Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,290 stories synthesized.
WhatsApp is rolling out an optional 'Scam Alert' feature that uses on-device machine learning to detect and warn users about scam messages without compromising privacy or end-to-end encryption.
A new Ransomware-as-a-Service (RaaS) platform named Eclipse Ransomware has emerged, developed in Rust and C++ to target a wide array of enterprise systems including Windows, Linux, ESXi, and Nutanix.
The Linux kernel's process accounting feature, enabled via the 'accton' command, provides detailed logging of process termination for system auditing and security monitoring.
The Colombian Ministry of Justice was hit by ransomware, disrupting operations just days before a presidential transition, highlighting a growing trend of attacks on Latin American government entities.
Microsoft's August 2026 Patch Tuesday fixes 421 vulnerabilities, with a critical focus on three zero-days, including one exploited by the Lazarus Group.
Signal has launched an automatic key verification feature to enhance end-to-end encrypted chat security by detecting potential tampering.
A widespread operation has compromised over 737 Chrome extensions, masquerading as free VPNs, to reroute user traffic through attacker-controlled SOCKS5 proxies.
A new report reveals that while frontline security teams embrace AI for its efficiency gains, executive leaders are increasingly concerned about how AI vendors manage sensitive security data.
A sophisticated threat actor known as City-Forum is exploiting unauthenticated guest access to stealthily enumerate and exfiltrate data from Salesforce and ServiceNow instances.
Britain's ACRO criminal records office experienced three data breaches over two years due to unread antivirus alerts and an unpatched content management system, exposing sensitive data.
A surge in compromised credentials is devaluing personal data, while initial access broker listings for enterprise networks skyrocket, signaling a shift towards high-value targets.
Key findings • 40 malicious npm packages disclosed on August 12, 2026, within a 25-minute window. • 34 packages belong to a coordinated campaign using @years17 and @years18 npm scopes. • …
A sophisticated Android fraud operation combines the SpyNote RAT with WindRelay NFC relay malware to drain victim accounts within minutes, leveraging social engineering and live payment data relay.
A newly disclosed flaw in OpenAI, Anthropic, and Google's AI reasoning APIs allowed researchers to extract sensitive data like API keys and passwords from session logs.
Chipmakers Intel and AMD have collectively released patches for more than 80 vulnerabilities, including several high-severity flaws that could lead to privilege escalation and code execution.
Key findings • 40 malicious npm packages were disclosed on August 12, 2026. • All advisories were published within an 11-minute window. • Many packages were newly published on the same da…
Researchers have developed a novel defensive strategy called 'context bombing' that leverages prompt injection techniques to neutralize AI-powered hacking agents.
Microsoft's August 2026 Patch Tuesday addresses 400+ vulnerabilities, including an actively exploited zero-day in AFD.sys and three publicly disclosed flaws.
Crytica Security has unveiled its patented RDAi system, designed to detect unauthorized changes within operational technology (OT) devices in real-time, bolstering critical infrastructure security.
Google Chrome's enhanced anti-abuse measures automatically revoke notification permissions for inactive or suspicious websites, blocking billions of unwanted alerts daily.
A new phishing campaign is distributing fake "New Audio MSG" emails that lead users to a credential-harvesting page disguised as a legitimate Google sign-in portal.
Siemens, Schneider Electric, and Phoenix Contact have released patches for numerous Industrial Control System (ICS) vulnerabilities, with CISA urging prompt application to protect critical infrastructure.
A new report highlights Cloudflare as the top DDoS protection service for 2026, citing its massive network capacity and cost predictability in mitigating record-breaking attacks.
SonicWall has released patches for critical vulnerabilities, including remote code execution and data disclosure flaws, in its discontinued Global Management System (GMS) platform.