Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,452 stories synthesized.
Experian's latest report reveals AI is empowering fraudsters with increasingly convincing tactics across multiple digital channels, complicating efforts to detect fraud and verify legitimate identities.
Rapid7's Q2 2026 Threat Landscape Report reveals a twofold increase in high- and critical-severity vulnerability disclosures, straining security teams and highlighting the need for exposure-based prioritization over traditional CVSS scoring.
In a rare low-tech maneuver, T-Mobile's security team physically severed a network cable to expel Chinese state-backed hackers from its systems after months of unsuccessful remote hunting.
Key findings • Six Drupal security advisories were disclosed simultaneously on August 20, 2026. • All advisories are detailed on the official Drupal security page. • Users should consult …
Mandiant reports that distinct Russian threat clusters are employing sophisticated phishing and malware campaigns to compromise accounts of individuals relevant to Russian interests.
Key findings • Two Trueconf vulnerabilities, CVE-2026-72529 and CVE-2026-72530, were added to CISA KEV. • Both flaws are confirmed to be under active exploitation in the wild. • No ransom…
Key findings • 21 denial-of-service vulnerabilities disclosed in Wireshark on August 19, 2026. • Flaws affect multiple protocol dissectors including X.509IF, C12.22, RRC, and Kerberos. • …
US federal agencies issue a joint alert warning of active exploitation of Siemens S7 Series PLCs in critical infrastructure using AI-generated code, highlighting a new threat vector for industrial control systems.
Key findings • 25 CVEs disclosed on August 19, 2026, affecting Splunk MCP Server, AI Toolkit, Kafka Connect, Enterprise Security, and SOAR apps. • Critical RCE vulnerability (CVE-2026-76404) …
Key findings • 18 Cisco vulnerabilities disclosed on August 19, 2026, impacting multiple product lines. • Five critical vulnerabilities in Crosswork and Secure Workload platforms, with CVSS s…
Key findings • 18 vulnerabilities disclosed for Splunk App Soar on August 19, 2026. • Multiple vulnerabilities involve cleartext exposure of passwords and sensitive credentials in various app…
Key findings • 25 vulnerabilities disclosed simultaneously for Splunk Enterprise on August 19, 2026. • Flaws impact multiple versions, with patches available in 10.4.2, 10.2.6, 10.0.9, and 9.…
Key findings • Microsoft patched four vulnerabilities between August 17-19, 2026, including a critical command injection flaw in Copilot. • CVE-2026-24301, nicknamed 'CoSnitch', allows data e…
Key findings • 25 IBM vulnerabilities disclosed on August 19, 2026, affecting AIX, PowerVM, System Storage, and more. • Multiple critical vulnerabilities in AIX and PowerVM allow for remote c…
Attackers are increasingly leveraging AI tools for semi-autonomous cyber intrusions, data theft, and ransomware deployment, leaving behind identifiable operational security mistakes and AI-generated code.
Key findings • High-severity CVE-2026-9771 impacts flash_copy() system call in userspace-enabled builds. • Medium-severity CVE-2026-12631 involves improper validation in Zephyr kernel thread …
A new AI platform, 'Kriminal,' offers potent cybercrime tools like social engineering and OSINT scanning, despite official prohibitions, raising alarms in the cybersecurity community.
Key findings • 17 IBM Power Systems Firmware vulnerabilities disclosed on August 19, 2026. • Multiple Critical and High severity flaws allow for arbitrary code execution and administrative co…
Key findings • 25 vulnerabilities disclosed simultaneously for IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 on August 19, 2026. • Multiple critical vulnerabilities (CVSSv3 9.8) allow for remote…
Key findings • 25 vulnerabilities disclosed simultaneously for IBM AIX 7.2, 7.3, and IBM PowerVM VIOS 4.1 on August 19, 2026. • Multiple critical vulnerabilities (CVSSv3 9.8) allow for remote…
Enterprises face escalating risks as cybercriminals increasingly exploit trusted vendor relationships to infiltrate networks, overwhelming traditional security measures.
Key findings • Ten vulnerabilities in FreeRDP were disclosed on August 19, 2026, ranging from Medium to High severity. • Issues include improper buffer validation, use-after-free, division by…
US Immigration and Customs Enforcement (ICE) has reminded its agents not to wear Meta smart glasses at work, citing existing policy against personal body-worn cameras.
Electronic health record provider CareCloud has disclosed a data breach affecting 3,756,469 individuals, with sensitive patient information exfiltrated over an eight-day period.