Stories

Every story we’ve synthesized.

Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,722 stories synthesized.

breach1 source

Scattered Spider-Style Crew Hijacks DNS MX Records to Breach Enterprises in Minutes

A threat actor group with tactics similar to Scattered Spider is hijacking DNS MX records to redirect enterprise email traffic to attacker-controlled servers, enabling credential theft and network compromise within minutes.

May 28, 2025 · updated May 18, 2026

patch1 source · 10 CVEs

GitLab Patches High-Severity DoS and SAML 2FA Bypass in Emergency Release

GitLab released versions 18.0.1, 17.11.3, and 17.10.7 on May 21, 2025, fixing multiple security vulnerabilities including a high-severity unauthenticated denial-of-service flaw and a SAML response manipulation bug that bypasses two-factor authentication.

May 21, 2025 · updated May 20, 2026