Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Decentralized finance platform Term Finance suffered an $8.5 million exploit targeting its governance system, while BounceBit announced it will cease operations on its own blockchain following a separate $3 million theft.
Financially motivated Chinese-speaking threat actor TA4922 is employing the modular PackClient remote access trojan, acquired from commodity marketplaces, in sophisticated phishing campaigns targeting organizations in China and India.
Over 100 leading technology, finance, and cybersecurity firms have signed an open letter calling for an urgent global acceleration of AI-driven cybersecurity defenses.
CISA has added CVE-2023-49105 (ownCloud), CVE-2026-53362 (Linux Kernel), and CVE-2026-66384 (JFrog Artifactory) to its Known Exploited Vulnerabilities Catalog.
A critical authentication bypass vulnerability (CVE-2026-76581) in the WPMU DEV Dashboard WordPress plugin, affecting versions up to 5.0.1, allows unauthenticated attackers to gain administrator access when Hub Single-Sign On is enabled.
Black Hat USA 2026 discussions centered on the burgeoning risks of agentic AI and raised critical questions about the future and efficacy of the CVE program.
Key findings • Seventeen Denial of Service (DoS) vulnerabilities were disclosed for Free5gc on August 27, 2026. • The vulnerabilities affect Free5gc versions 4.0.1 and 4.1.0, stemming from in…
A class action lawsuit alleges xAI's Grok AI model was trained on real images and videos of child sexual abuse material, leading to the generation and distribution of deepfakes on X.
Cloudflare has dramatically reduced memory consumption for its 1.1.1.1 DNS service by over 50% per entry, reclaiming approximately 100 terabytes of RAM across its global infrastructure.
Corporate executives' Social Security numbers are being sold on dark web marketplaces for as little as 25 cents, according to new threat intelligence from Rapid7.
A new social media startup, Operation Bluebird, Inc., has launched an early access platform named Twitter.now, seeking to revive the Twitter brand abandoned by Elon Musk's X Corp.
CISA has issued an advisory detailing a critical denial-of-service vulnerability affecting multiple Mitsubishi Electric CNC series products, urging immediate patching.
CISA has issued an advisory detailing three critical vulnerabilities in Xiiaozet LK100W devices, potentially allowing attackers to gain full control.
A medium-severity vulnerability in Rockwell Automation's OTTO Fleet Manager could allow attackers to more easily brute-force password hashes if they obtain an unencrypted system backup.
CISA has issued an advisory detailing multiple critical vulnerabilities in Ebyte NA111-M firmware version 9013-2-17, which could allow unauthenticated attackers to fully compromise the device.
CISA has issued an advisory detailing multiple critical vulnerabilities in All-Line Equipment Company's Fuel-Boss systems, potentially allowing remote attackers to execute arbitrary commands.
CISA has identified two critical vulnerabilities in Applied Systems Engineering's ASE2000 V2 Communications Test Set, versions 2.25 through 2.37, potentially allowing attackers to compromise sensitive industrial control systems.
A critical vulnerability in TP-Link Kasa smart home devices allows local network attackers to disrupt functionality by intercepting, replaying, or forging commands.
The rapid growth of the personal AI assistant project OpenClaw has forced its maintainers to adapt their review processes and rethink contributor trust in the age of AI-generated code.
Microsoft's August 2026 security updates introduce new capabilities for AI agent security, enhanced data protection for Copilot, and centralized governance for multi-tenant environments.
CISA has issued an advisory for multiple Mitsubishi Electric CC-Link IE TSN products affected by CVE-2025-3511, which can lead to denial-of-service conditions.
The Qilin ransomware gang claims to have breached the Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF), prompting a federal investigation into a major cybersecurity incident.
A new report reveals a 296,000-device IoT botnet targeting over 100 water systems, alongside a critical SharePoint RCE vulnerability chain.
A recent survey highlights that over half of IT professionals lack full confidence in their organization's ability to recover from ransomware attacks, primarily due to insufficient backup testing.