Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,736 stories synthesized.
The U.S. House Committee on Homeland Security is investigating a massive breach of the Canvas learning management platform after the ShinyHunters extortion group exploited XSS vulnerabilities to steal millions of student records and disrupt final exams.
The UK’s Information Commissioner’s Office has fined South Staffordshire Water’s parent company nearly £1 million for security failures that allowed hackers to remain undetected in its network for 20 months.
A new variant of the TrickMo Android banking trojan TrickMo routes its command-and-control traffic through The Open Network (TON) Blockchain, making domain takedowns ineffective.
A new, highly reliable privilege escalation exploit chain dubbed "Dirty Frag" is targeting the Linux kernel, affecting major enterprise distributions and showing early signs of in-the-wild exploitation.
BWH Hotels has confirmed that a web application breach exposed six months of guest reservation data, though the company maintains that no financial information was compromised.
Two chained Linux kernel vulnerabilities, collectively dubbed 'Dirty Frag,' allow local privilege escalation to root on all major distributions after the disclosure embargo was broken.
A recent study by the SANS Internet Storm Center reveals that 99.7% of traffic on a monitored website originated from automated bots, underscoring the critical role of CAPTCHA technology in modern web defense.
A series of high-profile supply chain attacks targeting development tools and libraries has exposed critical weaknesses in CI/CD pipelines, leading to significant data breaches and prompting calls for more advanced, deep-packet inspection security solutions.
An active infostealer campaign is targeting software developers by using fake Claude Code installers to harvest sensitive browser data through the exploitation of Chrome's App-Bound Encryption.
Password resets in Active Directory and hybrid Entra ID environments do not immediately invalidate old credentials due to cached hashes, Kerberos ticket lifetimes, and synchronization delays, allowing attackers to maintain access.
Security researcher Andreas Makris discovered that thousands of Yarbo yard robots share hardcoded root passwords and root passwords and open remote tunnels, enabling attackers to steal Wi-Fi credentials, GPS data, and even bypass emergency stops.
Researchers have uncovered a coordinated campaign utilizing an AI-generated zero-day exploit to bypass two-factor authentication in an open-source web administration tool, signaling a new era of accelerated threat development.
Google Threat Intelligence Group reports the first observed AI-developed zero-day exploit in the wild, targeting an unnamed open-source web administration tool and bypassing 2FA.
Google Threat Intelligence Group has linked a zero-day exploit targeting an open-source web-based system administration tool to AI-assisted development by a criminal group, marking a new frontier in cybercrime.
Google's Threat Intelligence Group has documented the first confirmed case of cybercriminals using an AI model to discover and weaponize a zero-day vulnerability, targeting a popular open-source system administration tool to bypass two-factor authentication.
Google's Threat Intelligence Group has documented threat actors using AI for exploit development and attack automation, including a zero-day that bypasses 2FA on a popular open-source admin tool and an Android backdoor that abuses Gemini.
In response to recent high-profile privilege escalation flaws like Copy Fail and Dirty Frag, Linux kernel developers are reviewing a proposal for a runtime 'Killswitch' mechanism that would let administrators instantly disable vulnerable kernel functions without unloading modules.
The UK ICO fined South Staffordshire Water £963,900 for a Cl0p ransomware breach that exposed data of 633,887 customers, with attackers undetected for nearly two years.
Check Point's May 11 threat intelligence bulletin details major breaches at Instructure (Canvas) and Zara, alongside critical vulnerabilities in Progress MOVEit Automation, Ivanti EPMM, and Palo Alto PAN-OS under active exploitation.
Ivanti EPMM CVE-2026-6973 and Palo Alto Networks PAN-OS CVE-2026-0300 are under active attack, while a new Linux RAT called Quasar Linux uses P2P mesh networking and kernel rootkits.
A second major Linux kernel vulnerability in two weeks, dubbed 'Dirty Frag,' allows container escape and root access; a working exploit was published after the disclosure embargo collapsed.
A sophisticated espionage group known as HeartlessSoul is targeting aviation and drone firms with custom malware to exfiltrate sensitive geospatial intelligence and navigation data.
Automobile manufacturer Skoda has disclosed a data breach involving its online shop, where attackers exploited a software vulnerability to access customer personal information and account password hashes.
The window between vulnerability disclosure and active exploitation has plummeted to just 10 hours, rendering traditional, human-dependent security workflows ineffective against AI-powered threats.