Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Key findings • Seven Linux kernel vulnerabilities disclosed together on August 26, 2026, affecting the Android SDK. • Vulnerabilities span input handling, driver validation, and core kernel s…
Key findings • Six vulnerabilities disclosed in Zephyr RTOS between August 22-26, 2026, impacting networking, Bluetooth, and drivers. • Medium severity flaws found in PTP message parsing (CVE…
A data breach claimed by ShinyHunters affecting Carhartt customers has been significantly downsized by analysis, with synthetic data found to have inflated the number of affected individuals.
CISA's latest vulnerability review emphasizes that most cyberattacks exploit basic software weaknesses, urging a shift towards proactive Secure by Design principles.
Key findings • GitLab EE patched five vulnerabilities on August 26, 2026, including one High severity command execution flaw. • Vulnerabilities addressed include improper authorization, unaut…
Key findings • GitLab EE patched three vulnerabilities on August 26, 2026, in versions 19.1.7, 19.2.5, and 19.3.1. • Vulnerabilities include improper authorization, unauthorized terminal acce…
Key findings • Four GIMP vulnerabilities disclosed between Aug 24-26, 2026, impacting image format plugins. • Vulnerabilities range from Medium (CVE-2026-79902, CVE-2026-80101, CVE-2026-78475…
Key findings • 25 WordPress plugins and themes had vulnerabilities disclosed on August 26, 2026. • Critical RCE in Avada theme (CVE-2026-18431) and unrestricted file upload in ERP plugin (CVE…
Iranian threat actor Tortoiseshell, also known as Mirage Kitten, has enhanced its espionage capabilities with a new Windows backdoor and a reverse SSH tunneling utility, broadening its attack vectors against critical sectors.
A new phishing-as-a-service toolkit, NovaCookies, is leveraging genuine DocuSign notifications to trick users into revealing Microsoft 365 credentials and session cookies.
A joint Tenable-SentinelOne analysis reveals that both state-sponsored actors and cybercriminals are independently exploiting the same edge infrastructure vulnerabilities, targeting the same products and vendors.
Adobe and Nvidia have released security advisories patching a significant number of vulnerabilities, including critical flaws in AI products and creative software.
Key findings • 25 vulnerabilities disclosed across Apache Tomcat, Camel, Hive, APISIX, Allura, and DolphinScheduler between Aug 24-26, 2026. • Critical authentication bypass and authorization…
A two-year investigation into educational technology apps used by Utah schools revealed that over half collected data beyond their privacy agreements, with many transmitting student information to advertisers.
Consumer baby monitors are increasingly incorporating AI to track infant development, expanding surveillance into children's lives and raising significant privacy concerns.
Two critical vulnerabilities in Kaltura's mwEmbed HTML5 video player library, CVE-2026-19913 and CVE-2026-19912, remain unpatched, enabling unauthenticated remote attackers to read arbitrary files and execute code on affected servers.
CISA reports that over 100 internet-exposed U.S. water systems were targeted in cyberattacks during July, linked to Iran-backed actors exploiting operational technology vulnerabilities.
Key findings • Two Critical and one High severity vulnerabilities disclosed for Grav Plugin API and Login plugin. • CVE-2026-80203 bypasses API-key scope enforcement on user management endpoi…
An advanced AI agent, GPT 5.6-Cyber, demonstrated the ability to escape a QEMU/KVM virtual machine multiple times by exploiting kernel vulnerabilities and zero-days in QEMU.
Researchers successfully replicated a real-world gym booking exploit using the Claude Opus 4.6 AI agent, demonstrating its ability to bypass client-side limits and cancel other users' reservations.
A sophisticated phishing campaign is exploiting legitimate remote monitoring and management (RMM) tools like GoTo Resolve and LogMeIn Rescue to gain unauthorized remote access to victim systems across 46 countries.
SonicWall has disclosed two vulnerabilities in its NetExtender Linux client, including a critical path traversal flaw allowing arbitrary file writes as root.
Cisco Talos research reveals that selecting AI models for Security Operations Centers requires balancing effectiveness, cost, and consistency, as higher reasoning effort doesn't always yield better results.
Q2 2026 witnessed an unprecedented rise in CVEs and exploit releases, fueled by AI's dual role in vulnerability discovery and rapid exploitation, particularly impacting Linux networking and Windows Defender.