Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,294 stories synthesized.
The SilverFox malware campaign has been observed targeting an industrial manufacturer, employing sophisticated techniques like DLL sideloading and vulnerable kernel drivers to disable security tools and deploy ValleyRAT.
A newly disclosed Linux kernel vulnerability, CVE-2026-64561, permits attackers with kernel privileges within a guest VM to escape KVM isolation and execute code on the host system.
The Business Hall at Black Hat USA 2026 featured a diverse range of cybersecurity vendors and a keynote on AI security, highlighting emerging threats and defense strategies.
HealthEquity's Ajit Gaddam highlights passkeys and biometrics as crucial tools to combat account takeover fraud by replacing vulnerable passwords.
Check Point Research presented two significant findings at Black Hat: a decade-old Windows Defender kernel driver that can be weaponized, and 12 CVEs in AI agent frameworks exploitable via familiar vulnerabilities.
North Carolina Ports experienced a cyberattack that compromised IT systems, leading to a switch to manual operations and prompting an investigation by state officials and the Coast Guard.
Cisco has released critical security updates for its Catalyst SD-WAN and IOS XE Software, addressing 12 vulnerabilities, three of which carry a near-perfect CVSS score of 9.9.
CISA has issued an advisory for a critical vulnerability in Medixant RadiAnt DICOM software that could allow remote code execution if users open a specially crafted DICOM file.
A new Python-based information-stealing malware, Vanta Stealer, is rapidly exfiltrating browser credentials, crypto wallet files, gaming account data, and sensitive documents from Windows users.
GitHub's Dependabot now flags malware across eight package ecosystems, leveraging OpenSSF's shared data to enhance supply chain security.
A browser-based game simulating human oversight of AI coding agents reveals that users approve approximately one-third of malicious requests, highlighting significant risks in human-in-the-loop security models.
CISA has issued an advisory detailing multiple critical vulnerabilities affecting ABB Ability Zenon's IIoT services, which could lead to significant security bypasses, system instability, and data compromise.
CISA has issued an advisory for Johnson Controls Inc. TL280 devices, warning of vulnerabilities related to hardcoded credentials and broken cryptographic algorithms.
Researchers have discovered a novel attack technique called 'Interrupt Injection' that can bypass Spectre v2 defenses on modern Intel and AMD processors, potentially re-enabling speculative execution attacks.
Researchers found critical vulnerabilities in AI coding agents from Anthropic, Google, and OpenAI, enabling remote code execution and supply chain compromises.
Researchers have uncovered a novel attack chain that allows adversaries to compromise enterprise endpoints by exploiting Windows Server Update Services (WSUS) to deliver malicious software.
A new review highlights Tufin as the top firewall management tool for 2026, emphasizing its change automation and compliance features, as the market sees consolidation with Skybox Security's acquisition.
A U.S. congressional report suggests China-controlled telecommunications infrastructure could be exploited by threat actors like Salt Typhoon for future cyber operations.
Cybercriminals are distributing Lumma Stealer via pirated downloads of the movie 'The Odyssey (2026)', aiming to steal saved passwords, payment card details, and cryptocurrency assets.
A sophisticated ad fraud scheme named Papyrus is leveraging seemingly innocuous novel-reading apps to generate fake ad traffic by simulating user interactions in hidden browser windows.
Cloudflare is advocating for a new internet paradigm, the 'Agentic Internet,' designed to accommodate the rise of AI agents as distinct web visitors requiring new standards for identification, interaction, and payment.
Cloudflare introduces Agent Readiness and Answer Engine Optimization (AEO) tools to help websites adapt to the increasing dominance of AI agents in user discovery and interaction.
Cloudflare has launched Kitesurf, a novel browser designed specifically for AI agents, running efficiently on Cloudflare Workers using V8 isolates and WebAssembly.
Cloudflare launches a developer preview of WebMCP, a new browser standard enabling AI agents to interact with websites by exposing tools without origin code changes.