Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,178 stories synthesized.
A new ranking of the top ten data masking tools for 2026 highlights Delphix (Perforce) as the top performer, emphasizing speed and referential integrity, with AI training sets emerging as a key driver for masked data adoption.
A new ranking of the top ten database security and activity monitoring tools for 2026 highlights Imperva for its inline blocking and risk analytics, IBM Guardium for compliance reporting, and agentless cloud governance from Satori and Cyral.
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, have been leaked ahead of official patches, raising alarms for potential widespread exploitation.
Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, affecting session.upload_progress, have a public proof-of-concept exploit available, potentially enabling remote code execution.
Meta has paused its Muse AI conversation sharing feature following the discovery of a privacy flaw that exposed confidential business data through discoverable chat links.
A Belarus-aligned hacktivist group, Partisan Zmiy, maintained a nearly two-year presence within a Russian healthcare organization's network, hiding the Vasilek backdoor within VMware Tools.
OpenAI's ChatGPT Chrome extension now analyzes content across open tabs, enhancing productivity but introducing new risks for sensitive data access.
DevGuard, an OWASP Incubating Project, offers a unified open-source platform to consolidate, prioritize, and manage security findings across the software supply chain.
AI tools are revolutionizing Security Operations Centers, enhancing efficiency and detection, yet also creating new attack vectors and demanding stricter access controls.
Google has open-sourced TorchTPU, enabling PyTorch developers to natively run models on Tensor Processing Units and simplifying migration from GPUs.
PHP has alerted users to two critical vulnerabilities, each with a CVSS score of 9.2, expected to be patched on October 21, 2026, with potential remote code execution implications.
The Lazarus Group has launched Operation FlashHole, a sophisticated campaign targeting South Korean organizations by abusing mandatory financial security software as an infection vector.
Key findings • Seven vulnerabilities disclosed in VLLM, impacting versions prior to 0.31.0. • High-severity flaws include uncontrolled resource consumption and memory exhaustion. • Cache …
A U.S. citizen living in the Philippines has pleaded guilty to orchestrating a five-year identity theft and fraud scheme that defrauded thousands of U.S. servicemembers and veterans.
Israeli startup Pluto Security raises $42 million to defend enterprise AI agentic workflows by analyzing agent intent and enforcing security policies using endpoint telemetry.
PHP is set to release an update addressing two critical vulnerabilities (CVSS 9.2), affecting all WordPress sites due to PHP's foundational role in the platform.
Automotive tech startup IQ.Lvbs alleges it was targeted by hack attempts originating from an IP address associated with rival Comma.ai, in a dispute over AI driving models.
Oracle's final Critical Patch Update (CPU) of 2026 addresses a substantial 1209 CVEs across 1295 security updates, including 112 critical patches.
Key findings • 12 malicious npm packages disclosed within an 18-minute window on October 20, 2026. • Most packages were published hours before disclosure, indicating fresh malicious drops. …
Key findings • 25 critical vulnerabilities disclosed on October 20, 2026, for the Totolink X2000R router. • All vulnerabilities have a CVSSv3 score of 9.1 and affect firmware version TOTOLINK…
Key findings • Eight vulnerabilities in Mozilla Thunderbird patched on October 20, 2026, fixed in version 158.0.1. • A critical eMudhra CA key compromise (CVE-2026-113470) was addressed via O…
A sophisticated fraud campaign impersonates bank support pages, luring victims to fake call centers that then guide them to install legitimate remote-access software for malicious purposes.
A critical vulnerability in the popular Duplicator and Duplicator Pro WordPress plugins allows unauthenticated attackers to execute arbitrary commands or delete files, impacting over one million installations.
A holding company formerly known as 23andMe has agreed to a $6 million settlement with California over alleged cybersecurity failings that contributed to a massive 2023 data breach.