Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Key findings • CVE-2026-75650, an Adobe vulnerability, is now on CISA's KEV catalog. • The flaw is confirmed to be actively exploited in real-world attacks. • All organizations should pri…
Cybercriminals are increasingly targeting loyalty points programs, turning accumulated rewards into cash for flights, hotel stays, and other illicit gains.
A new post-exploitation toolkit named PEEP leverages Chrome and Edge browser extensions to establish a backdoor for executing commands on compromised hosts, bypassing standard security checks.
Key findings • 22 vulnerabilities disclosed simultaneously for JetBrains YouTrack on September 7, 2026. • Vulnerabilities range from Medium to Critical severity, impacting multiple versions. …
Key findings • Dell Secure Connect Gateway 5.0 impacted by 25 vulnerabilities disclosed on September 7, 2026. • High-severity flaws include OS command injection, missing authentication, and i…
A sophisticated threat cluster is targeting executives with Microsoft 365 data theft and extortion, using vishing, AitM token theft, and residential proxies.
A sophisticated Linux rootkit is targeting F5 BIG-IP Access Policy Manager servers, injecting fileless PHP web shells directly into server memory to maintain persistent access.
Online maths learning platform Mathspace has confirmed a data breach impacting over 1 million users, stemming from attackers exploiting a critical SQL injection vulnerability in its Metabase reporting software.
Check Point Research's latest threat intelligence report highlights breaches at Thomson Reuters and Dropbox, an AI-assisted ransomware attack, and critical vulnerabilities in SonicWall and JFrog products.
Switzerland's federal administration is testing a sovereign, open-source digital workplace to decrease dependence on Microsoft 365, aiming for enhanced digital sovereignty and resilience.
This week's security landscape was shaped by actively exploited zero-days in Chrome and MikroTik routers, a supply chain attack targeting e-commerce platforms, and novel evasion techniques.
Microsoft is phasing out Manifest V2 browser extensions in Edge by early 2027, mandating a transition to Manifest V3 to enhance security and performance.
Key findings • Twelve vulnerabilities disclosed for MISP between Sept 6-7, 2026, focusing on authorization bypasses and input validation. • Four high-severity flaws identified, including issu…
A new Linux botnet malware named Tengu is designed to evade detection by masquerading as a kernel process, targeting servers, embedded systems, and IoT devices with DDoS capabilities.
Researchers uncover Bring Your Own Trusted Caller (BYOTC), a novel Windows attack technique that exploits the trust relationship between legitimate applications and privileged kernel drivers to disable security tools.
Researchers allege that certain LG OLED smart TVs scan home networks and capture microphone audio even when in standby mode, uploading the data later.
Approximately $320 million in Bitcoin was drained from the Liquid Network's federation wallet by attackers claiming to be white-hat hackers seeking to fix a vulnerability.
The Kimsuky threat group is employing an AI agent named OpenCode to rapidly generate sophisticated phishing decoys, increasing the scale and speed of their attacks.
Key findings • Ten vulnerabilities disclosed for Tenda devices between September 5-7, 2026. • Critical flaws include OS command injection, buffer overflows, and improper authentication across…
Berlin is investigating a second data leak after hackers published stolen login credentials and other sensitive information online, following a mid-August breach of city government networks.
A new analysis of misconfiguration data from 3,000 organizations reveals that common cloud security risks vary widely between AWS, Azure, and Google Cloud, rendering one-size-fits-all strategies ineffective.
Researchers are investigating the use of AI by promoters on X (formerly Twitter) to engage users in flirtatious conversations and drive traffic to adult content pages.
Key findings • Three low-severity vulnerabilities in HCL MyXalytics disclosed on September 7, 2026. • Vulnerabilities include potential DoS, content spoofing, and improper input validation. …
Natural Resources Wales inadvertently disclosed sensitive diversity data for approximately 2,000 current and former employees online, prompting an apology and investigation.