Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,178 stories synthesized.
eMudhra is exiting the global SSL/TLS certificate business following the disclosure of weak private keys in eight intermediate CA certificates, prompting emergency browser actions and forcing thousands of certificate migrations.
A new cyber extortion gang, ScarlettGroup, has surfaced, utilizing a dark web leak site and countdown timers to publicly pressure alleged victims into paying ransoms.
Consumers are losing hundreds of millions of dollars annually to increasingly sophisticated text and voice-cloned scams, with AI advancements making fraudulent communications more convincing than ever.
LiteLLM, a popular open-source tool for simplifying LLM API calls, has been compromised by a second supply chain attack this year, with a malicious version distributed via PyPI and Docker containing malware designed to steal cloud credentials and AI API keys.
Japanese cloud provider Onamae.com is shutting down servers across all its plans after discovering malware in customer environments, potentially affecting up to 26,739 servers and raising concerns about data viewing.
The long-active Iranian hacking group 'Prince of Persia' has been discovered operating command-and-control (C2) infrastructure from within the United States, a move researchers say is aimed at evading detection.
Shadow AI, encompassing local models, coding assistants, and autonomous agents, is rapidly expanding within enterprises, leading to increased security incidents and substantial financial losses.
Cloudflare has successfully obtained South Korea's ISMS-P certification by adapting its global user sign-up process to meet stringent local compliance requirements, including disabling social sign-up options for Korean users.
North Korean Lazarus hackers are leveraging post-quantum cryptography (ML-KEM-1024) in Operation FlashHole to conceal malware payloads and communications from security tools, targeting South Korean organizations.
A critical vulnerability in Signal's open-source RingRTC library allowed attackers to prevent users from ending calls, potentially keeping microphones and cameras active.
An attacker was observed attempting to misuse an exposed Flowise honeypot, probing for credentials and trying to create workflows to contact external infrastructure, indicating a growing trend of weaponizing AI tools.
The capital city of South Carolina is responding to a cyberattack that has impacted multiple government systems, including a key platform for citizen services.
Fingerprint's new Agentic Installation leverages AI coding assistants to enable developers to deploy device intelligence for fraud detection in minutes.
SentinelOne introduces Singularity Agentic Detection and Response (ADR) to provide visibility, governance, and real-time threat prevention for AI agents operating within enterprise environments.
A woman faces years in prison after an identity thief used her personal information to open a Cash App account, which was then used to receive funds from a scam.
Broadcom's new Arcot Scam Defense feature integrates with 3-D Secure to detect and block AI-driven social engineering attacks targeting cardholders during online transactions.
Anthropic's Claude Security now offers continuous code scanning and automatic fix tracking to help security teams manage vulnerabilities in evolving software.
Splunk and SolarWinds have issued urgent security advisories for critical vulnerabilities in their products, enabling remote code execution and data exfiltration.
Atlassian has released a significant security update addressing 176 vulnerability entries, including 14 critical and 162 high-severity issues, primarily affecting third-party components in its popular collaboration and development tools.
An opinion piece argues that traditional encryption and system security are insufficient, advocating for vaultless, keyless pseudonymization to protect data in use.
A major US pharmacy chain's IT department and external auditors engaged in a heated dispute over the use of 'password' as the enable password on a critical edge firewall.
Two customers are suing Coco Robotics and Serve Robotics, alleging their delivery robots illegally scanned faces and hands without consent, violating Illinois' Biometric Information Privacy Act (BIPA).
Key findings • 25 WordPress plugins disclosed with vulnerabilities on October 22, 2026, within a two-hour window. • Vulnerabilities span Stored XSS, Missing Authorization, SQL Injection, Auth…
Anthropic's Frontier Red Team leveraged AI to uncover 493 security issues across 25 open-source projects, including 94 instances where critical security controls were removed without warning.