Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,173 stories synthesized.
A new attack class named NatJack, presented at Black Hat USA 2026, manipulates network address translation (NAT) connection state to hijack TCP sessions and spoof DNS responses.
Microsoft and Apple have released separate security advisories and patches to address critical vulnerabilities affecting their respective platforms and services.
A new attack technique allows malware to leverage Windows Hello for Business keys for persistent access to Microsoft Entra ID without user interaction or administrator privileges.
Ransomware attacks saw a significant 19% increase in July, with finance, technology, and healthcare industries bearing the brunt of the surge.
The Atuin tool revolutionizes Linux shell command logging by storing history in a SQLite database, offering enhanced context and cross-machine synchronization, which presents both opportunities and challenges for digital forensics.
Unlimited Technology Systems has reported a significant data breach affecting 3.8 million individuals, with attackers accessing sensitive personal, medical, and health insurance information.
Threat actor TeamPCP has been linked to Redis-related attacks since 2020, predating their later supply chain compromise campaign, indicating a long-term focus on exploiting internet-facing systems.
Microsoft's July 2026 Patch Tuesday addressed an unprecedented number of vulnerabilities, with over 600 CVEs across its product portfolio, including a record 405 for Windows 11.
Internet-connected fuel tank gauges in the US have seen their exposure drop by over 50% in three months, following urgent advisories and suspected nation-state activity.
A new web font technology, ShieldFont, aims to protect online content from AI-driven scraping by presenting different text to human readers than to automated bots.
New research from Brigham Young University indicates that AI-generated spear-phishing text messages are highly effective, even fooling cybersecurity professionals.
Anthropic has significantly improved Claude Fable 5's biology safety classifiers, reducing false positives by 85% and enhancing user experience for legitimate health and educational queries.
Key findings • Microsoft patched 17 vulnerabilities on August 7, 2026, across its product suite. • Four vulnerabilities received a maximum CVSSv3 score of 10.0, including critical flaws in Te…
Key findings • CVE-2026-8037, affecting Progress software, is now in CISA's KEV catalog. • The vulnerability is confirmed to be under active exploitation by threat actors. • Immediate pat…
The USENIX Security Symposium saw a record 3,030 paper submissions, with organizers implementing measures against AI-generated fake references and misuse of AI in reviews.
Cybercriminals are increasingly employing agentic AI to automate network intrusions, evolve malware, and scale operations, posing a significant challenge to traditional security defenses.
Check Point Research has discovered five critical vulnerabilities in Cloudflare's workerd runtime, impacting both Cloudflare Workers and Code Mode, with potential for sandbox escapes and cross-tenant data theft.
Key findings • Five FFmpeg vulnerabilities disclosed on August 6, 2026, ranging from Medium to High severity. • Two High severity flaws (CVE-2026-70632, CVE-2026-70628) involve heap corruptio…
Key findings • 25 Linux kernel vulnerabilities disclosed in a single batch on August 5-6, 2026. • Flaws span multiple subsystems including x86, KVM, USB, networking, and file systems. • V…
Key findings • 25 CVEs disclosed together for Chromium on August 6, 2026, including 3 Critical and 20 High severity flaws. • Multiple use-after-free vulnerabilities across various components …
Key findings • Google Chrome 151 patched 25 vulnerabilities disclosed on August 6, 2026, including critical flaws. • Multiple use-after-free vulnerabilities were found across various Chrome c…
Researchers have discovered a novel attack vector using CSS to execute arbitrary code within webmail clients by exploiting sanitization flaws, bypassing traditional security measures.
WordPress 7.0.3 has been released with fixes for numerous security flaws, including pre-authentication XSS, privilege escalation, and SSRF, urging immediate updates for all users.
The SilverFox malware campaign has been observed targeting an industrial manufacturer, employing sophisticated techniques like DLL sideloading and vulnerable kernel drivers to disable security tools and deploy ValleyRAT.