Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A sophisticated social engineering network operating out of Cambodia has been disrupted by OpenAI, which utilized ChatGPT to conduct a wide array of scams, blending dating personas with financial fraud and impersonations.
AccuKnox introduces AgentZ, a platform designed to simplify the creation, deployment, and governance of AI agents, emphasizing robust security features and flexible infrastructure options.
A newly discovered vulnerability in Apache Log4j2, tracked as #4255, allows attackers to bypass deserialization allowlists and achieve remote code execution in specific, uncommon scenarios.
Cybercriminals are increasingly using artificial intelligence to conduct victim reconnaissance, making sophisticated attacks more accessible and broadening the potential victim pool.
Researchers have developed GPUThor, a novel Rowhammer attack that bypasses ECC protections on NVIDIA workstation GPUs with GDDR6 memory, leading to denial-of-service and privilege escalation to root access.
Despite AI agents appearing in 17 of the top 25 teams, the leading human-only team secured victory at the 2026 Global Cyber Skills Benchmark CTF, indicating AI is not yet closing the skill gap for less experienced competitors.
WatchGuard has disclosed two critical vulnerabilities in its Windows Agent, CVE-2026-57910 and CVE-2026-57909, enabling unauthenticated attackers to execute arbitrary code with SYSTEM privileges.
Adobe has released a Priority 1 security update for Adobe Campaign Classic, addressing three critical vulnerabilities that permit unauthenticated remote code execution.
Key findings • Eight CVEs disclosed simultaneously for Drupal on August 27, 2026. • Drupal security advisory released covering all eight vulnerabilities. • Users should consult Drupal.org…
Apache Tomcat 11.0.25 addresses critical vulnerabilities allowing security bypass and server crashes, urging immediate upgrades for affected users.
Key findings • CVE-2026-53362, a Google product vulnerability, is confirmed under active exploitation. • CISA added the flaw to its Known Exploited Vulnerabilities (KEV) Catalog on August 27,…
Key findings • Ten malicious npm packages were disclosed simultaneously. • All advisories were published within a single minute on August 26, 2026. • Every package was newly published jus…
President Trump signed an executive order declaring a national emergency to prohibit foreign-produced equipment and software deemed a national security risk in the U.S. bulk-power system.
The Iranian APT group Dark Caracal has introduced GoCaracal, a new modular malware framework designed to bolster its cyber espionage operations, particularly against targets in the Middle East.
PortSwigger's James Kettle has developed an AI-powered tool to discover new HTTP request-smuggling vulnerabilities, enhancing web application security.
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, citing evidence of active exploitation and reinforcing the need for prioritized remediation.
Ubiquiti has addressed 21 critical vulnerabilities across its UniFi product line, enabling attackers to bypass authentication, inject commands, and escalate privileges.
Two critical vulnerabilities in Next.js, CVE-2026-75604 and GHSA-2xp9-vwfh-vxw4, allow unauthenticated remote code execution, impacting Windows-hosted applications and AVIF image processing.
Microsoft details three investigations where attackers targeted AI infrastructure, including LiteLLM gateways, RAGFlow, and Kestra, exploiting vulnerabilities to steal credentials and monetize compute resources.
The U.S. Department of Justice has dismantled Chinese state-backed hacking tools, QScan and QTRouter, allegedly used to compromise federal agencies including the Federal Reserve and DOJ.
Regularly auditing administrative roles in Microsoft Entra ID is essential for maintaining security hygiene and preventing unauthorized access, according to SANS ISC.
Medical device manufacturer Boston Scientific is experiencing a global operational disruption due to an ongoing cybersecurity incident that began Tuesday, impacting IT systems and business applications.
A Palo Alto Networks Unit 42 analysis of 405 AI-linked malware samples reveals that while AI may speed up development, it has not yet significantly improved malware's success rate in reaching production environments.
Key findings • 25 Linux kernel vulnerabilities disclosed together on August 26, 2026. • Vulnerabilities span critical subsystems including networking, input handling, and graphics drivers. …