Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,736 stories synthesized.
Apple has released a security update to address CVE-2026-28941, an out-of-bounds read vulnerability in the macOS USD library that could allow remote attackers to leak sensitive memory.
Apple has released a security update for macOS to address CVE-2026-28918, an out-of-bounds read vulnerability in the CoreSymbolication framework that could allow remote attackers to disclose sensitive information.
Microsoft has released a security update for CVE- for CVE-2026-33838, a double-free vulnerability in the Windows Message Queueing (mqac.sys) driver that allows local attackers to escalate privileges to kernel code execution.
Microsoft has released a security update for CVE-2026-34342, a race condition vulnerability in Windows splwow64.exe that allows local attackers to escalate privileges from low to medium integrity.
A memory corruption vulnerability in Siemens Simcenter Femap, tracked as CVE-2025-12659, allows remote attackers to execute arbitrary code by tricking users into opening specially crafted IPT files.
A new study reveals that smart refrigerators face significant security and operational risks as their software and cloud-based support systems inevitably become obsolete long before the physical appliances reach the end of their lifespan.
A recent analysis of the global cybersecurity job market reveals a sustained demand for specialized roles in application security, cloud defense, and identity management as organizations prioritize building resilient security architectures.
Security researchers have issued warnings regarding a new NGINX vulnerability and a separate zero-day exploit targeting Cisco systems, prompting calls for heightened vigilance across enterprise networks.
Key findings • CISA added CVE-2026-45321 to the KEV catalog on May 27, 2026 • The TanStack vulnerability is confirmed actively exploited in the wild • Exploitation is linked to ransomware…
CrowdStrike has unveiled the technical framework behind its "Automated Leads" AI, which identifies subtle, low-fidelity indicators of compromise by aggregating entity-based scores to detect malicious activity that traditional alerts miss.
General Motors has agreed to a record $12.75 million settlement with California regulators over allegations that it illegally sold the location and driving data of its customers to third-party brokers without proper consent.
Apple has issued a sweeping set of security updates addressing 84 vulnerabilities across its entire product lineup, including critical kernel and privilege escalation flaws.
A new proof-of-concept tool called GhostLock demonstrates how attackers can abuse the Windows 'CreateFileW' API to perform denial-of-service attacks by locking local and network files.
Unit 42 reveals how attackers exploit Active Directory Certificate Services through misconfigured templates and shadow credentials, enabling privilege escalation and persistence without zero-day vulnerabilities.
A new, sophisticated malware campaign is targeting developers by using malicious search advertisements and dynamic HTML rendering to steal sensitive browser data, including cookies and passwords, from Chromium-based browsers.
The state of Texas is suing Netflix for allegedly operating a "surveillance machinery" that collects and shares sensitive user data with advertisers without proper consent.
Business Email Compromise and the unauthorized use of generative AI are increasingly bypassing traditional security controls, forcing organizations to rely on human-centric defenses to mitigate these sophisticated, malware-less threats.
Apple has introduced end-to-end encryption for cross-platform RCS messaging in its iOS 26.5 update, providing enhanced privacy for communications between iPhone and Android users.
Frame Security has emerged from stealth with $50 million in funding to deploy an AI-powered human risk management platform that uses deepfake simulations and real-time behavioral analysis to train employees.
The FCC has extended the deadline for a ban on software and firmware updates for foreign-made routers and drones to January 2029, citing the need to maintain security for millions of currently deployed devices.
Zimperium has introduced a new Mobile App Response Agent designed to automate the investigation of mobile security threats and reduce incident response times for SOC and fraud teams.
Japanese Prime Minister Sanae Takaichi has ordered a national cybersecurity review in response to the emergence of Anthropic’s "Mythos" AI model, even as industry experts dismiss the tool's capabilities as largely marketing-driven.
Red Hat and Voyager Technologies have successfully deployed Red Hat Enterprise Linux 10.1 and containerized workloads to the International Space Station, establishing a new foundation for cloud-native computing in orbit.
Google researchers have uncovered the first known instance of a zero-day exploit developed with the help of AI, used by threat actors to facilitate a mass 2FA bypass campaign against a popular web administration tool.