Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,736 stories synthesized.
CISA has issued an advisory detailing four vulnerabilities in Subnet Solutions PowerSYSTEM Center, including an incorrect authorization flaw that could expose sensitive data in critical manufacturing and energy environments.
CISA has disclosed a critical stack buffer overflow vulnerability in ABB AC500 V3 programmable logic controllers that can be exploited remotely without authentication, potentially leading to remote code execution.
Adobe released patches for 52 vulnerabilities across 10 products on Tuesday, including two critical-severity bugs in Adobe Connect that could allow arbitrary code execution and privilege escalation.
A critical use-after-free vulnerability in Exim's BDAT message body parsing, affecting only GnuTLS builds, allows unauthenticated attackers to achieve remote code execution with a CVSS score of 9.8.
Attackers are using sponsored Google search results and shared Claude chats to deliver a ClickFix social-engineering attack targeting macOS users, leading to credential theft.
A critical authentication bypass vulnerability in cPanel & WHM is being actively exploited by the threat group Mr_Rot13 to deploy web shells, steal credentials, and install remote-control trojans.
Microsoft Incident Response reveals a campaign where attackers compromised a third-party IT services provider and abused legitimate HPE Operations Agent to deploy scripts and steal credentials without triggering alerts.
RubyGems has temporarily paused new account registrations after a coordinated attack uploaded more than 500 malicious packages to the Ruby package registry, prompting an emergency response from Mend.io and Ruby Central.
BWH Hotels disclosed that attackers accessed a web application containing guest reservation data for over six months, from October 2025 to April 2026, exposing names, emails, and reservation details.
Instructure, the company behind the Canvas learning platform, confirmed it paid an undisclosed ransom to the ShinyHunters extortion group to recover 3.65 TB of stolen data affecting 275 million records across 8,809 institutions.
Attackers can hijack AI model outputs by tampering with a single tokenizer.json file, enabling man-in-the-middle attacks that expose URLs, API parameters, and credentials to attacker infrastructure.
A new malware campaign dubbed CRPx0 is using a fake OnlyFans account lure to infect Windows and macOS systems with a multi-stage payload that performs cryptocurrency theft, data exfiltration, and ransomware encryption.
Education tech giant Instructure paid a ransom to the ShinyHunters group after two breaches of its Canvas platform, while the House Homeland Security Committee announced an investigation into the company's incident response.
Cloudflare disclosed a bug in its open-source QUIC implementation quiche where the CUBIC congestion controller's window became permanently stuck at its minimum, causing ~60% of integration tests to fail.
Pennsylvania pharma giant West Pharmaceutical Services suffered a ransomware attack on May 4, 2026, forcing a global operational shutdown and data exfiltration.
A new variant of the TrickMo Android banking trojan leverages The Open Network (TON) blockchain for stealthy command-and-control and turns infected devices into SOCKS5 proxies and network pivots.
Apple released 11 security advisories covering iOS/iPadOS 26.5, macOS Tahoe 26.5, and older macOS versions, patching over 60 CVEs in iOS and nearly 80 in macOS, including 20 WebKit flaws.
JetBrains has released a fix for CVE-2026-44413, a high-severity privilege escalation vulnerability in TeamCity On-Premises that could expose REST API endpoints and leak sensitive credentials.
SAP released 15 security notes for May 2026, fixing critical code injection vulnerabilities in S/4HANA and Commerce that could allow attackers to leak data and execute arbitrary code.
Attackers are combining ClickFix social engineering with the decade-old open-source PySoxy SOCKS5 proxy to maintain persistent access on victims' machines without malware, even after initial access is blocked.
A test of Anthropic's Claude Mythos AI model on curl's 178,000 lines of code found only one low-severity vulnerability, sparking debate over the model's true capabilities versus marketing hype.
A newly disclosed Linux kernel local privilege escalation vulnerability, dubbed copy.fail, allows unprivileged attackers to gain root access on virtually all major distributions.
SAP's May 2026 security updates address 15 vulnerabilities, including two critical flaws enabling unauthenticated remote code execution in Commerce Cloud and SQL injection in S/4HANA.
Trail of Bits has released gosentry, a fuzzing-oriented fork of the Go toolchain that replaces the native fuzzing engine with LibAFL, adding support for grammar-based fuzzing, struct-aware fuzzing, and detection of bug classes like integer overflows and goroutine leaks.