Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Wordfence Intelligence's latest weekly report details 240 vulnerabilities across 184 WordPress plugins and 17 themes from August 17-23, 2026, with a significant portion rated high or critical.
Scammers are leveraging the credibility of popular platforms like BuzzFeed and social media to host fake listings, impersonating security brands to lure victims into tech support scams.
Tenable's Chief Security Officer outlines a strategic shift towards an AI-driven exposure management program to unify fragmented security data, mitigate risks from rapid AI adoption, and improve communication of cyber risk to business leaders.
Amazon Web Services has outlined a common attack chain where compromised cloud credentials are used to achieve broad cloud compromise, detailing the phases from initial access to exfiltration.
TeamViewer has addressed CVE-2026-16444, a critical vulnerability allowing authenticated attackers to execute code by manipulating file transfers or clipboard operations.
Rapid7 research reveals 476 compromised SSN records for corporate personnel since early 2026, with over 73% targeting top leadership, traded on three major dark web marketplaces.
A prompt injection vulnerability in Amazon Kiro IDE allows attackers to exfiltrate sensitive data using the tool's AI agentic features.
A suspected Chinese-speaking threat actor has successfully exfiltrated sensitive nuclear and naval data from Philippine organizations by exploiting vulnerabilities in ownCloud and a WordPress plugin.
Manchester Airports Group (MAG) has confirmed a cyber incident involving unauthorized access to customer data linked to bookings and Wi-Fi registrations across its airports.
A new tech support scam is tricking iPhone users with a fake Apple Pay notification designed to mimic legitimate Apple interfaces and alarm users into calling fraudulent support numbers.
The Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF) has confirmed a significant cyberattack, with the Qilin ransomware gang claiming responsibility for compromising a system containing sensitive data on investigation targets.
The UK's National Cyber Security Centre (NCSC) has issued a stark warning about an escalating trend of cyberattacks targeting internet-exposed systems and edge devices, including critical operational technology (OT) infrastructure.
The FBI has issued a warning about the Chinese hacker group QTFY, which is employing a custom-built, distributed hacking ecosystem to exploit vulnerabilities at scale and obfuscate its activities against US infrastructure.
PaperCut Software has issued a critical warning about an unspecified vulnerability in its PaperCut NG and PaperCut MF print management solutions, confirming active exploitation and customer incidents.
Advanced AI models are compressing the time available for defenders to respond to cyber threats, necessitating a fundamental shift in security operations strategies.
A Russian-speaking Aurora ransomware affiliate leveraged the AI coding assistant Cursor to refine attack sequences against over 20 organizations across nine countries.
Australian authorities have arrested two individuals suspected of being part of the notorious TeamPCP cybercrime group, known for its extensive software supply chain attacks.
An open-source remote access trojan, Spark RAT, is targeting Cambodia with diverse lures and employing a vulnerable OPSWAT driver to disable security software.
CISA has added six actively exploited vulnerabilities affecting Microsoft, Linux, Red Hat, and Citrix products to its Known Exploited Vulnerabilities (KEV) catalog, mandating urgent patching.
Meta has reached a landmark $17 billion settlement with 51 state attorneys general to resolve allegations of designing addictive products for minors and violating child privacy laws.
A critical vulnerability in Veeam ONE 13 allows unauthenticated attackers to steal service account credentials through SMB authentication coercion, potentially leading to network compromise.
Kaspersky's latest report reveals a global decrease in blocked malware on industrial control systems, though specific regions and the biometrics sector show rising threats.
Cisco Talos details how JavaScript obfuscation, once a minor technique, is now a prevalent method in phishing kits and malware loaders, demanding deeper analysis beyond simple code beautification.
A sophisticated phishing campaign is employing polymorphic JavaScript obfuscation that, in some instances, causes browsers to hang with 100% CPU utilization due to a flawed global variable implementation.