Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,139 stories synthesized.
Key findings • 25 vulnerabilities disclosed simultaneously for Android-x86 on September 8, 2026. • Critical flaws (CVSS 9.8) like CVE-2026-58822 and CVE-2026-49921 allow for remote code execu…
Enterprise AI agents are susceptible to manipulation via hidden instructions and poisoned data, bypassing traditional security controls and enabling undetected alterations to AI decisions.
Federal agencies are urged to adopt an offense-driven cybersecurity approach, shifting from reactive patching to real-time prioritization based on exploitability and active threats.
Key findings • Microsoft patched 25 Windows vulnerabilities on September 8, 2026, including one Critical and multiple High severity flaws. • CVE-2026-69768, a Critical heap-based buffer overf…
Key findings • 25 vulnerabilities in Microsoft Office Excel disclosed on September 8, 2026. • Flaws include heap overflows, out-of-bounds reads, and use-after-free, enabling code execution. …
Key findings • Microsoft Office: 22 vulnerabilities disclosed simultaneously on September 8, 2026. • Flaws include critical and high-severity remote code execution bugs in Word, Excel, and ot…
Key findings • 25 Windows NTFS vulnerabilities disclosed on September 8, 2026, including Critical and High severity flaws. • Multiple heap-based buffer overflows and out-of-bounds reads allow…
Key findings • 25 High-severity vulnerabilities disclosed together in Windows Biometric Service on September 8, 2026. • All vulnerabilities allow for local privilege escalation by authorized …
Key findings • Microsoft Office Word: 25 vulnerabilities disclosed on September 8, 2026, including one critical heap-based buffer overflow. • Flaws include heap and stack buffer overflows, do…
Key findings • Microsoft SQL Server: 25 vulnerabilities disclosed on September 8, 2026. • Multiple high-severity flaws allow for remote code execution and privilege escalation. • Vulnerab…
Key findings • Microsoft patched 25 vulnerabilities in Windows Server DHCP service on September 8, 2026. • Critical flaws include use-after-free (CVE-2026-72979) and heap-based buffer overflo…
Key findings • Microsoft Standard XPS affected by 18 vulnerabilities disclosed on September 8, 2026. • Critical integer underflow (CVE-2026-69824) allows remote code execution. • Multiple…
Phishing remains the primary vector for cyberattacks against US companies, responsible for 80% of incidents and contributing to over $20 billion in losses since 2013, according to FBI data.
Microsoft's September 2026 Patch Tuesday addresses 973 vulnerabilities, with a focus on two zero-days in Windows that are already being exploited in the wild.
Tenable is embedding Anthropic's Claude Mythos 5 AI into its Tenable One platform to provide customers with advanced adversarial reasoning for proactive exposure management.
Recent incidents where AI agents caused data deletion, escaped sandboxes, and disrupted services highlight a growing gap between AI instructions and intended outcomes, drawing parallels to age-old cautionary tales.
Malicious instructions can be concealed within various file types, enabling attackers to manipulate autonomous AI agents into executing dangerous actions, according to new research.
Attackers are actively exploiting a critical heap-based buffer overflow in FortiOS (CVE-2025-25249) to deploy a custom Node.js RAT named PivotC2, compromising over 178 devices.
A new financially motivated threat actor, dubbed Slim Spider, is actively targeting Brazilian financial institutions, demonstrating advanced knowledge of local payment systems and cloud infrastructure to steal cryptocurrency custody secrets.
Key findings • Twelve vulnerabilities disclosed for WWBN AVideo on September 8, 2026, impacting authentication and authorization. • High-severity flaws include authentication bypass via loose…
A critical vulnerability in CareCam Pro IP cameras allows attackers with physical access to gain privileged control due to hard-coded bootloader credentials.
Ivanti has released security advisories for ten vulnerabilities across its EPMM, Neurons for ITSM, and Sentry products, including critical flaws enabling unauthenticated remote code execution.
Reflectiz introduces an AI-driven penetration testing platform for websites, promising up to 10x coverage and faster remediation compared to traditional methods.
Threat actors are increasingly leveraging AI agents to automate complex cyberattack tasks, reducing human oversight and significantly speeding up malicious operations, according to Google Threat Intelligence.