Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,611 stories synthesized.
Check Point's weekly threat intelligence report details a breach of FBI Director Patel's personal Gmail by Iranian group Handala Hack, a ransomware attack on Spain's Port of Vigo, and critical patches for Cisco and Citrix products.
The UK National Cyber Security Centre has issued an urgent alert over CVE-2025-53521, a critical unauthenticated remote code execution vulnerability in F5 BIG-IP Access Policy Manager that is being actively exploited in the wild.
A new malware campaign called DeepLoad uses ClickFix social engineering and AI-generated obfuscation to steal enterprise credentials, with a WMI-based persistence mechanism that re-infects systems three days after removal.
A critical out-of-bounds read vulnerability in Citrix NetScaler ADC and Gateway is being actively exploited in the wild, with researchers confirming attacks targeting SAML Identity Provider configurations.
The European Commission confirmed a data breach on March 24 affecting its Europa.eu cloud infrastructure, with extortion group ShinyHunters claiming responsibility for stealing over 350GB of data including emails, DKIM keys, and employee PII.
A local privilege escalation vulnerability in NoMachine, tracked as CVE-2026-5055, allows attackers with low-privileged code execution to gain SYSTEM access via an uncontrolled search path element.
A critical authentication bypass vulnerability in QNAP QHora-322 routers, CVE-2024-13088, was disclosed on March 30, 2026, as part of the Pwn2Own hacking contest, allowing network-adjacent attackers to authenticate using an arbitrary QCloud account without credentials.
A local privilege escalation vulnerability in NoMachine (CVE-2026-5054) allows attackers with low-privileged code execution to gain root access via improper file path validation.
A firewall bypass vulnerability in QNAP QHora-322 routers, reported through the Pwn2Own contest, allows unauthenticated network-adjacent attackers to bypass IPv6 firewall rules on PPPoE connections.
CVE-2026-0955, an out-of-bounds read vulnerability in Digilent DASYLab's DSA file parsing, could allow remote attackers to execute arbitrary code by tricking users into opening a malicious file.
Apple has released a security update to fix CVE-2026-20690, a critical out-of-bounds write vulnerability in the CoreMedia framework that could allow remote code execution on macOS.
QNAP has released a security update for the QHora-322 router to fix an authentication bypass vulnerability (CVE-2025-62845) discovered at Pwn2Own Berlin 2026 by Team DDOS.
A high-severity out-of-bounds read vulnerability in Digilent DASYLab (CVE-2026-0956) allows remote code execution when users open specially crafted DSA files.
A critical out-of-bounds write vulnerability in Digilent DASYLab (CVE-2026-0954) allows remote code execution via malicious DSB files, with a patch now-available patches from the vendor.
A critical out-of-bounds write vulnerability in Digilent DASYLab, tracked as CVE-2026-0957, allows remote attackers to execute arbitrary code by tricking users into opening a malicious DSA file.
A critical command injection vulnerability in aws-mcp-server, CVE-2026-5058, allows unauthenticated remote code execution with a CVSS score of 9.8, and the vendor has rejected the report, leaving no patch available.
A critical integer overflow vulnerability in the vmwgfx driver of Red Hat Enterprise Linux, discovered during Pwn2Own, allows local attackers to escalate privileges to kernel level.
A path traversal vulnerability in QNAP TS-453E devices, disclosed at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as the RR2 administrator by bypassing authentication.
Trend Micro's Zero Day Initiative disclosed an authentication bypass vulnerability in OpenClaw Canvas, tracked as CVE-2026-3690, that allows remote attackers to gain unauthorized access without credentials.
QNAP has patched an authentication bypass vulnerability in QHora-322 routers, disclosed at Pwn2Own, that allows remote attackers to authenticate using an arbitrary QCloud account.
Apple has released a security update addressing CVE-2026-20695, a macOS information disclosure vulnerability in NVRAM variable logging that could allow local attackers to access sensitive data and potentially chain with other flaws for kernel-level code execution.
A path traversal vulnerability in OpenClaw's canvas gateway endpoint allows authenticated remote attackers to read arbitrary files on the server, potentially exposing sensitive configuration and user data.
A vulnerability in NoMachine (CVE-2026-5053) allows local attackers to delete arbitrary files as root due to improper validation of a user-supplied path in environment variable handling.
A new information disclosure vulnerability in the QNAP TS-453E NAS device, discovered during Pwn2Own, allows network-adjacent attackers to leak sensitive data via error messages, even bypassing authentication.