Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,559 stories synthesized.
A cyber espionage campaign, dubbed CL-UNK-1211, has been targeting Linux infrastructure of government entities and state-affiliated organizations, employing the SysGoRAT malware and potentially AI-generated scripts.
Hackers targeted refrigeration systems at multiple Swedish supermarkets, raising freezer temperatures to 55°C and spoiling vast amounts of food.
Penetration testing companies are grappling with the rapid integration of AI tools, balancing efficiency gains against critical client data confidentiality concerns.
Key findings • 20 malicious npm packages were simultaneously disclosed on November 2, 2026. • All advisories were published at the exact same instant (09:44 UTC). • A significant portion …
WS Audiology, the parent company of hearing aid brands Widex and Signia, is investigating a cybersecurity incident that disrupted its IT systems and affected digital services for users and professionals.
Reddit is moving towards a primarily logged-in experience to prevent unauthorized AI data scraping and enhance user personalization.
A dark web forum post alleges the theft of 30GB of data from Parle Agro, the maker of Frooti and Appy Fizz, but the claim remains unverified with no evidence of a breach or data contents.
New probes targeting a critical BeyondTrust Remote Support vulnerability suggest attackers may be preparing for widespread exploitation, prompting urgent patching advisories.
A busy week in cybersecurity saw millions targeted by malicious browser extensions, a record-breaking crypto heist at Binance, and a significant data leak affecting Homeland Security workers.
Kaspersky researchers have identified a campaign using the open-source CyberStrikeAI framework to automate complex post-exploitation activities, marking a significant evolution in AI's role in cyberattacks.
Key findings • 19 malicious npm packages were disclosed within a 26-minute window on November 2, 2026. • Many packages were published just hours before their disclosure, indicating a rapid de…
KloudStax CTO Vinay Thakker details essential security measures for AI coding agents, emphasizing granular identity, credential management, and network access controls to mitigate risks.
Byoky, a new open-source wallet, offers a secure solution for managing AI API keys across various platforms, encrypting them locally and managing access through session tokens.
A deserialization vulnerability in Microsoft Qlib's RestrictedUnpickler component allows remote attackers to execute arbitrary code with user interaction, carrying a CVSS score of 7.8.
A critical pre-authentication RCE vulnerability in TightVNC Viewer versions prior to 2.8.90 allows attackers to execute arbitrary code by sending specially crafted screen data.
BTCPay Server has issued an urgent warning after attackers drained Bitcoin hot wallets on its servers, instructing operators to shut down installations immediately.
Mandiant reports on LLMJacking, a new attack trend where threat actors compromise cloud and model resources, leading to significant fraudulent cloud bills for victims.
Google and international partners have successfully dismantled the XCPE backdoor and botnet, a financially motivated cybercrime operation run by OEM Videostrong Technology Co.
A new feature in the onedump.py tool allows for the extraction of embedded files from OneNote documents and their output as JSON, facilitating batch processing and analysis.
A severe flaw in Canonical's LXD and MicroCloud, rated CVSS 10.0, enables attackers to impersonate trusted clients by exploiting the mutual TLS authentication process.
October saw a significant surge in cyberattacks, impacting major platforms like Binance and essential software like PHP and Node.js, alongside a supply chain compromise in LiteLLM.
The VOLTA-AUTODOXER infostealer now employs an AI integration layer to analyze and prioritize victims for monetization, marking a significant evolution in cybercrime tactics.
Ahmad Umar Agha, a key figure in Syrian Electronic Army-linked cyber operations, has been sentenced to 42 months in prison in the US after evading authorities for over a decade.
The YARA-X project has released version 1.22.1, focusing on bug fixes and signaling a clear shift from the traditional YARA tool.