Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Ransomware operators are employing a new, sophisticated command-and-control framework named TukTuk, designed to steal credentials, conduct surveillance, and disable security tools, according to recent analysis.
Two Russian fundraising projects supporting Ukrainians and political prisoners have suffered data breaches, exposing donor email addresses and partial payment card details due to a compromise of their payment processing integration.
Scammers are becoming more sophisticated, tailoring their attacks to specific platforms and leveraging the likeness of popular figures like MrBeast to increase success rates.
Rockwell Automation has released patches and workarounds for more than a dozen vulnerabilities affecting its industrial automation software and hardware, including critical flaws in RSLinx Classic.
A new Android banking trojan, StreamRat, has been distributed through malicious ads on Meta platforms, targeting Spanish-speaking users and capable of near-complete device control.
A public exploit is now available for CVE-2026-84115, an authentication bypass vulnerability in Freshworks' Cleo Harmony file transfer software, increasing the risk for unpatched systems.
Key findings • Five medium-severity authorization vulnerabilities disclosed together for Kimai time-tracking software. • Issues include bypasses in REST API timesheet collection and user pref…
Palo Alto Networks has acquired Console, an AI-native platform, to enhance its Cortex security operations portfolio and enable AI-driven workflows for autonomous threat investigation and remediation.
Jenkins has issued a critical security advisory detailing numerous vulnerabilities in its core software and a wide array of plugins, with several rated as High severity.
A Chinese-speaking cybercrime group, dubbed Gambling Goblin, is compromising Brazilian government and educational servers to host phishing pages that mimic app stores, pushing online gambling content and manipulating search engine results.
A recent investigation by Palo Alto Networks Unit 42 revealed an enterprise network breach executed autonomously by AI agents within a mere 10 hours, drastically compressing weeks of typical human-led intrusion efforts.
Hackers linked to the Silver Fox (Yinhu) campaign are compromising Windows systems by distributing fake software installers that disable Microsoft Defender and other security measures.
Conversations with AI chatbots like ChatGPT and Claude are being admitted as evidence in legal proceedings, raising privacy concerns for users.
Two chained vulnerabilities in GeoNetwork, an open-source geospatial metadata catalog, allow unauthenticated remote code execution, impacting government geoportals.
A Russian national extradited from Cyprus faces U.S. charges for allegedly leading a malware campaign that used fake freelance accounts to distribute malicious Excel attachments to thousands of users.
A cyberattack targeting grid-connected battery storage systems could convincingly mimic a malfunctioning controller, potentially leading to widespread power outages and significant economic damage.
Multiple critical vulnerabilities in HPE Networking Fabric Composer, including two with CVSS 10.0 scores, permit unauthenticated attackers to execute code and gain full administrative control.
Attackers are distributing a modified Exodus cryptocurrency wallet installer that silently installs a remote access trojan (RAT), posing a significant risk beyond cryptocurrency theft.
Palo Alto Networks CEO Nikesh Arora highlights the critical risk posed by $1 trillion in accumulated cybersecurity technical debt, warning it could enable major breaches as AI-powered attacks proliferate.
Google has released an update for Chrome, addressing 26 security vulnerabilities, with two critical use-after-free flaws in Shared Tab Groups and WebGL posing the most significant risk.
Attackers are actively exploiting CVE-2026-9586, a critical SQL injection flaw in Sangoma Switchvox SMB Edition, enabling unauthenticated remote code execution.
A flaw in Hugging Face Transformers (CVE-2026-80047) enables malicious AI models to write Python files to user systems before consent for remote code execution is granted.
Visa has upgraded its A2A Protect solution with a unified fraud score, integrating Featurespace technology to detect and prevent account-to-account payment fraud in real-time.
F5 has updated its Web Application Firewall (WAF) with AI-driven anomaly detection and agentic threat intelligence to combat AI-powered threats and enable faster virtual patching.