Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,721 stories synthesized.
A critical flaw in the Cursor AI code editor allows attackers to execute arbitrary code on Windows systems simply by having users clone and open a specially crafted Git repository.
The ClickFix social engineering technique has transformed into a sophisticated, industrialized attack ecosystem, leveraging a Malware-as-a-Service model to bypass traditional defenses.
A new iteration of the TuxBot IoT botnet framework, dubbed TuxBot v3 Evolution, has been discovered incorporating Large Language Model (LLM) assistance in its development, leading to both enhanced capabilities and notable bugs.
A sophisticated new malware framework, OkoBot, is actively targeting cryptocurrency users through a complex, multi-stage infection chain involving SSH tunnels and over 20 malicious payloads.
AWS Security Hub now offers enhanced protection for AI workloads and monitoring for Microsoft Azure environments, aiming to centralize security findings across diverse cloud platforms.
The latest FreeRDP release, version 3.29.0, addresses 22 security advisories with a focus on hardening the codebase, particularly in media and channel handling.
A new macOS infostealer, CrashStealer, uses a notarized installer and mimics Apple's CrashReporter to trick users into revealing administrator passwords, enabling theft of sensitive data from Keychain and other applications.
Microsoft is halting the deployment of recent Windows 11 security updates to specific Dell devices because a bug is causing unexpected shutdowns and performance degradation.
A security researcher has demonstrated a bypass of the EU's age verification app using a Chrome extension powered by ClaudeAI, exploiting a design flaw that allows reusable 'over 18' attestations.
Google Chrome 150 and Mozilla Firefox 152 have received critical security updates to patch newly discovered vulnerabilities, with public exploit code available for some Firefox flaws.
State-sponsored Chinese hackers are leveraging large language models like Claude Code and DeepSeek-v4-pro to automate and enhance their cyberespionage operations, marking a significant shift in threat actor tactics.
Researchers have uncovered 11 malicious NuGet packages disguised as game cheats and tools, deploying a sophisticated two-stage attack to steal sensitive gamer data via Telegram bots.
A newly disclosed proof-of-concept exploit, LegacyHive, targets a Windows User Profile Service vulnerability, enabling standard users to load other users' registry hives and potentially escalate privileges.
A new open-source framework, SingGuard-NSFA, has been released to provide robust guardrails for agentic AI workflows, addressing operational threats with advanced risk taxonomy and efficient inference modes.
A directory traversal vulnerability in Microsoft PowerShell, tracked as CVE-2026-40400, allows remote code execution with user interaction.
NVIDIA's NVTabular framework is susceptible to remote code execution due to a deserialization vulnerability in its pickle file parsing, assigned CVE-2026-24237.
A local privilege escalation vulnerability in the Linux Kernel's vmwgfx component, ZDI-26-443, allows attackers with low-privileged code execution to gain elevated permissions.
A heap-based buffer overflow in X.Org Server, CVE-2026-56003, permits local privilege escalation after initial low-privileged code execution.
A local privilege escalation vulnerability (CVE-2026-50311) in Microsoft Windows ServerManager allows attackers with low-privileged code execution to gain SYSTEM privileges.
A local privilege escalation vulnerability in Microsoft Hyper-V's netvsc component, tracked as CVE-2026-54129, allows attackers with prior low-privileged code execution within a virtual machine to gain kernel-level privileges.
A critical integer underflow vulnerability in Autel MaxiCharger AC Elite Home EV chargers allows unauthenticated attackers to execute arbitrary code remotely.
A local privilege escalation vulnerability (CVE-2026-13268) in G DATA Total Security's backup service allows attackers with initial code execution to gain SYSTEM privileges.
A local privilege escalation vulnerability in Adobe Creative Cloud Desktop Application, ZDI-26-420, allows attackers with initial code execution to gain SYSTEM privileges.
A critical heap-based buffer overflow in dnsmasq, CVE-2026-2291, allows unauthenticated remote attackers to execute arbitrary code.