Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,304 stories synthesized.
A sophisticated, nine-year-long fraud campaign has been uncovered, impersonating major Russian companies to trick international businesses into sending advance payments for non-existent goods.
Hackers are reportedly selling a database containing over 75 million Revolut user records, but the fintech company states it has found no evidence of a new breach.
Stairwell introduces Backstory, an AI-powered platform designed to rapidly trace malware variants, identify affected systems, and map the full blast radius of an incident.
Aryon Security's ShutterGap research highlights a critical blind spot in cloud security, exposing 3.7 million AWS resources annually to potential compromise due to their transient nature.
Cloudflare has upgraded its Authenticated Origin Pulls and Custom Origin Trust Store to support post-quantum authentication using ML-DSA signatures, bolstering defenses against future quantum computing threats.
Rapid7 is previewing new features that leverage AI and continuous software visibility to enable preemptive security against zero-day threats, allowing organizations to identify risks before exploitation.
Houston City College has suffered a significant data breach, with threat actors publishing over 832,000 student records after ransom demands were not met.
Angola's largest telecommunications operator, Unitel, experienced a nationwide outage of voice, mobile data, and internet services due to a cyberattack, occurring just hours before its planned stock market debut.
Attackers are impersonating recruiters to trick Web3 developers into installing a malicious 'AI meeting' application that steals cryptocurrency wallet data, browser credentials, and system information.
A recently patched vulnerability in Firefox's Just-In-Time compiler could allow attackers to execute arbitrary code by simply tricking a user into visiting a malicious webpage, also impacting the Tor Browser.
A supply chain attack on the AsyncAPI npm project injected malware designed to steal a wide range of developer and cloud credentials, exploiting weak GitHub Actions workflows.
Contrast Security introduces Contrast CVE Shield, a runtime application protection tool designed to defend against AI-generated exploits by blocking exploitation attempts before they can succeed.
A new research tool, VulnGym, employs AI-driven simulated APT attackers to rigorously test enterprise vulnerability management and patching strategies against realistic, multi-stage threats.
A critical flaw in Microsoft's Secure Boot mechanism, designed to protect against firmware infections, has been exploitable for 13 of its 14 years of existence.
IBM's 2026 Cost of a Data Breach Report reveals the global average cost has reached $4.99 million, driven by AI-powered attacks and evolving extortion tactics.
A sophisticated scam operation has deployed over 120 fake Walmart websites, luring unsuspecting shoppers with deep discounts on liquor and stealing their credit card information.
Cloudflare's Q2 2026 Internet Disruption Summary reveals that infrastructure failures and government-initiated shutdowns were the primary drivers of global internet outages during the quarter.
Key findings • 18 vulnerabilities disclosed across Apache ActiveMQ, Tomcat, and Thrift between July 27-29, 2026. • Multiple Denial-of-Service and Information Disclosure flaws impact various A…
Key findings • Six vulnerabilities disclosed on July 29, 2026, affect the Debian packaging of Erlang/OTP. • Flaws span multiple modules including public_key, ssl, stdlib, and erts. • Vuln…
Key findings • Four vulnerabilities disclosed on July 29, 2026, affect Dompdf versions 3.15 and prior. • Vulnerabilities include directory traversal, filesystem information leak via SVG, File…
Researchers warn that readily available AI tools and off-the-shelf hardware are enabling less-skilled actors to launch large-scale phone-based fraud schemes.
A sophisticated cybercrime economy has emerged around the theft and resale of Meta Business Manager and Google Ads accounts, with attackers profiting from account sales rather than just draining ad budgets.
The UK's National Cyber Security Centre (NCSC) has launched a new framework to guide organizations through the critical stages of cyber incident response and recovery, aiming to bolster resilience and minimize damage.
1Password introduces its Privileged Access Management solution, aiming to eliminate standing access and enforce just-in-time, least-privilege principles across critical infrastructure.