed LLMjacking, leading to significant unauthorized inference charges for victim organizations.
Link11's H1 2026 European Cyber Report indicates a 42% decrease in DDoS attack volume, but new records in intensity driven by super-botnets and compromised cloud servers.
A critical vulnerability in OPCFoundation's OPC UA LocalDiscoveryServer (LDS) allows local attackers to execute arbitrary commands with high privileges during installation.
A critical CRLF injection vulnerability in IXON VPN Client versions prior to 1.4.7 allows unauthenticated remote attackers to execute commands with root or SYSTEM privileges.
CISA has issued an advisory for Rockwell Automation's ControlFLASH software, detailing a vulnerability that could allow attackers to execute arbitrary code.
CISA has alerted users to two vulnerabilities in Rockwell Automation's ArmorStart LT, versions prior to v2.002, that could allow for script injection and denial-of-service conditions.
A critical vulnerability in Rockwell Automation's 1756-ENBT module could allow attackers to crash the device, requiring a manual restart.
A critical vulnerability in Inductive Automation's Ignition platform, CVE-2026-77393, allows any authenticated user to create projects due to insecure default permissions.
A severe stack-based buffer overflow vulnerability in Pyramid Solutions' NetStaX EtherNet/IP Stack could allow attackers to crash devices or achieve remote code execution.
CISA has issued an advisory detailing three critical vulnerabilities in Tycon Systems TPDIN-Monitor-WEB3 devices, potentially leading to man-in-the-middle attacks and credential theft.
Attackers are repurposing AI-era ASCII smuggling techniques to bypass traditional email filters in high-volume phishing campaigns, Microsoft reports.
Capsule Security has released its 'AI Circuit Breaker,' a real-time system designed to detect and halt malicious behavior from autonomous AI agents before they can cause damage.
OpenAI is actively investigating a significant increase in errors impacting its popular ChatGPT and Codex services, leading to degraded performance and potential disruptions for users and developers.
CISA and the G7 Cyber Security Working Group have issued a joint call to action, urging governments and organizations worldwide to accelerate the transition to post-quantum cryptography (PQC) to defend against future quantum computing threats.
Cybercriminals are using a sophisticated social engineering campaign dubbed 'Phantom Deal' to trick employees into initiating fraudulent wire transfers for non-existent acquisitions, bypassing traditional security measures.
Continuous Threat Exposure Management (CTEM) is gaining traction as a strategic approach to tackle the escalating volume of CVEs and the limitations of traditional vulnerability management.