Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,302 stories synthesized.
Cisco has released critical security updates for its IOS XE Software, addressing multiple vulnerabilities including command injection and improper access control flaws that could allow remote attackers to execute unintended commands or bypass authentication.
Maksim Silnikau, the architect behind the Ransom Cartel ransomware-as-a-service (RaaS) operation, has received a 16-year prison sentence for his role in facilitating attacks against at least 18 companies globally.
Key findings • Five vulnerabilities in Keycloak Services disclosed together between August 5-6, 2026. • Two high-severity flaws (CVSSv3 8.8 and 7.4) impact SAML assertion validation and DCR p…
CrowdStrike's 2026 Threat Hunting Report reveals a 4% increase in cyber intrusion activity, driven by attackers exploiting AI tools, software supply chains, and compromised identities.
Chinese router vendor Zbtlink is temporarily halting firmware downloads after researchers claimed its devices contain a backdoor, which the company denies.
Flaws in Apple's WebKit, exploited through passkey features, can inadvertently reveal users' real IP addresses to websites, undermining iCloud Private Relay's privacy protections.
Cisco has released urgent patches for multiple critical vulnerabilities in its Catalyst SD-WAN Software, including flaws with CVSS scores of 9.9, affecting all deployment models.
Key findings • 14 vulnerabilities disclosed for Open62541, impacting version 1.5.5 and earlier. • Critical (CVSS 9.8) and High (CVSS 7.5) severity flaws dominate the batch. • Vulnerabilit…
A honeypot analysis reveals a sophisticated automated campaign rapidly compromising SSH servers within seconds of initial login, injecting backdoors and establishing persistence.
The threat actor UNC6671, formerly known as BlackFile, has rebranded to REDACT and is actively diversifying its extortion operations under multiple aliases, targeting financial services and enterprise cloud environments with multi-brand vishing tactics.
Global crime syndicates are aggressively leveraging AI for large-scale fraud, generating billions through sophisticated scams like voice cloning and deepfake videos.
Researchers have detailed a new class of HTTP desynchronization attacks, dubbed 'CRLF-Powered Desync Worms,' that leverage header injection flaws to hijack user sessions and bypass security measures.
Key findings • Three high-severity vulnerabilities disclosed in PraisonAI on August 5, 2026. • Two SSRF flaws in the web_crawl tool allow connections to internal destinations. • One code …
An Ontario man has pleaded guilty to charges related to the 2024 attacks on cloud data platform Snowflake, which resulted in approximately 165 data breaches.
Researchers warn that Cascading Style Sheets (CSS) are being weaponized to steal sensitive data from webmail clients, with some vendors unprepared for the emerging threat.
Researchers demonstrated an exploit chain using Samsung Members and Samsung Account apps to gain system-level control of Galaxy devices via the Bixby virtual assistant.
Researchers have developed an AI system, HTTP Terminator, capable of autonomously discovering and exploiting new HTTP desync attack techniques against live websites.
Key findings • 24 vulnerabilities disclosed simultaneously for Langflow OSS, affecting versions 1.0.0 through 1.10.3. • Multiple High-severity flaws enable arbitrary code execution, authentic…
Key findings • 23 vulnerabilities disclosed simultaneously for IBM Langflow OSS, affecting versions 1.0.0 through 1.10.3. • Multiple High-severity flaws enable arbitrary code execution, authe…
Key findings • 16 vulnerabilities disclosed for Electron framework on August 5, 2026, ranging from Medium to High severity. • Issues include bypasses of sandbox restrictions for external URLs…
Researchers have uncovered 15 critical vulnerabilities in TP-Link devices that undermine secure zero-trust network provisioning, potentially allowing attackers to compromise devices during setup.
Pre-authentication remote code execution vulnerabilities, including CVE-2026-31986, have been discovered in widely used enterprise Java applications Bonita BPM and Apache OFBiz, posing a significant risk to organizations.
A sophisticated supply-chain attack on the keyv and cacheable npm packages uses a worm-like mechanism and a novel dead-man's switch that punishes token revocation.
Google Blogger's automated systems mistakenly flagged thousands of legitimate websites as malicious, locking them and causing widespread user frustration.