Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,734 stories synthesized.
A new World Economic Forum report reveals that 77% of organizations are now using AI to combat cybersecurity alert fatigue, leading to significantly shorter breach lifecycles and reduced costs.
A persistent, multi-year phishing campaign known as Operation HookedWing has compromised over 500 organizations across critical global sectors, resulting in the theft of thousands of sensitive credentials.
A critical vulnerability has been disclosed in NGINX, requiring immediate attention from administrators to secure web infrastructure against potential exploitation.
Mandiant's 2026 report reveals that threat actors are deploying AI to discover zero-day vulnerabilities, generate polymorphic malware, and automate initial access at industrial scale.
Two Latin American threat actors are using jailbroken AI agents to automate entire attack chains, dynamically generating custom hacking tools on the fly to evade detection.
YARA-X has released version 1.16.0, which includes four new improvements and four bug fixes to enhance the performance and stability of the pattern-matching engine.
Attackers are leveraging Google Ads and weaponized Claude.ai shared chats to trick macOS users into executing malicious terminal commands that install infostealers.
German and Spanish authorities have shut down a successor to the Crimenetwork darknet marketplace, arresting its suspected administrator and seizing over €194,000 in assets.
A critical heap out-of-bounds read vulnerability in the Ollama framework, dubbed "Bleeding Llama," allows unauthenticated attackers to exfiltrate sensitive process memory from over 300,000 exposed servers.
A critical vulnerability in the cPanel web hosting control panel is currently being exploited in the wild, prompting urgent security warnings for hosting providers and administrators.
Trend Micro's analysis of the Instructure Canvas breach reveals 8,809 institutions affected across 50 countries, with the SHADOW-AETHER-015 group exploiting backend access to expose sensitive student data.
The JDownloader website was compromised to distribute malicious Windows and Linux installers, exposing users to a Python-based remote access trojan.
A malicious repository impersonating an OpenAI project on Hugging Face reached the platform's trending list, deceiving users into downloading a Rust-based infostealer.
cPanel has released urgent security patches for three vulnerabilities in its cPanel and WHM software that could allow attackers to execute arbitrary code, escalate privileges, or perform unauthorized file reads.
A hardcoded cryptographic key in the MAXHUB Pivot client application allows attackers to decrypt sensitive tenant data and disrupt operations via unauthorized device enrollment.
CISA has added a critical SQL injection vulnerability in BerriAI LiteLLM to its Known Exploited Vulnerabilities (KEV) Catalog following evidence of active exploitation.
The provided source material does not contain information regarding a cybersecurity vulnerability, breach, or patch.
General Motors will pay $12.75 million to settle California state charges that it sold millions of drivers' personal location and behavior data to third-party brokers without their consent.
A Slovakian national has been sentenced to 16 years in prison for his role in operating Kingdom Market, a prolific dark web platform that facilitated the sale of illegal drugs, stolen data, and malware.
A newly identified banking trojan dubbed TCLBANKER is targeting 59 financial and cryptocurrency platforms using sophisticated DLL side-loading, anti-analysis evasion, and worm-like propagation via WhatsApp and Outlook.
A new report from the Anti-Corruption Data Collective indicates that insider trading is likely occurring on Polymarket, with long-shot bets on military and defense outcomes winning at a rate significantly higher than the platform average.
NVIDIA has confirmed a data breach involving its GeForce NOW cloud gaming service, which resulted in the exposure of user information managed by an Armenian regional partner.
A cyberattack on the Canvas educational platform by the ShinyHunters gang forced universities across the U.S. to reschedule final exams after attackers defaced the site and exploited a vulnerability in "Free-For-Teacher" accounts.
A campaign of 28 fraudulent Android apps, downloaded over 7.3 million times, tricked users into paying for fake call history data before being removed from the Google Play Store.