Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,727 stories synthesized.
Mirantis has introduced Lens Agents, a new platform designed to provide centralized governance, security, and cost control for AI agents operating across desktop and cloud environments.
The Rust-based shell Brush has released version 0.4.0, introducing major improvements to bash compatibility, expanded platform support, and refined arithmetic handling.
A coordinated international operation involving the FBI, Dubai Police, and Chinese authorities has dismantled nine cryptocurrency scam centers and arrested 276 individuals linked to widespread "pig butchering" fraud schemes.
A new open-source security tool called Pipelock has been released to provide a network-level firewall for AI coding agents, preventing unauthorized data exfiltration and credential theft.
Organizations must shift their third-party risk management strategies from a data-loss prevention mindset to one centered on operational resilience to mitigate supply chain vulnerabilities.
New research reveals that Large Language Models fail to detect malicious activity when used in isolation, but achieve 93 percent accuracy when integrated into structured, tool-constrained investigative workflows.
New research indicates that ten major workplace applications collect an average of 19 data points each, with many sharing user information with third-party advertisers and marketing firms.
Security researchers have issued warnings regarding a new NGINX vulnerability and an active zero-day exploit targeting Cisco systems, prompting urgent calls for heightened network monitoring.
A sophisticated, fileless Linux Remote Access Trojan (RAT) named Quasar Linux RAT (QLNX) is actively targeting developer environments to harvest credentials and facilitate software supply chain compromises.
Education technology giant Instructure has confirmed a data breach involving the theft of user information, with the ShinyHunters extortion group claiming to have stolen 3.65 terabytes of data from millions of students and faculty.
OpenAI has introduced an opt-in "Advanced Account Security" feature for ChatGPT and Codex that mandates phishing-resistant authentication via passkeys or hardware security keys while disabling traditional password-based logins.
Microsoft Defender erroneously flagged legitimate DigiCert root certificates as malware, leading to widespread system alerts and the accidental removal of certificates from the Windows trust store.
Wireshark has released version 4.6.5 to address 43 vulnerabilities and 35 bugs, a surge in activity attributed to the rise of AI-assisted vulnerability discovery.
The U.S. Department of Defense has secured contracts with seven major technology firms to integrate artificial intelligence into its classified networks to enhance battlefield decision-making and logistical efficiency.
A large-scale fraud operation dubbed 'FEMITBOT' is leveraging Telegram's Mini App feature to impersonate global brands, run cryptocurrency scams, and distribute Android malware.
A threat group identified as UNC6692 has been compromising corporate networks since late December 2025 by impersonating IT helpdesk staff on Microsoft Teams to distribute a fake "Mailbox Repair Utility."
CISA has added a Microsoft Defender access control vulnerability to its Known Exploited Vulnerabilities catalog following reports of active exploitation.
CISA has added a critical remote code execution vulnerability in the Marimo platform to its Known Exploited Vulnerabilities catalog following reports of active exploitation.
CISA and the NCSC have identified a backdoor called FIRESTARTER that allows APT actors to maintain persistent access to Cisco Firepower and Secure Firewall devices even after security patches are applied.
An international coalition of 13 nations has warned that China-nexus threat actors are increasingly leveraging large-scale, covert networks of compromised SOHO and IoT devices to mask their cyber operations and maintain long-term persistence.
CISA has released a wave of security advisories covering critical vulnerabilities in industrial control systems, emergency gateways, and consumer transportation hardware, with several vendors failing to provide patches or respond to coordination efforts.
CISA has released multiple advisories detailing critical authentication bypass and data exposure vulnerabilities affecting travel booking platforms, IP cameras, GNSS receivers, and legacy network mapping tools.
CISA and several federal partners have issued new joint guidance to help organizations transition operational technology (OT) environments toward a zero-trust security architecture.
A critical authentication bypass vulnerability in cPanel and WHM is being actively exploited to deploy the "Sorry" ransomware, impacting at least 44,000 servers.