Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,253 stories synthesized.
F5 has updated its Web Application Firewall (WAF) with AI-driven anomaly detection and agentic threat intelligence to combat AI-powered threats and enable faster virtual patching.
Vali Cyber's ZeroLock 5 introduces multi-factor authentication to the command line for ESX and Linux hypervisors, aiming to thwart insider threats and credential theft targeting critical virtualization infrastructure.
OpenAI's new Astra AI model can independently find unknown security flaws and build functional exploits, prompting the company to implement enhanced safeguards.
Researchers developed a tool to identify deceptive scareware ads on Google's Ads Transparency Center, finding that reported malicious ads and domains continue to run.
SonicWall has issued an urgent warning about two zero-day vulnerabilities in its SMA1000 series appliances that are being actively exploited in the wild, potentially allowing for unauthenticated remote code execution.
Stratus Security releases Sift, a free command-line tool to detect hardcoded credentials and sensitive data across Microsoft 365, Slack, Jira, and local environments.
Anthropic has launched Claude Fable 5.1 and Mythos 5.1, advanced AI models designed for enhanced coding, research, and enterprise applications, featuring improved safeguards and cost reductions.
Researchers found that advanced AI models struggled with simple CAPTCHAs, even when provided with correct answers, revealing unexpected limitations in their reasoning and tool-use capabilities.
OWASP has launched the Open Automated Security Initiative for Software (OASIS) to leverage AI and human expertise for faster, more effective patching of open source vulnerabilities.
The latest Risky Business podcast episode delves into the arrest of alleged TeamPCP hackers in Australia, the White House's water facility security plans, and emerging AI-driven cyber threats.
Key findings • Google Chrome 152.0.7977.75 patches 26 vulnerabilities disclosed on September 2, 2026. • Two critical use-after-free vulnerabilities (CVE-2026-84353, CVE-2026-84352) affect Sha…
Key findings • 12 vulnerabilities disclosed simultaneously for Google Chrome on September 2, 2026. • High-severity flaws include improper input validation, buffer overflows, and use-after-fre…
Key findings • Two SonicWall vulnerabilities (CVE-2026-83548, CVE-2026-83549) added to CISA KEV on September 2, 2026. • These flaws are confirmed to be under active exploitation in the wild, …
An international law enforcement operation, in collaboration with CrowdStrike, has successfully disrupted the Sality botnet, a persistent threat active since 2003.
Key findings • 16 vulnerabilities disclosed for WWBN AVideo between August 30 and September 1, 2026. • Critical flaws include indefinite password resets (CVE-2026-84480) and authentication by…
Microsoft Defender Experts are tracking a malware campaign that uses counterfeit software download sites to impersonate trusted vendors and distribute malicious installers, primarily targeting China-based operations.
Key findings • 11 malicious npm packages were disclosed on September 1, 2026. • All advisories were published within a single minute. • All packages were first published just 12 hours bef…
A new dark web marketplace named Nexus is offering over 153 million scanned drivers licenses from the US and Canada, believed to originate from a breach at a major identity verification firm. The FBI has launched an inquiry into the service.
Key findings • Mozilla disclosed 16 Thunderbird vulnerabilities on September 1, 2026, including two critical sandbox escapes. • Flaws impacted email parsing, remote content handling, calendar…
Automated tools for generating cryptographic bills of materials (CBOMs) can create a false sense of security, as legacy and operational systems often remain hidden from automated scans, according to consultant Matous Vambersky.
The FBI has issued an alert regarding a sophisticated phishing campaign targeting prominent individuals using OAuth consent phishing via messaging apps to trick victims into granting persistent access to cloud services.
Key findings • HPE disclosed 25 vulnerabilities in ArubaOS-CX on September 1, 2026. • Flaws include authentication bypass, command injection, XSS, and DoS. • Multiple high-severity vulner…
Mozilla has begun a gradual rollout of native ad blocking for Firefox on iOS, leveraging Apple's WebKit Content Blockers to enhance user privacy and browsing experience.
Key findings • Fifteen vulnerabilities disclosed together for Elastic Kibana on September 1, 2026. • Flaws include missing/incorrect authorization, path traversal, and resource allocation iss…