Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 323 stories synthesized.
CISA and international partners have released an advisory on defending against China-nexus covert networks that exploit compromised infrastructure, noting a shift in threat actor tactics.
CISA has released multiple ICS advisories detailing critical vulnerabilities in products from Hardy Barth, Siemens, Zero Motorcycles, SenseLive, Intrado, Yadea, and Milesight, with potential impacts ranging from remote code execution to complete system compromise.
CISA has issued multiple ICS advisories for critical vulnerabilities in IP cameras, GNSS receivers, booking systems, and network analysis tools.
CISA and federal partners have released new guidance on applying Zero Trust security principles to Operational Technology (OT) environments.
CISA has added the critical cPanel & WHM vulnerability CVE-2026-41940 to its Known Exploited Vulnerabilities (KEV) Catalog due to active exploitation.
CISA has issued six new ICS advisories detailing critical vulnerabilities in various ABB industrial products, ranging from authentication bypasses to remote code execution risks.
CISA and international partners have released new guidance on the secure adoption and management of agentic artificial intelligence systems.
CISA has added the Linux kernel vulnerability CVE-2026-31431 to its Known Exploited Vulnerabilities (KEV) Catalog following reports of active exploitation.
The newly identified ConsentFix v3 attack technique is targeting Microsoft Azure environments by automating the abuse of OAuth consent flows.
A new phishing kit called Bluekit is currently under development, featuring an integrated AI assistant to automate domain registration and phishing operations.
Cybersecurity company Trellix has confirmed a breach of its source code repository, prompting an investigation by forensic experts and law enforcement.
