Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A critical CRLF injection vulnerability in IXON VPN Client versions prior to 1.4.7 allows unauthenticated remote attackers to execute commands with root or SYSTEM privileges.
CISA has issued an advisory for Rockwell Automation's ControlFLASH software, detailing a vulnerability that could allow attackers to execute arbitrary code.
CISA has alerted users to two vulnerabilities in Rockwell Automation's ArmorStart LT, versions prior to v2.002, that could allow for script injection and denial-of-service conditions.
A critical vulnerability in Rockwell Automation's 1756-ENBT module could allow attackers to crash the device, requiring a manual restart.
A critical vulnerability in Inductive Automation's Ignition platform, CVE-2026-77393, allows any authenticated user to create projects due to insecure default permissions.
A severe stack-based buffer overflow vulnerability in Pyramid Solutions' NetStaX EtherNet/IP Stack could allow attackers to crash devices or achieve remote code execution.
CISA has issued an advisory detailing three critical vulnerabilities in Tycon Systems TPDIN-Monitor-WEB3 devices, potentially leading to man-in-the-middle attacks and credential theft.
Attackers are repurposing AI-era ASCII smuggling techniques to bypass traditional email filters in high-volume phishing campaigns, Microsoft reports.
Capsule Security has released its 'AI Circuit Breaker,' a real-time system designed to detect and halt malicious behavior from autonomous AI agents before they can cause damage.
OpenAI is actively investigating a significant increase in errors impacting its popular ChatGPT and Codex services, leading to degraded performance and potential disruptions for users and developers.
CISA and the G7 Cyber Security Working Group have issued a joint call to action, urging governments and organizations worldwide to accelerate the transition to post-quantum cryptography (PQC) to defend against future quantum computing threats.
Cybercriminals are using a sophisticated social engineering campaign dubbed 'Phantom Deal' to trick employees into initiating fraudulent wire transfers for non-existent acquisitions, bypassing traditional security measures.
Continuous Threat Exposure Management (CTEM) is gaining traction as a strategic approach to tackle the escalating volume of CVEs and the limitations of traditional vulnerability management.
Attackers are exploiting legitimate ScreenConnect installations to spread malware in a worm-like fashion across Windows systems, leveraging social engineering and the tool's file-transfer capabilities.
Researcher Chaotic Eclipse has revealed a zero-day privilege escalation vulnerability in Avast Antivirus's sandbox component, with a public proof-of-concept demonstrating SYSTEM-level access.
Researchers have developed SweepLED, a low-cost smartphone accessory that uses LEDs and computer vision to detect hidden cameras in hotel rooms and rentals, achieving 93.9% accuracy.
The resilient Outsider phishing kit has resurfaced with over 700 new pages, demonstrating a rapid recovery and adaptation following a disruption by Google.
HP Easy Start for macOS contains three critical vulnerabilities allowing privilege escalation, impacting installations and potentially exposing sensitive data.
Key findings • Three vulnerabilities in Siyuan Note disclosed together, affecting versions prior to v3.8.2. • Critical stored XSS (CVE-2026-84803) due to incomplete extension blocklist in ass…
Key findings • Nine vulnerabilities in N8n disclosed on September 3, 2026, patched in versions 1.123.73, 2.35.4, and 2.36.2. • High-severity flaws include RCE in the Git node (CVE-2026-85168)…
Key findings • 25 Linux kernel vulnerabilities disclosed on September 3, 2026, affecting diverse subsystems. • Fixes address SELinux, input devices, power management, graphics, and networking…
Key findings • Four vulnerabilities disclosed in Joomla's J2Store extension on September 3, 2026. • Vulnerabilities include missing authorization, cart tampering, XSS, and PayPal callback for…
Cybercriminals have breached the popular fishing app Fishbrain, stealing user data including password hashes and salts, potentially exposing millions of anglers' credentials.
Attackers are embedding QR codes directly into email markup, circumventing security tools that rely on image file inspection and redirecting users to phishing sites.