Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,633 stories synthesized.
Security researchers have issued warnings regarding a new NGINX vulnerability and a separate zero-day exploit targeting Cisco systems, prompting calls for heightened vigilance across enterprise networks.
Key findings • CISA added CVE-2026-45321 to the KEV catalog on May 27, 2026 • The TanStack vulnerability is confirmed actively exploited in the wild • Exploitation is linked to ransomware…
CrowdStrike has unveiled the technical framework behind its "Automated Leads" AI, which identifies subtle, low-fidelity indicators of compromise by aggregating entity-based scores to detect malicious activity that traditional alerts miss.
General Motors has agreed to a record $12.75 million settlement with California regulators over allegations that it illegally sold the location and driving data of its customers to third-party brokers without proper consent.
Apple has issued a sweeping set of security updates addressing 84 vulnerabilities across its entire product lineup, including critical kernel and privilege escalation flaws.
A new proof-of-concept tool called GhostLock demonstrates how attackers can abuse the Windows 'CreateFileW' API to perform denial-of-service attacks by locking local and network files.
Unit 42 reveals how attackers exploit Active Directory Certificate Services through misconfigured templates and shadow credentials, enabling privilege escalation and persistence without zero-day vulnerabilities.
A new, sophisticated malware campaign is targeting developers by using malicious search advertisements and dynamic HTML rendering to steal sensitive browser data, including cookies and passwords, from Chromium-based browsers.
The state of Texas is suing Netflix for allegedly operating a "surveillance machinery" that collects and shares sensitive user data with advertisers without proper consent.
Business Email Compromise and the unauthorized use of generative AI are increasingly bypassing traditional security controls, forcing organizations to rely on human-centric defenses to mitigate these sophisticated, malware-less threats.
Apple has introduced end-to-end encryption for cross-platform RCS messaging in its iOS 26.5 update, providing enhanced privacy for communications between iPhone and Android users.
Frame Security has emerged from stealth with $50 million in funding to deploy an AI-powered human risk management platform that uses deepfake simulations and real-time behavioral analysis to train employees.
The FCC has extended the deadline for a ban on software and firmware updates for foreign-made routers and drones to January 2029, citing the need to maintain security for millions of currently deployed devices.
Zimperium has introduced a new Mobile App Response Agent designed to automate the investigation of mobile security threats and reduce incident response times for SOC and fraud teams.
Japanese Prime Minister Sanae Takaichi has ordered a national cybersecurity review in response to the emergence of Anthropic’s "Mythos" AI model, even as industry experts dismiss the tool's capabilities as largely marketing-driven.
Red Hat and Voyager Technologies have successfully deployed Red Hat Enterprise Linux 10.1 and containerized workloads to the International Space Station, establishing a new foundation for cloud-native computing in orbit.
Google researchers have uncovered the first known instance of a zero-day exploit developed with the help of AI, used by threat actors to facilitate a mass 2FA bypass campaign against a popular web administration tool.
The U.S. House Committee on Homeland Security is investigating a massive breach of the Canvas learning management platform after the ShinyHunters extortion group exploited XSS vulnerabilities to steal millions of student records and disrupt final exams.
The UK’s Information Commissioner’s Office has fined South Staffordshire Water’s parent company nearly £1 million for security failures that allowed hackers to remain undetected in its network for 20 months.
A new variant of the TrickMo Android banking trojan TrickMo routes its command-and-control traffic through The Open Network (TON) Blockchain, making domain takedowns ineffective.
A new, highly reliable privilege escalation exploit chain dubbed "Dirty Frag" is targeting the Linux kernel, affecting major enterprise distributions and showing early signs of in-the-wild exploitation.
BWH Hotels has confirmed that a web application breach exposed six months of guest reservation data, though the company maintains that no financial information was compromised.
Two chained Linux kernel vulnerabilities, collectively dubbed 'Dirty Frag,' allow local privilege escalation to root on all major distributions after the disclosure embargo was broken.
A recent study by the SANS Internet Storm Center reveals that 99.7% of traffic on a monitored website originated from automated bots, underscoring the critical role of CAPTCHA technology in modern web defense.