Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
The latest release of JetBrains' Qodana static analysis tool introduces post-quantum cryptography checks for JVM code and expands security inspections across multiple languages, aiming to proactively identify emerging threats.
A threat actor known as 'ModernStealer' is reportedly attempting to sell sensitive government and defense data on dark web forums, though researchers emphasize these claims are unverified and may involve repackaged information.
Simbian introduces its AI Threat Hunt Agent, completing its autonomous SecOps platform by proactively searching for and identifying past threats that evaded initial detection.
UK Government Investments (UKGI) disclosed a data leak exposing the names and work emails of 51 officials for approximately 40 hours due to a security policy violation.
A Chinese threat actor is actively targeting iOS devices with the GHOSTBLADE information-stealing malware by leveraging a publicly leaked version of the sophisticated DarkSword exploit kit.
New research reveals novel attack vectors, dubbed 'Pass-ta-key,' that can compromise accounts secured by passkeys, undermining the security promises of passwordless authentication.
Tenable's security team evaluated Anthropic's Claude Mythos Preview AI, finding it capable of generating reproducible exploits and fundamentally shifting code security from potential defect ranking to proven issues.
South Korea's largest telco, KT, has been fined $38 million by regulators after a year-long data breach involving compromised femtocells led to customer fraud.
The Police National Legal Database (PNLD) confirmed a data breach exposing contact information of police officers, government staff, and customers, published on the dark web.
Internet-facing SonicWall SMA appliances are vulnerable to a zero-click root compromise via CVE-2026-15409 and CVE-2026-15410, enabling attackers to gain full control and deploy ransomware.
OpenAI has dismantled a network of ChatGPT accounts originating from Cambodia that were used to run sophisticated, large-scale scam operations, highlighting the growing misuse of AI for criminal activities.
Elastic Security Labs has automated the detection of over 800 vulnerable Windows drivers, a common technique used by attackers to gain kernel-level access and bypass security measures.
Thermo Fisher Scientific has released a patch for a critical vulnerability (CVE-2026-17583) in its Applied Biosystems human identification software, which could allow for undetectable tampering of DNA data files.
CrowdStrike's 2026 Threat Hunting Report reveals adversaries are exploiting trusted systems and accelerating attacks, with vulnerability exploitation windows collapsing to mere hours and AI becoming a key tool for stealth and efficiency.
A new macOS malware campaign, MacSync, uses deceptive search results and a fake guide to trick users into executing malicious commands, leading to the theft of passwords, crypto wallets, and session data.
Cyber adversaries are increasingly leveraging Artificial Intelligence for malicious purposes while simultaneously targeting AI infrastructure, marking a significant escalation in cyber threats, according to CrowdStrike's latest report.
This week's security landscape was shaped by a variety of threats, including fake gaming rewards, sophisticated RATs, an AI worm, and significant data exposures.
Three critical vulnerabilities in Hugging Face's Diffusers library, collectively named FaceHugger, enable attackers to execute arbitrary code by tricking users into loading specially crafted model repositories.
A critical vulnerability (CVE-2026-18577) in N-able N-central allows unauthenticated attackers god-mode access to the RMM console, posing a significant supply-chain risk.
Stairwell's new AI agent, Backstory, analyzes security alerts to reveal the full scope of malware campaigns, uncovering an average of 2.4 undocumented variants per known sample.
NVIDIA has launched SkillSpector, an open-source security scanner designed to identify risks in AI agent skills before they are deployed.
The rapid evolution of AI in creating phishing campaigns, reducing creation time from hours to mere seconds, underscores the critical need for robust email authentication protocols like DMARC and BIMI.
Key findings • 25 vulnerabilities disclosed in Bouncy Castle for Java on August 3, 2026, affecting versions prior to 1.85. • Issues include denial-of-service, data forgery, unbounded memory a…
Key findings • 25 vulnerabilities disclosed for Bouncy Castle for Java on August 3, 2026, affecting versions prior to 1.85. • Batch includes Critical and High severity flaws impacting core cr…