Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,728 stories synthesized.
Cisco Talos has uncovered a Windows malware toolkit, CloudZ RAT and its Pheno plugin, that steals SMS one-time passwords by reading synced phone data from Microsoft Phone Link's local SQLite database, bypassing the need to compromise the victim's mobile device.
Autonomous offensive security startup XBOW has raised an additional $35 million in a Series C extension, bringing its total funding to over $270 million to support international expansion and platform development.
Modern ransomware campaigns are increasingly neutralizing recovery efforts by systematically identifying and destroying backup infrastructure before deploying encryption payloads.
Herd Security has raised $3 million in a funding round led by Aspiron Ventures to scale its agentic AI platform, which automates continuous security training and simulations for organizations.
Palo Alto Networks has disclosed a critical unauthenticated buffer overflow vulnerability (CVE-2026-0300, CVSS 9.3) in the PAN-OS User-ID Authentication Portal that is already being exploited in the wild by a state-sponsored threat cluster.
Three malicious PyPI packages were discovered delivering a new malware family called ZiChatBot that uses Zulip's REST APIs as its command-and-control infrastructure, with over 2,400 downloads before takedown.
Rapid7 researchers have uncovered an Iranian state-sponsored espionage operation, attributed with medium confidence to MuddyWater, that posed as the Chaos ransomware gang to conceal data theft and intelligence gathering.
The Iranian state-sponsored group MuddyWater is conducting cyber-espionage operations under the guise of a Chaos ransomware attack, using social engineering and false-flag tactics to mask their true objectives.
Rapid7 has uncovered an intrusion by Iran-linked APT MuddyWater that impersonated a Chaos ransomware affiliate to mask geopolitical espionage, using social engineering and remote access tools without deploying a ransomware payload.
Security teams are increasingly shifting toward automated, intelligent workflows to prevent network incidents from escalating due to manual triage bottlenecks.
Attackers are using the legitimate JavaScript runtime Bun to distribute the Rust-based NWHStealer infostealer, leveraging its novelty to evade detection.
Instructure, the company behind the Canvas learning management system, confirmed a breach of its cloud-hosted environment, with the ShinyHunters ransomware group claiming to have stolen roughly 275 million records from over 8,800 educational institutions.
Disc Soft Limited has confirmed that its DAEMON Tools Lite software was compromised in a supply chain attack that distributed signed, trojanized installers to thousands of users globally.
The Hacker News has introduced the 'Cybersecurity Stars Awards 2026' to recognize outstanding contributions and innovation across the global cybersecurity industry.
A Romanian national has been extradited to the United States to face charges for his role in a VoIP-based vishing and bank fraud scheme that took place 17 years ago.
The rapid, uncoordinated deployment of AI agents across enterprise environments has created a significant "identity dark matter" layer that traditional security tools are currently unable to monitor or govern.
Intel 471 has launched a new feature for its Verity471 platform that automates the creation of detection queries to help security teams quickly identify past or present exposure to emerging threats.
Independent research teams have demonstrated that Rowhammer attacks against NVIDIA Ampere-generation GPUs can grant attackers full control over a host machine's CPU memory and lead to root-level privilege escalation.
Extreme Networks has announced the upcoming launch of Extreme Agent ONE, an autonomous AI platform designed to automate enterprise network management through proactive, context-aware agents.
Cisco Talos has uncovered a Windows malware toolkit, CloudZ RAT and its Pheno plugin, that steals SMS one-time passwords by reading synced data from Microsoft Phone Link's local database, bypassing the need to compromise the victim's phone.
UiPath has introduced new agentic AI capabilities for its Automation Suite, enabling government agencies to deploy secure, self-hosted, or cloud-based AI workflows that meet strict compliance and data residency standards.
CISA has introduced the 'CI Fortify' initiative to help critical infrastructure operators maintain essential services during cyberattacks, warning that nation-state actors have already embedded themselves within U.S. operational technology networks.
8x8 has rolled out a series of updates to its Platform for CX, introducing new AI development tools, enhanced analytics, and silent mobile authentication to address operational bottlenecks.
Proton Mail has launched an optional post-quantum encryption feature across all account tiers to protect future communications from potential quantum computing threats.