Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
OpenAI has shut down Russian-linked ChatGPT accounts that were actively used to run a sophisticated influence operation, promoting a think tank via AI-generated content.
Iranian threat group MuddyWater is leveraging the legitimate Deno JavaScript runtime to execute its Dindoor backdoor, employing Base64 encoding and anti-analysis techniques to evade detection.
Scammers are using fake Android "interview" apps on Indeed to target job seekers, tricking them into installing spyware that can take over their devices.
Google Chrome 152 addresses 327 security fixes, including 10 critical vulnerabilities like use-after-free flaws in ANGLE, Aura, and Chromecast.
Researchers discovered 28,000 publicly accessible .git repositories containing sensitive data like API keys, bank details, and employee records, posing significant risks to organizations.
Healthcare services company Nutex Health has disclosed a data breach following unauthorized access and exfiltration of sensitive information from its network.
The Core Werewolf threat group is deploying a new C++ remote access trojan, CoreRAT, to gain complete control over compromised Windows systems, marking a significant upgrade to their toolkit.
A new phishing-as-a-service platform, AnonyMousKIT, employs AI voice agents to impersonate Apple Support, targeting owners of stolen Apple devices to bypass Activation Lock.
Companies now perceive AI's ability to discover cyber vulnerabilities as the highest impact emerging risk, surpassing information integrity threats.
Linux, the open-source kernel born from a student's hobby, now powers global infrastructure and faces complex security challenges as its codebase expands.
NVIDIA has released SkillSpector, an open-source tool designed to scan and assess the security risks associated with AI agent skills before deployment.
OpenSSL has released patches for seven vulnerabilities, including a moderate severity heap buffer overflow and several memory exhaustion flaws, affecting widely used versions of the cryptographic library.
A global Microsoft Teams outage disrupted users' ability to join and create meetings, share screens, and access other core features, primarily impacting the Asia-Pacific region.
Key findings • Two Red Hat vulnerabilities, CVE-2015-3246 and CVE-2015-5287, added to CISA KEV. • Both flaws are confirmed to be under active exploitation by threat actors. • No ransomwar…
GitLab has issued urgent patch releases for versions 19.3.1, 19.2.5, and 19.1.7, addressing several security vulnerabilities, most notably CVE-2026-18252 which allows authenticated users to execute arbitrary commands.
Key findings • Linux kernel vulnerability CVE-2022-0995 confirmed actively exploited. • Added to CISA's KEV Catalog on August 26, 2026, signaling urgent threat. • Immediate patching of al…
Key findings • CVE-2019-1068, a Microsoft Windows Task Scheduler privilege escalation flaw, is now in CISA KEV. • The vulnerability is confirmed to be actively exploited in real-world attacks…
Key findings • Citrix CVE-2026-8452 confirmed under active exploitation. • Added to CISA KEV Catalog on August 26, 2026. • Immediate patching and remediation are critical for all affected…
Dozens of healthcare systems are warning patients about phishing scams impersonating Epic's MyChart portal, using fake offers to steal personal information.
Key findings • 25 CVEs disclosed for Google Chrome on August 25, 2026, all fixed in version 152.0.7977.65. • Critical vulnerabilities include multiple 'use after free' flaws allowing arbitrar…
Key findings • 25 vulnerabilities disclosed in a single batch on August 25, 2026, affecting NVIDIA NemoClaw, OpenShell, DGX Spark, and UFM Enterprise. • Multiple OS command injection flaws fo…
Attackers can exploit AI-powered email summarizers using hidden HTML prompts, tricking them into generating false summaries and potentially leading users to malicious content.
A massive leak of Grand Theft Auto VI gameplay footage, attributed to 'CyberLeek,' has escalated into a high-profile data extortion case, with Take-Two Interactive pursuing legal action.
Key findings • 22 vulnerabilities disclosed in OpenEXR between August 24-25, 2026, impacting multiple versions. • Vulnerabilities include high-severity heap out-of-bounds writes and reads, an…