Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,724 stories synthesized.
Five AsyncAPI npm packages with nearly 3 million weekly downloads were compromised through a GitHub Actions supply chain attack, injecting a remote-access implant.
A large-scale fraud operation has been uncovered, utilizing over 8,400 phishing domains and 6,600 social media scam ads to target Turkish banks and government portals, impersonating dozens of financial institutions.
Picus Security has developed a method to test vulnerability exploitability by analyzing underlying attack techniques, avoiding the risks of live exploit execution.
Dutch intelligence agencies have revealed a widespread Russian cyber-espionage campaign targeting internet-connected cameras across Europe and Ukraine to gather intelligence on NATO logistics and Ukrainian troops.
VMware has released critical security updates for its Avi Load Balancer, addressing seven severe vulnerabilities including remote code execution and authentication bypass flaws.
Pro-Iran hacktivist groups are utilizing Telegram channels to coordinate distributed denial-of-service (DDoS) attacks and hack-and-leak operations, employing the platform for recruitment, target sharing, and propaganda amplification.
Qilin ransomware operators are employing the DCSync technique to steal critical Active Directory credentials, including KRBTGT and NTLM hashes, by exploiting the Directory Replication Service Remote Protocol.
A failed DNSSEC rollover for Albania's .AL TLD caused widespread outages, prompting Cloudflare's 1.1.1.1 resolver to implement a new Extended DNS Error code to signal bypassed validation.
Rapid7 Labs has disclosed CVE-2026-55040, a medium-severity authentication bypass vulnerability in Microsoft SharePoint that, when chained with another RCE flaw, allows unauthenticated attackers to achieve remote code execution.
Two new sophisticated phishing kits, Jalisco and OmegaLord, are actively targeting Microsoft 365 accounts by employing advanced techniques to bypass multi-factor authentication, researchers report.
Researchers at Tracebit have developed 'context bombs' to thwart AI-driven prompt injection attacks by using decoy resources that trigger safety guardrails in offensive AI agents.
A study of 85 popular crypto wallet browser extensions has revealed significant privacy vulnerabilities, allowing for the linking of separate user addresses and cross-site tracking.
SAP has released security updates for 16 vulnerabilities, including three critical flaws in its NetWeaver, Commerce Cloud, and AppRouter products.
Apple warns users about scammers impersonating support and financial institutions via FaceTime to steal sensitive information and drain bank accounts.
SAP's July 2026 Security Patch Day addresses a critical memory corruption flaw in SAP NetWeaver Application Server ABAP, rated CVSS 9.9, alongside other significant vulnerabilities.
Cisco Talos Intelligence Integrations leverage threat intelligence across Cisco products to help defenders combat AI-driven attacks and adaptive malware.
Google Workspace now supports FIDO2 security keys and phone passkeys for Windows login via Google Credential Provider for Windows (GCPW), bolstering organizational security.
Cisco Talos has published research detailing how threat actors exploit Python's popular packaging ecosystem for sophisticated supply-chain attacks.
Key findings • Five Perl-related vulnerabilities disclosed on July 14, 2026, impacting core interpreter and modules. • CVE-2026-58102 and CVE-2026-58101 detail heap read and DoS flaws in Cryp…
Angelo Martino, a ransomware negotiator, has been sentenced to 70 months in prison for leaking client information to the BlackCat/ALPHV ransomware gang, enabling them to extort over $75 million.
xAI's Grok Build coding CLI inadvertently uploaded full Git repositories, including commit history, to xAI's storage instead of just necessary files.
ESET researchers discovered that eleven older versions of Microsoft-signed UEFI boot shims (versions 0.9 and below) can bypass Secure Boot protections, with Microsoft revoking certificates for these specific shims.
ServiceNow has released security updates to address CVE-2026-6875, a critical sandbox escape vulnerability in its AI Platform that allows unauthenticated attackers to execute malicious code remotely.
Over 140 npm packages disguised as Wi-Fi bypass tools were found to secretly enlist visiting browsers into DDoS attacks, researchers reported.