Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,722 stories synthesized.
The White House has established 'Gold Eagle,' a federal clearinghouse to enhance the sharing of AI-driven cyber threat intelligence between government agencies and the private sector.
Microsoft's July 2026 Patch Tuesday release is its largest ever, patching a staggering 622 vulnerabilities, including two actively exploited zero-days and critical flaws in Copilot and Exchange.
Spanish authorities have arrested four individuals and dismantled a sophisticated cybercrime organization responsible for €140 million in fraud through investment scams and business email compromise attacks.
Researchers have identified significant security weaknesses in the Automated Frequency Coordination (AFC) systems for 6 GHz Wi-Fi, potentially enabling attackers to disrupt critical infrastructure by spoofing device locations.
A security flaw in Anthropic's Claude Tag Slack integration could allow unauthorized actions by interpreting literal "@Claude" text as commands, Tego AI reports.
The U.S. unsealed an indictment against three Russian nationals accused of operating Media Land and ML Cloud, a St. Petersburg-based bulletproof hosting service that provided infrastructure and technical support to cybercriminals.
A threat actor created hundreds of fake GitHub repositories mimicking legitimate software and security projects to distribute infostealer malware, targeting developers and users.
Microsoft's July 2026 Patch Tuesday release is its largest ever, patching 569 vulnerabilities, including three zero-days, two of which are being actively exploited in the wild.
Synopsys has refuted claims by the nascent D1R ransomware group that it breached the company's systems and accessed sensitive data belonging to its major customer, Bosch.
Microsoft's July 2026 Patch Tuesday fixes 570 vulnerabilities, with three zero-days, including two exploited in the wild, impacting SharePoint Server and Active Directory Federation Services.
SonicWall is urging customers to patch its Secure Mobile Access (SMA) 1000 Series appliances following active exploitation of two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410.
Finnish authorities have issued a wanted notice for convicted hacker Aleksanteri Kivimäki in connection with the 2020 Vastaamo data breach, which compromised sensitive patient records.
Fortinet has released patches for seven vulnerabilities affecting its core network security products, including critical flaws in FortiSandbox and FortiOS.
Adobe has released urgent security updates for its ColdFusion platform, addressing eight critical vulnerabilities that could lead to arbitrary code execution and privilege escalation.
A new Rust-based remote access trojan, LabubaRAT, is being distributed by threat actors who disguise it as NVIDIA software to evade detection and gain persistent access to Windows hosts.
Two unpatched vulnerabilities in Anthropic's Claude for Chrome extension allow attackers to access sensitive user data from Gmail, Google Docs, and Calendar.
A dark web administrator for the Doxbin platform has been sentenced to over two years in prison for encouraging and facilitating swatting incidents that targeted individuals and organizations across multiple countries.
A vulnerability in ABB's Advant Master Online Builder could allow unauthorized code execution due to an improperly handled search path for DLL loading.
A critical Linux kernel vulnerability, CVE-2026-31431, known as 'Copy Fail,' allows local authenticated users or compromised containers to gain root privileges on affected ABB Ability Edgenius systems.
A critical vulnerability in Rockwell Automation's 1715-AENTR EtherNet/IP Adapter allows unauthenticated remote attackers to execute arbitrary CLI commands, potentially leading to system compromise.
CISA has issued an advisory detailing four critical vulnerabilities in ABB's T-MAC Plus industrial control system software, with CVSS scores up to 9.9.
A phishing campaign is impersonating LastPass and Bitwarden, sending fake security alerts to trick users into visiting malicious websites designed to steal credentials.
Five AsyncAPI npm packages with nearly 3 million weekly downloads were compromised through a GitHub Actions supply chain attack, injecting a remote-access implant.
A large-scale fraud operation has been uncovered, utilizing over 8,400 phishing domains and 6,600 social media scam ads to target Turkish banks and government portals, impersonating dozens of financial institutions.