Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,753 stories synthesized.
A newly disclosed Linux kernel vulnerability, CVE-2026-46300, allows local attackers to escalate privileges to root by exploiting a memory write primitive in the XFRM ESP-in-TCP subsystem.
A new Linux kernel local privilege escalation vulnerability, CVE-2026-46300 (Fragnesia), allows unprivileged local users to gain root by writing arbitrary bytes into the kernel page cache of read-only files.
Independent testing by XBOW confirms Anthropic's Mythos AI model is a powerful vulnerability discovery tool when given both source code and a live environment, but it is expensive, less effective with code alone, and outperformed by cheaper models on web tasks.
Chinese state-sponsored groups Salt Typhoon and Twill Typhoon have been observed in recent campaigns targeting energy, telecom, and financial entities with updated backdoors and a new modular RAT framework.
The Nitrogen ransomware gang has claimed responsibility for a cyberattack on Foxconn's North American facilities, allegedly exfiltrating over 11 million files including sensitive client data from Apple, Nvidia, and Google.
Threat actors began exploiting a critical authentication bypass vulnerability in the open-source PraisonAI framework less than four hours after its public advisory, highlighting the shrinking window for patching AI infrastructure.
North Korean APT group Kimsuky has expanded its arsenal with new PebbleDash-based malware variants and adopted legitimate tools like VSCode Tunneling and Cloudflare Quick Tunnels to target defense and government sectors in South Korea, Brazil, and Germany.
F5 has released patches for over 50 vulnerabilities across its BIG-IP, BIG-IQ, and NGINX products, including 19 high-severity flaws, with the most critical being a heap buffer overflow in NGINX's rewrite module.
Dell has confirmed that a faulty update to its SupportAssist Remediation service is causing blue-screen-of-death crashes on Windows 10 and 11 systems, advising users to uninstall the service as a temporary workaround.
A newly disclosed Linux kernel privilege escalation vulnerability dubbed Fragnesia (CVE-2026-46300) allows unprivileged attackers to reliably gain root access by corrupting page cache memory, with public exploit code already available.
Attackers began probing CVE-2026-44338, an authentication bypass in PraisonAI, less than four hours after public disclosure, highlighting the shrinking window for defenders to patch.
An anonymous researcher has disclosed two new Windows zero-days — a BitLocker bypass affecting Windows 11 and Server 2022/2025, and a privilege escalation in the CTFMON framework — just weeks after publishing three Microsoft Defender vulnerabilities.
ESET reports new FrostyNeighbor (Ghostwriter/UNC1151) cyberespionage activity since March 2026, targeting Ukrainian government organizations with server-side victim validation and updated PicassoLoader variants.
Broadcom has released a security update for VMware Fusion to fix CVE-2026-41702, a high-severity TOCTOU flaw that lets local non-administrative users escalate privileges to root.
A high-severity Linux kernel privilege escalation vulnerability, CVE-2026-46300, dubbed Fragnesia, allows unprivileged local attackers to gain root access via a logic bug in the XFRM ESP-in-TCP subsystem.
A disgruntled security researcher publicly disclosed two Windows zero-days: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege escalation to System, with no patches available.
A new Linux kernel local privilege escalation vulnerability tracked as CVE-2026-46300 and named Fragnesia allows unprivileged attackers to corrupt the page cache of read-only files to gain root access without requiring a race condition.
A phishing email evaded Outlook's Junk folder link preview by using an HREF with no URI scheme, hiding the destination URL while the link remained clickable in normal view.
A critical heap buffer overflow in NGINX is under active exploitation, prompting urgent warnings for administrators to patch the affected rewrite module.
Researchers have released VectorSmuggle, a framework demonstrating how attackers can hide data inside vector embeddings used in enterprise RAG pipelines, evading existing DLP tools.
Palo Alto Networks, Microsoft, and Mozilla are using frontier AI models to find vulnerabilities at unprecedented scale, resulting in a surge of patches that security experts warn will overwhelm administrators.
AWS fixed an authorization bypass in Amazon Quick that let denied users query the AI Chat Agent via API, but classified the severity as 'none' and issued no advisory, sparking criticism over its response.
Pharmaceutical manufacturer West Pharmaceutical Services has disclosed a cyberattack that resulted in data exfiltration and system encryption, disrupting global operations.
Iran-linked MuddyWater (Seedworm) conducted a broad cyber-espionage campaign targeting at least nine organizations, including a major South Korean electronics manufacturer where attackers lurked for a week in February 2026.