Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A new Russian loader-as-a-service, DOUBLECUP, is leveraging ClickFix attacks to conceal malware within browser cache images, delivering CountLoader and a new RAT called DeviceManager.
Threat actors are distributing malicious installers disguised as the popular Roblox scripting tool Xeno Executor, infecting players with malware that steals credentials and provides remote access.
Researchers have discovered the 'Pass-ta-key' attack, enabling malware on Windows PCs to steal Google synced passkeys without requiring user passwords, PINs, or fingerprints.
A wave of fabricated security advisories, likely created by AI, has infiltrated vulnerability databases, exposing critical flaws in the CVE submission and validation process.
A critical vulnerability in Thermo Fisher Scientific's Applied Biosystems Human Identification software could allow attackers to tamper with forensic DNA analysis data, potentially compromising criminal investigations and paternity tests.
A cyberattack on Liechtenstein's Register of Beneficial Owners has resulted in the exfiltration of over 31,000 records, prompting the government to form a crisis unit.
China-affiliated threat actors, including Vault Panda and Genesis Panda, are exploiting critical vulnerabilities like React2Shell within 24 hours of their public disclosure, highlighting a shrinking window for defenders.
The BTMOB Android remote access trojan has transformed from a centrally managed service into a complex, fragmented ecosystem of resellers, source-code vendors, and custom versions operating on the dark web.
A critical stack-based buffer overflow vulnerability in TP-Link TL-WR940N V6 routers allows unauthenticated attackers to achieve remote code execution or denial-of-service.
Attackers are actively exploiting CVE-2026-18577, an authentication bypass vulnerability in N-able N-central, to gain unauthorized access to managed endpoints via compromised administrator accounts.
Russian state-sponsored actor Midnight Blizzard is exploiting hotel captive portals to redirect travelers to fake update pages, aiming to steal credentials and deploy espionage malware.
Key findings • Eight vulnerabilities in Siyuan Note versions prior to v3.7.3 disclosed on August 3, 2026. • Critical SQL injection flaws in multiple API endpoints allow arbitrary SQL executio…
Mimecast introduces Agent Risk Center, a beta tool to discover, monitor, and govern AI agents, addressing the widespread use of unsanctioned AI tools in organizations.
SentinelOne's Singularity Platform now features Purple AI and Singularity Hyperautomation, enabling automated, closed-loop response to security alerts with defined human oversight.
A new Android remote access trojan (RAT) named Octagon disguises itself as a fake emergency alert app, employing advanced techniques to survive device reboots and steal sensitive user data.
This week's security landscape was dominated by AI model breaches during testing, a critical flaw in Coldcard hardware wallets resulting in an $88 million Bitcoin theft, and coordinated attacks on Minnesota water systems.
Check Point Research's latest report highlights a range of cyber incidents, including attacks on water utilities, breaches at financial and biotech firms, and novel AI-related security concerns.
Cloudflare introduces @cloudflare/computer, an open-source library abstracting compute primitives to provide agents with a unified 'computer' environment, aiming to overcome containerization scalability limits.
River Bank & Trust disclosed that data stolen during a June ransomware attack was deleted by the attackers, though the motive remains unclear.
A Securelist report reveals Brazilian educational institutions, particularly in São Paulo, are increasingly targeted by ransomware and data theft, with private entities most affected.
Cloudflare is enhancing its Workers and Containers services with inbound TCP connection support and gRPC capabilities, aiming to facilitate low-latency, real-time applications like voice AI.
Cloudflare introduces a new Billable Usage API for self-serve accounts, enabling programmatic access to detailed cost and usage data across its services.
Cloudflare's Workers RPC now supports direct communication between JavaScript and Python, simplifying multi-language application development on its serverless platform.
Cloudflare details significant performance and memory optimizations for running large language models Kimi and GLM on its Workers AI platform, employing techniques like FP8 KV cache quantization and INT4 weight compression.