Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Key findings • 24 WordPress plugin vulnerabilities disclosed on September 2, 2026, ranging from Medium to Critical severity. • Two Critical vulnerabilities (CVE-2026-4357, CVE-2025-9314) allo…
The open-source authorization tool OpenLeash now intercepts potentially dangerous AI agent actions, blocking clear threats and requiring human approval for uncertain operations to prevent unintended harm.
An AI agent's attempt to establish an online presence highlights how CAPTCHAs, IP reputation, and account age restrictions act as significant barriers, often before identity verification is even considered.
A human attacker leveraged advanced AI agents to execute a complete ransomware attack, including reconnaissance, intrusion, and data exfiltration, in under 10 hours, then left the victim with a detailed security report.
Google, Anthropic, and OpenAI unveil new AI models and initiatives aimed at bolstering cybersecurity defenses, while also addressing potential misuse.
Key findings • Two High and three Medium severity vulnerabilities disclosed in Sonatype Nexus Repository 3 on September 2, 2026. • Vulnerabilities include authorization bypasses in blobstore …
CISA has added seven new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation across various software and hardware products.
A newly discovered WhatsApp vulnerability on Android allows unauthorized access to a device's photo gallery by exploiting the 'Create with Meta AI' feature during a video call.
Key findings • Cisco disclosed 11 vulnerabilities on September 2, 2026, across IOS XR, Secure Email, Nexus 9000, and IP Phones. • Six high and two critical vulnerabilities in Cisco IOS XR Sof…
Ireland's Data Protection Commission has fined the Health Service Executive (HSE) for GDPR violations after sensitive psychiatric patient records were found abandoned and contaminated at disused hospitals.
Google has launched Gemini 3.8 Flash Cyber, an AI model designed to autonomously find and fix software security flaws, available to vetted teams through the Fairwind Program.
A threat group known as 'Spring Ring' is actively targeting Microsoft Teams users with sophisticated vishing attacks to compromise accounts and gain unauthorized access.
CrowdStrike's Falcon platform now offers real-time protection against malicious code injection within development pipelines and compromised build tools, extending endpoint security to safeguard against supply chain threats.
Key findings • 14 vulnerabilities disclosed simultaneously for Jenkins on September 2, 2026. • Multiple high-severity flaws (CVSSv3 8.8) related to insecure deserialization and Stapler compon…
Key findings • 25 Jenkins vulnerabilities disclosed on September 2, 2026, covering RCE, XSS, and permission bypasses. • High-severity flaws include insecure deserialization and Stapler compon…
Cyberattacks in August targeted US and EU firms using sophisticated phishing lures to hijack Microsoft 365 sessions and abuse legitimate remote management tools.
Tech support scams are shifting tactics, moving beyond traditional fake virus alerts to leverage sponsored search results, fake listings, and renewal scams to ensnare victims.
The UK is amending its Cyber Security and Resilience Bill to empower ministers to block high-risk technology suppliers from critical infrastructure, responding to escalating supply chain threats.
Key findings • 14 Craft CMS vulnerabilities disclosed on September 2, 2026, ranging from Medium to Critical severity. • Multiple flaws in GraphQL API allow unauthorized site access and data m…
A new pro-Ukraine hacking collective, VantaCore, is actively targeting Russian companies with custom ransomware, demanding millions in ransom and marking a significant evolution in the cyber conflict.
Researchers confirm Pegasus and a new NoviSpy variant spyware infections targeting Serbian student activists, marking the largest documented surveillance wave in the country.
Senator Ron Wyden is calling on the NSA to provide clearer public guidance on the security limitations of commercial VPNs, particularly against sophisticated foreign adversaries.
Dropbox disclosed that approximately 5,000 user accounts were compromised in August due to attackers exploiting a weakness in its Lenovo ID sign-in integration.
Eight vulnerabilities in AI coding agents like Claude, Codex, and Cursor allow malicious Git configurations to execute attacker-controlled commands with user privileges.