Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,283 stories synthesized.
Wireshark 4.6.8 has been released, addressing 28 security vulnerabilities, with a significant focus on nine flaws within its file parsers that could be exploited by malicious capture files.
Researchers have discovered LoongLeak, a critical cache side-channel vulnerability in Chinese Loongson processors, enabling unprivileged attackers to steal sensitive data.
Researchers tested the Gemma4 large language model for analyzing malware hashes from DShield sensors, finding its insights valuable for identifying threat tactics and prioritizing security actions.
The rapid expansion of data centers to meet AI demand is creating significant operational technology (OT) security risks, leaving critical infrastructure vulnerable.
A ransomware attack has severely disrupted a Canadian hospital's facility management systems, impacting critical infrastructure such as doors and HVAC, highlighting growing OT risks in healthcare.
Key findings • 25 MongoDB vulnerabilities disclosed together, impacting Server, BI Connector, and Schema Manager. • Critical flaw (CVE-2026-19001) in BI Connector ODBC Driver allows memory co…
Rapid adoption of artificial intelligence is creating significant blind spots for security teams, making it difficult to track AI agents and their actions across enterprise networks, according to Axonius CEO Joe Diamond.
Key findings • 22 vulnerabilities in Siyuan Note disclosed together on August 12, 2026, patched in v3.7.4. • Multiple High severity flaws related to authentication bypass and information disc…
Key findings • GitLab released updates for 9 vulnerabilities on August 12, 2026, affecting CE/EE versions. • High-severity flaws include XSS in analytics dashboards and privilege escalation v…
Researchers have demonstrated that certain out-of-order RISC-V processors, including SiFive P550 and T-Head Xuantie variants, are susceptible to multiple Spectre attack variants, capable of leaking arbitrary kernel memory.
Key findings • 17 vulnerabilities disclosed in JFrog Artifactory on August 12, 2026, ranging from Medium to High severity. • Several high-severity flaws allow unauthorized access to metadata,…
Palo Alto Networks has released security updates for 11 vulnerabilities affecting its PAN-OS, GlobalProtect, and Prisma Access products, with CVSS scores ranging from 1.1 to 7.2.
AI security startup Mindgard has raised $30 million in Series A funding to scale its platform, which uses automated red-teaming to find vulnerabilities in AI models and applications.
Suspected China-linked threat actors have executed what security researchers are calling the first fully autonomous cyberattack against a foreign government, utilizing open-source AI agents to breach Taiwanese government websites and critical infrastructure.
Key findings • Five vulnerabilities in Progress WhatsUp Gold disclosed on August 12, 2026. • Includes a critical RCE flaw (CVE-2026-65941) and an XSS vulnerability (CVE-2026-65937). • Pat…
WordPress has fixed a critical vulnerability allowing logged-in authors to execute arbitrary code by uploading specially crafted files disguised as images, exploiting flaws in the Imagick extension's handling of file types.
Adobe has released urgent security updates for ColdFusion 2025 and 2023, patching multiple critical vulnerabilities including a CVSS 10.0 OS command injection flaw.
WhatsApp is rolling out an optional 'Scam Alert' feature that uses on-device machine learning to detect and warn users about scam messages without compromising privacy or end-to-end encryption.
A new Ransomware-as-a-Service (RaaS) platform named Eclipse Ransomware has emerged, developed in Rust and C++ to target a wide array of enterprise systems including Windows, Linux, ESXi, and Nutanix.
The Linux kernel's process accounting feature, enabled via the 'accton' command, provides detailed logging of process termination for system auditing and security monitoring.
The Colombian Ministry of Justice was hit by ransomware, disrupting operations just days before a presidential transition, highlighting a growing trend of attacks on Latin American government entities.
Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities, with a critical focus on three zero-days, including one exploited by the Lazarus Group.
Signal has launched an automatic key verification feature to enhance end-to-end encrypted chat security by detecting potential tampering.
A widespread operation has compromised over 737 Chrome extensions, masquerading as free VPNs, to reroute user traffic through attacker-controlled SOCKS5 proxies.