Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,178 stories synthesized.
Symantec researchers have discovered a sophisticated AI agent designed to execute entire cyberattacks autonomously, leveraging hijacked large language models (LLMs) for reconnaissance, exploitation, and more.
Industrial Defender's latest release integrates internal network security monitoring (INSM) with its existing endpoint intelligence, providing a comprehensive solution for NERC CIP-015 compliance and prioritizing remediation efforts.
Cloudflare and Commerce.com are integrating WebMCP, a proposed browser standard, to enable AI agents to interact with e-commerce storefronts more reliably.
Tenable has upgraded its AI security detectors to natively support nine additional languages, moving beyond English-only analysis to improve threat detection accuracy and speed.
Google Chrome's latest stable release, version 156, includes patches for 353 security vulnerabilities, with a strong emphasis on memory safety issues.
A sophisticated phishing operation impersonates a legitimate Amazon Music and YouTube partnership to steal YouTube creators' Google account credentials.
Rust 1.100's new Cargo security cooldown feature allows developers to set a minimum age for new dependencies, providing a crucial window to vet packages and prevent supply-chain compromises.
A China-aligned threat group, dubbed Bronze Sandcastle, has been actively targeting organizations in Asia and Africa since mid-2025, consistently employing a distinctive DLL sideloading technique using Sandboxie to deploy backdoors.
Ransomware attacks saw a 50% year-over-year increase in Q3 2026, driven by intense competition between The Gentlemen and Qilin gangs who are increasingly prioritizing data exfiltration over encryption.
A publicly accessible server has exposed detailed chat logs, credentials, and source code used by ransomware operators, revealing their workflow and links to INC Ransomware and The Gentlemen Ransomware.
A critical flaw in Signal's RingRTC library could allow attackers to continue listening to users even after a call has been terminated.
Nvidia has introduced the OpenShell Reference Architecture, a framework designed to manage and secure artificial intelligence agents, addressing growing concerns about their potential to operate beyond defined boundaries.
Oracle's latest Critical Patch Update addresses 1,295 vulnerabilities, with a CVSS 10.0 flaw in E-Business Suite Workflow allowing unauthenticated takeover.
The European Commission is investigating Booking.com under the Digital Services Act, citing concerns over rampant fraud, phishing, and smishing on the travel booking platform.
While AI can generate attack vectors, the surrounding 'harness' infrastructure is crucial for ensuring safe execution, accurate results, and practical application of AI in penetration testing.
A sophisticated attack saw over 300 Tor exit relays compromised in early October, redirecting SSH connections to malicious servers designed to steal user login credentials.
Research reveals Chinese AI coding models produce code with a higher likelihood of vulnerabilities when instructed to develop for Western entities, highlighting potential geopolitical risks in AI-assisted development.
Threat actors are increasingly subverting trusted transactional email pipelines from major retailers like Staples and Dell to deliver social engineering scams, bypassing traditional security measures.
Microsoft has significantly revised its Azure bug bounty program, increasing maximum payouts for thoroughly documented vulnerability reports to $40,000.
Microsoft has launched a new command-line tool, the OneDrive Sync Client CLI, empowering IT administrators with granular control and visibility over OneDrive sync deployments across enterprise environments.
ThreatLocker's new Zero Trust AI Control (ZTAIC) offers organizations granular oversight of AI agent access and execution, enforcing a zero-trust security model for these powerful tools.
Apple's Safari and WebKit are introducing new privacy protections to block identity resolution services from converting user email addresses into persistent tracking IDs.
Apache Tomcat has released patches for eight security vulnerabilities affecting its 11.0.x, 10.1.x, and 9.0.x branches, with three critical flaws enabling authentication bypass and cross-user data exposure.
A new ranking of the top 10 File Integrity Monitoring (FIM) tools for 2026 emphasizes noise discipline and detection depth, with Fortra's Tripwire leading.