Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Key findings • Four vulnerabilities disclosed in Zephyr RTOS on August 31, 2026, affecting networking and subsystems. • CVE-2026-14697: Potential improper handling of network traffic due to p…
Attackers are repurposing internet-scanned honeypots and other exposed servers as rogue Large Language Model (LLM) endpoints, tricking tool-enabled AI agents into connecting and potentially executing malicious commands.
An attacker exploited the Tectonic crypto lending platform by artificially inflating the price of its native token, leading to the theft of at least $6 million.
Texas has initiated 'Project Watershed 250,' a six-month pilot program enlisting over a dozen private sector companies to leverage AI and cybersecurity expertise to protect the state's water systems from escalating threats.
A new attack campaign dubbed 'TerminalFix' uses social engineering and steganography to deliver a custom reverse tunnel, granting attackers network-level access.
Multiple US Department of Defense commissaries are experiencing significant refrigeration outages, sparking concerns of a coordinated cyberattack targeting critical infrastructure.
Key findings • 24 vulnerabilities in TOTOLINK T6 firmware (4.1.5cu.748_B20211015) disclosed on August 31, 2026. • All flaws stem from incorrect access control in the /cgi-bin/cstecgi.cgi endp…
Broadcom's VMware AI Factory aims to simplify enterprise AI agent deployment and governance with automated infrastructure, centralized security controls, and secure sandboxes.
Microsoft is actively investigating a new disruption impacting Exchange Online, identified as EX1464935, affecting mail flow and user access.
Key findings • Six vulnerabilities disclosed on August 31, 2026, affect multiple Code Projects software including Typora. • Vulnerabilities include SQL injection, XSS, and information disclos…
Key findings • Five vulnerabilities disclosed for NASA software including earthdata-search, cFS, and Trick between Aug 30-31, 2026. • High severity flaws include SSRF in earthdata-search and …
Key findings • Three vulnerabilities in Ebyte NA111-M disclosed on August 31, 2026, with severity ranging from Medium to Critical. • CVE-2026-76133 (Critical) involves a deprecated hashing al…
Critical vulnerabilities in D-Link's DIR-X1860Z router enable unauthenticated local attackers to alter administrator passwords and extract Wi-Fi credentials.
Attackers are spoofing user-agent strings of legitimate AI crawlers from companies like OpenAI and Google to scan websites for exposed credentials and configuration files.
A researcher known as Nightmare Eclipse has released a privilege escalation exploit targeting Kaspersky Endpoint Security, dubbed 'HardBreacher'.
Key findings • Five vulnerabilities disclosed in Joomla's Helix Ultimate extension on August 31, 2026. • Vulnerabilities include Stored XSS, File Upload Bypass, Broken Access Control, and Ope…
Key findings • Ten vulnerabilities disclosed for Apache Wicket and Apache Shiro on August 31, 2026. • Multiple Apache Wicket CVEs involve improper input neutralization and HTML escaping issue…
Security Risk Advisors (SRA) has launched SCALR AI, a free agentive workbench for Security Operations Centers (SOCs), available on the Azure Marketplace to automate tasks and enhance security workflows.
A weekly cybersecurity roundup reveals the disruption of a Chinese spy proxy network, AI agents deviating from tasks, and multiple critical vulnerabilities in routers and software.
Check Point Research unveils a static deobfuscation pipeline for JSCeal, a malware that steals cryptocurrency by delivering its payload as compiled V8 bytecode.
The European Commission has classified OpenAI's ChatGPT as a Very Large Online Search Engine, subjecting it to enhanced regulatory scrutiny under the Digital Services Act.
Key findings • Nine vulnerabilities disclosed for D-Link devices, including DNS NAS and DIR routers, within a 14-hour window. • Multiple critical command injection flaws found in D-Link DNS s…
Brave's latest browser update adds an Email Aliases feature, allowing users to create unique forwarding addresses for website sign-ups to protect their primary inbox from data brokers and advertisers.
Cloudflare introduces Adaptive Intelligence, a new bot detection engine designed to make bot attacks prohibitively slow and costly for adversaries, shifting the economic advantage back to defenders.