Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,611 stories synthesized.
Google Cloud's H1 2026 Threat Horizons Report shows vulnerability exploits now account for 44.5% of initial cloud access vectors, up from 2.9%, as attackers weaponize flaws like React2Shell within 48 hours of disclosure.
Dutch intelligence agencies have uncovered a large-scale Russian state-sponsored campaign targeting Signal and WhatsApp accounts of military, government, and journalist personnel, with some Dutch government employees already compromised.
7-Eleven has confirmed a data breach after the ShinyHunters threat actor claimed to have stolen over 600,000 Salesforce records and demanded a ransom.
ESET researchers reveal that Sednit (APT28) reactivated its advanced implant team in April 2024, deploying a modern toolkit including SlimAgent, BeardShell, and Covenant against Ukrainian military personnel.
Fortinet has disclosed a high-severity OS command injection vulnerability in the web UI of FortiSandbox Cloud and FortiSandbox PaaS, allowing privileged attackers to execute arbitrary commands.
Fortinet disclosed a format string vulnerability in the fazsvcd daemon affecting FortiAnalyzer and FortiManager, allowing remote privileged attackers to execute arbitrary code.
Fortinet disclosed an argument injection vulnerability in FortiDeceptor's WEBUI that allows super-admin attackers with CLI access to delete sensitive files via crafted HTTP requests.
Fortinet has disclosed a stack-based buffer overflow vulnerability in the FortiManager fgtupdates service that could allow remote unauthenticated attackers to execute unauthorized commands.
Fortinet has disclosed a cleartext storage vulnerability in debug logs of FortiMail, FortiVoice, and FortiRecorder that allows an authenticated administrator to extract plaintext user secrets via CLI commands.
Fortinet disclosed an improper control of interaction frequency vulnerability in FortiWeb that allows remote unauthenticated attackers to bypass authentication rate-limiting and brute-force admin logins.
Fortinet disclosed a low-severity vulnerability in FortiManager and FortiAnalyzer that allows attackers to bypass brute-force lockout protections by exploiting a race condition in the authentication mechanism.
Fortinet disclosed a buffer overflow vulnerability in FortiSwitchAXFixed that lets an unauthenticated attacker on the same adjacent network execute arbitrary code via a crafted LLDP packet.
Microsoft has patched a high-severity local privilege escalation vulnerability in the Windows cdd.dll driver that allows attackers with low-privileged code execution to gain SYSTEM-level access.
Apple has patched a critical out-of-bounds write vulnerability (CVE-2026-20616) in macOS's libusd_ms library that could allow remote attackers to execute arbitrary code via a malicious Alembic file.
Microsoft has released a security update addressing CVE-2026-25181, an out-of-bounds read information disclosure vulnerability in Windows GDI bitmap parsing that could leak sensitive memory.
Apple has released a security update for macOS to fix CVE-2026-20634, an out-of-bounds read vulnerability in the ImageIO framework that can be triggered by a specially crafted SGI image file.
A local privilege escalation vulnerability in Fortinet FortiClient, tracked as CVE-2026-24018, allows attackers to gain root access via a symbolic link attack on shared objects.
Microsoft has released a patch for CVE-2026-23668, a critical local privilege escalation vulnerability in the win32kfull driver that allows attackers to gain SYSTEM privileges.
Apple has released a security update addressing CVE-2026-20675, a critical integer overflow vulnerability in the macOS ImageIO framework that could allow remote code execution via crafted SGI image files.
Microsoft has released a security update for a local privilege escalation vulnerability in the win32kfull driver, tracked as CVE-2026-24285, which allows attackers to gain SYSTEM privileges.
A local privilege escalation vulnerability in Array Networks MotionPro, tracked as CVE-2026-26364, allows low-privileged attackers to gain SYSTEM-level access via incorrect permissions in the ArrayInstallManager DCOM application.
Apple has released a security update for macOS to address CVE-2026-20611, a critical out-of-bounds write vulnerability in the Audio APAC frame decoder that could allow remote code execution with user interaction.
Microsoft has patched a use-after-free vulnerability in the Windows NDIS driver (ndis.sys) that lets low-privileged attackers gain kernel-level code execution.