Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,731 stories synthesized.
Transilience AI has introduced a Full Stack Security Operating System designed to unify fragmented cloud security tools and automate the remediation process through AI-driven agents.
Object First has introduced a new cloud-based management service, Fleet Manager, designed to provide centralized oversight and security monitoring for distributed Ootbi backup storage environments.
A vulnerability in the Claude Chrome extension allows malicious extensions to hijack the AI agent, bypass security prompts, and perform unauthorized actions on behalf of the user.
Ivanti has patched a high-severity zero-day vulnerability in Endpoint Manager Mobile (EPMM) that was exploited in targeted attacks, likely chained with previously disclosed flaws.
A new local privilege escalation exploit named Dirty Frag chains two Linux kernel page-cache write vulnerabilities to reliably gain root access on major distributions without requiring a race condition.
A data extortion attack on Instructure's Canvas platform has disrupted classes and final exams across thousands of U.S. schools after ShinyHunters defaced the login page with a ransom demand threatening to leak data on 275 million students and faculty.
GitLab released versions 19.0.1, 18.11.4, and 18.10.7 on May 27, 2026, patching seven vulnerabilities, the most severe of which allows an authenticated attacker to run Duo AI workflows under another user's identity.
ShinyHunters exploited a vulnerability in Instructure's systems to deface Canvas login portals for approximately 330 educational institutions, threatening to leak stolen data unless a ransom is paid by May 12.
A new banking trojan named TCLBanker targets 59 financial platforms and uses a trojanized Logitech installer, with worm modules that hijack WhatsApp and Outlook to spread autonomously.
SentinelLabs has discovered a modular cloud worm named PCPJack that removes TeamPCP malware from infected systems while stealing cloud secrets from AWS, GitHub, Slack, and cryptocurrency wallets.
Adversa AI has disclosed the TrustFall attack, a one-click remote code execution vulnerability in Claude Code, Gemini CLI, Cursor CLI, and Copilot CLI via malicious JSON files in cloned repositories.
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the threat group's access to compromised systems.
The Australian Cyber Security Center warns of ongoing ClickFix attacks targeting Australian organizations, using compromised WordPress sites to distribute Vidar Stealer malware.
Ivanti warns that a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) is being exploited in limited attacks, prompting CISA to add the flaw to its Known Exploited Vulnerabilities catalog.
A new malware framework called PCPJack is stealing credentials from exposed cloud infrastructure while actively removing TeamPCP's access to the systems.
Kaspersky researchers found that 60% of MD5 password hashes from a dataset of 231 million leaked passwords can be cracked in under an hour using a single Nvidia RTX 5090 GPU, with 48% cracked in under 60 seconds.
CISA added Ivanti vulnerability CVE-2026-6973 to its Known Exploited Vulnerabilities catalog on May 7, 2026, confirming active exploitation in the wild.
Palo Alto Networks disclosed CVE-2026-0300, a zero-day in its firewall User-ID Authentication Portal, exploited in the wild by a likely state-sponsored group using open-source tunneling tools and Active Directory enumeration.
Ivanti warns that a high-severity remote code execution vulnerability in Endpoint Manager Mobile (EPMM) is being exploited in limited attacks, prompting CISA to add the flaw to its KEV catalog.
A critical vulnerability in the Cline Kanban server allows any website a developer visits to silently hijack the AI coding agent, exfiltrate data, and execute commands.
Dragos reports that attackers used Anthropic's Claude and OpenAI's GPT models in a campaign targeting a municipal water utility in Mexico, marking a novel use of commercial LLMs in critical infrastructure attacks.
Palo Alto Networks disclosed CVE-2026-0300, a zero-day in its User-ID Authentication Portal, exploited by the likely Chinese state-sponsored group CL-STA-1132 for root-level access.
A fraudulent Claude AI website distributes a site distributes a previously undocumented backdoor named Beagle through a DLL sideloading chain that abuses a signed G DATA antivirus updater.
Cloudflare has published a detailed postmortem of its response to the 'Copy Fail' Linux kernel local privilege escalation vulnerability (CVE-2026-31431), confirming no impact to its infrastructure and highlighting how its behavioral detections could identify the exploit within minutes.