Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,239 stories synthesized.
Attackers are exploiting legitimate ScreenConnect installations to spread malware in a worm-like fashion across Windows systems, leveraging social engineering and the tool's file-transfer capabilities.
Researcher Chaotic Eclipse has revealed a zero-day privilege escalation vulnerability in Avast Antivirus's sandbox component, with a public proof-of-concept demonstrating SYSTEM-level access.
Researchers have developed SweepLED, a low-cost smartphone accessory that uses LEDs and computer vision to detect hidden cameras in hotel rooms and rentals, achieving 93.9% accuracy.
The resilient Outsider phishing kit has resurfaced with over 700 new pages, demonstrating a rapid recovery and adaptation following a disruption by Google.
HP Easy Start for macOS contains three critical vulnerabilities allowing privilege escalation, impacting installations and potentially exposing sensitive data.
Key findings • Three vulnerabilities in Siyuan Note disclosed together, affecting versions prior to v3.8.2. • Critical stored XSS (CVE-2026-84803) due to incomplete extension blocklist in ass…
Key findings • Nine vulnerabilities in N8n disclosed on September 3, 2026, patched in versions 1.123.73, 2.35.4, and 2.36.2. • High-severity flaws include RCE in the Git node (CVE-2026-85168)…
Key findings • 25 Linux kernel vulnerabilities disclosed on September 3, 2026, affecting diverse subsystems. • Fixes address SELinux, input devices, power management, graphics, and networking…
Key findings • Four vulnerabilities disclosed in Joomla's J2Store extension on September 3, 2026. • Vulnerabilities include missing authorization, cart tampering, XSS, and PayPal callback for…
Cybercriminals have breached the popular fishing app Fishbrain, stealing user data including password hashes and salts, potentially exposing millions of anglers' credentials.
Attackers are embedding QR codes directly into email markup, circumventing security tools that rely on image file inspection and redirecting users to phishing sites.
AIR Security has emerged from stealth with $50 Million in funding to address the growing security risks associated with AI agents and their integrations.
Thomson Reuters has disclosed a cyber incident impacting its C-Track court management software, potentially exposing sensitive court records across both Canadian and US jurisdictions.
Two critical vulnerabilities in VMware Workstation and Fusion, CVE-2026-59346 and CVE-2026-59347, allow attackers with local VM admin privileges to execute code on the host system.
Microsoft Teams and the new Outlook for Windows are crashing on ARM-based devices following the August 2026 security updates, specifically KB5121003.
Cybercriminals are increasingly abusing the legitimate Node.js runtime to execute malware and evade security defenses, a technique observed since February 2026.
The Shai-Hulud infostealer worm has significantly broadened its scope, now targeting 469 credential locations across developer environments, CI/CD tools, cloud configurations, and AI tools, up from 189.
Cisco has released patches for critical vulnerabilities in its IOS XR and Nexus network devices, while also issuing a warning about unpatched flaws in its Secure Email offering.
Two distinct cyberattack campaigns targeting organizations in Latin America are utilizing artificial intelligence to enhance their data exfiltration capabilities, according to a new report.
The Gentlemen ransomware operation, also known as GOLD SHERIFF, is executing swift network intrusions, disabling security defenses and backups in under 24 hours before deploying ransomware.
California's new Digital Age Assurance Act will require Windows, macOS, iOS, and Android to collect user age brackets starting January 1, 2027, aiming to protect minors.
Traditional VPNs are a major security vulnerability for Operational Technology (OT) networks, granting overly broad access that traditional IT security models fail to address, according to a new analysis.
A critical vulnerability (CVE-2026-20212) in Cisco Nexus 9000 Series Switches with Silicon One ASICs allows unauthenticated remote attackers to execute arbitrary code with root privileges.
A former employee, whose system access was not revoked post-termination, caused significant financial and operational damage by deleting files and corrupting a database.