Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,727 stories synthesized.
Security researchers are promoting the adoption of AI Bills of Materials (AI-BOMs) and model provenance tools to combat the risks posed by "shadow AI" and opaque supply chains in enterprise environments.
A new report from the Identity Theft Resource Center reveals that 38% of small businesses are raising prices to compensate for the financial impact of cyberattacks, creating a "cyber tax" for consumers.
The Chinese threat actor Silver Fox is targeting organizations in India and Russia with tax-themed phishing emails that deliver a new, stealthy backdoor called ABCDoor alongside established remote access Trojans.
cPanel has patched a critical zero-day authentication bypass vulnerability, CVE-2026-41940, which is currently being actively exploited to gain full administrative access to servers.
Fraudsters are bypassing credit union security by using stolen identities to navigate legitimate loan workflows, rendering traditional knowledge-based authentication ineffective.
The cybersecurity sector experienced a flurry of consolidation in April 2026, with 33 announced acquisitions focused on integrating AI security, identity management, and compliance capabilities into enterprise platforms.
Security leaders are facing a growing 'AI exposure gap' as the rapid, decentralized adoption of artificial intelligence creates complex, interconnected risks that traditional security tools are not equipped to monitor.
A critical authentication bypass flaw in cPanel and a high-reliability Linux kernel privilege escalation bug are both being actively exploited in the wild, prompting urgent warnings from security researchers and CISA.
A social engineering attack against DigiCert’s support portal allowed threat actors to generate and misuse legitimate EV Code Signing certificates to sign malware.
Progress Software has released critical patches for MOVEit Automation to fix an authentication bypass vulnerability and a privilege escalation flaw that could allow remote attackers to gain administrative control over the system.
Managed Service Providers are being urged to overhaul their security and backup strategies as AI-driven phishing and sophisticated SaaS-based attacks outpace traditional defensive measures.
The rise of agentic AI coding platforms in 2025 has significantly lowered the barrier to entry for cyberattacks, enabling non-technical individuals to execute sophisticated breaches and drastically reducing the time between vulnerability disclosure and exploitation.
The China-based cybercrime group Silver Fox is targeting organizations in India and Russia with a new Python-based backdoor called ABCDoor, delivered via sophisticated tax-themed phishing campaigns.
A Vietnamese-linked threat actor has compromised 30,000 Facebook accounts by abusing Google's AppSheet platform to deliver highly convincing phishing emails that bypass standard security filters.
Malwarebytes reports a massive wave of World Cup 2026-themed scams across crypto, travel, merchandise, and visa categories, with fraudsters impersonating FIFA, Panini, and LEGO to steal money and data.
Two cybersecurity professionals have been sentenced to four years in prison for their roles as affiliates in the ALPHV/BlackCat ransomware operation, having extorted over $1 million from victims.
CISA has added the "Copy Fail" Linux kernel vulnerability to its Known Exploited Vulnerabilities catalog after researchers released a reliable exploit that grants unprivileged users root access across nearly all modern Linux distributions.
Microsoft's April 2026 security updates are causing widespread failures in third-party backup software by blocking a vulnerable kernel driver, forcing users to update their applications to restore functionality.
Threat actors are increasingly abusing Amazon SES to send phishing and business email compromise emails that pass SPF, DKIM, and DMARC checks, making them appear fully legitimate.
Apple has issued a widespread series of security and stability updates across its entire product ecosystem, including new versions of iOS, macOS, watchOS, and developer tools.
Polymarket, a platform for betting on real-world events, is experiencing widespread manipulation as users exploit physical sensors and intimidate information sources to rig market outcomes.
Anthropic has released the public beta of Claude Security, an enterprise-focused tool that uses the Opus 4.7 model to scan codebases for vulnerabilities and generate automated patches.
French authorities have detained a 15-year-old suspect for allegedly orchestrating a massive data breach at the government agency France Titres, which exposed the personal information of up to 18 million people.
A critical authentication-bypass vulnerability in cPanel and WHM is being actively exploited by multiple threat actors to deploy ransomware, botnets, and espionage tools across tens of thousands of compromised servers.