Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,178 stories synthesized.
CISA and international partners have issued an advisory detailing the tactics, techniques, and procedures of the SafePay ransomware group, which has impacted over 600 victims globally since August 2024.
A Nigerian national has received an eight-year prison sentence for his role in a cybercrime ring that targeted tax preparation businesses, leading to millions in fraudulent refunds and damages.
eMudhra's certificate authority private keys were compromised, leading to emergency blocks by Chrome, Firefox, Apple, and Microsoft.
Google is bolstering Chrome's Enhanced Protection mode to identify and flag malicious commands that scammers trick users into copying, enhancing defenses against social engineering attacks.
The curl project is moving low and medium severity vulnerability reports to its public GitHub repository to manage an overwhelming influx of submissions, many generated by AI.
ANY.RUN's Threat Intelligence Feeds offer SOC analysts enhanced visibility beyond internal environments, providing real-time malicious IOCs to automate detection and reduce manual checks.
CISA alerts to critical flaws in Hitachi Energy's MicroSCADA X SYS600 product, potentially enabling code execution and unauthorized access in energy sector systems.
CISA alerts to two critical vulnerabilities in Moxa AIG-302 ThingsPro Edge firmware, potentially allowing adjacent network attackers to steal sensitive information and compromise communications.
CISA has issued an advisory detailing seven vulnerabilities in Hitachi Energy's RTU500 series CMU Firmware, which could lead to denial-of-service conditions and impact critical infrastructure operations.
CISA alerts to two vulnerabilities in WAGO OS Linux firmware affecting multiple industrial devices, enabling low-privileged users to bypass security controls.
CISA has identified several critical vulnerabilities in HMS Networks PEAK-System PCAN Windows drivers, potentially allowing attackers to crash the Windows kernel.
Frontier AI models are uncovering vulnerabilities at an unprecedented rate, leading to a tenfold surge in monthly advisories and challenging traditional security disclosure practices.
A threat actor is leveraging the AI-powered penetration testing tool Cairn to automate large-scale attacks against hundreds of global websites, compromising high-profile targets.
Fraudsters are exploiting open banking services to test stolen credentials and conduct phishing campaigns, using spend-management platforms to verify bank details and send malicious messages without incurring costs.
Check Point Research details how sophisticated antidetect browsers, now enhanced with AI, are enabling large-scale online fraud, account takeovers, and coordinated influence campaigns.
A pro-Ukrainian hacktivist group, Black Spark, has claimed responsibility for disrupting Russia's nationwide school assessment platform by displaying anti-Putin messages.
Researchers at Pillar Security have discovered that OpenCode quietly patched a critical remote code execution (RCE) vulnerability without issuing a public advisory or CVE identifier, leaving users unaware of the risk.
A novel attack dubbed WP2Shell exploits two chained WordPress core flaws to allow unauthenticated attackers to create administrator accounts and install web shells.
A ransomware attack on Data Cymru, enabled by a decade-old test account with a 'Password1' password, resulted in the exfiltration of 42 GB of sensitive data and drew reprimands from the ICO for both Data Cymru and its IT provider, Ogi Networks Limited.
Threat actors are increasingly using generative AI to craft unique malware, enhance phishing campaigns, and accelerate data exfiltration, posing new challenges for traditional cybersecurity defenses.
Abstract integrates AI-driven investigation, hunt, and triage capabilities into its SIEM platform, alongside SOAR response actions linked directly to detection rules.
IDENTOS PolicyArc is a new access policy solution designed to manage permissions for AI agents, enabling task-specific, time-limited access to address growing enterprise security concerns.
Cloudflare and VoidZero have collaborated to create tsrs, a Rust port of the TypeScript compiler, aiming to significantly boost performance and reduce memory usage.
Attackers are increasingly leveraging calendar invitations as a vector for phishing and malware delivery, with one security firm reporting a 1,216% surge in August.