Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,243 stories synthesized.
A newly disclosed exploit, codenamed Certighost, enables low-privileged Active Directory users to impersonate a Domain Controller, retrieve sensitive credentials, and gain elevated access.
A new class of AI-driven attacks, dubbed HalluSquatting, Slopsquatting, and Phantom Squatting, exploits the tendency of AI coding agents to trust hallucinated package, repository, or domain names.
Meta is rolling out a free selfie-based verification badge on Facebook to help users distinguish real people from AI-generated accounts, enhancing trust on the platform.
Law enforcement agencies have dismantled the Kratos phishing-as-a-service platform, while a new espionage implant named HollowGraph uses Microsoft 365 calendars for covert command and control.
The Vatican's official prayer app, 'Click To Pray,' has leaked the personal information of more than 700,000 global users due to an insecure API endpoint.
Europol's 'The Com' operation targeted a network of violent extremist groups, leading to the flagging of 4,340 URLs for removal and disrupting their online propaganda and coordination efforts.
A critical vulnerability in Azure Automation's default configuration could have enabled attackers to take over identities across tenants, exposing sensitive data and cloud workloads.
SentinelOne introduces an AI-driven approach to security operations, transforming analyst expertise into reusable 'skills' accessible via a GitHub repository to combat data overload and burnout.
Android malware increasingly bypasses Google's Play Store protections by exploiting sideloaded applications and malicious updates to legitimate apps.
Apache Syncope has released security updates addressing multiple critical vulnerabilities, including remote code execution, SQL injection, and server-side request forgery.
Microsoft intervened after LG monitors triggered unwanted McAfee trial pop-ups on Windows 11 via the LG Monitor App, prompting LG to disable the advertisements.
An Illinois man has been sentenced to 76 months in prison for hacking over 750 women's Snapchat accounts to steal nude photos, which he then traded or sold online.
OpenAI's ChatGPT has entered the top 10 most impersonated brands in phishing attacks, marking a significant shift in threat actor tactics, according to Check Point Research.
The SourTrade malvertising campaign employs a novel technique where victims' browsers assemble malware locally, making it harder for security tools to detect.
Researchers propose a 'Genie coefficient' to quantify the discrepancy between AI actions and human intent, highlighting risks of proactive AI agents with broad tool access.
A new study reveals that automation scripts generated by ChatGPT, Copilot, and Gemini consistently contain exploitable security vulnerabilities, posing significant risks to enterprises.
An attacker deployed a modified AI agent, 'Hermes,' to autonomously conduct post-exploitation activities against Thailand's Ministry of Finance, highlighting the growing threat of weaponized AI.
A newly disclosed vulnerability in multiple HTTP/2 implementations allows unauthenticated attackers to crash servers through memory exhaustion attacks by manipulating stalled data flows.
The Golden Chickens malware-as-a-service operation has re-emerged with four new malware families, including TinyEgg and ChonkyChicken, indicating continued development and modularization by threat actors.
Microsoft is enhancing Windows enterprise activation security by requiring Trusted Platform Module (TPM)-backed attestation for its on-premises Key Management Service (KMS).
Key findings • Four high-severity vulnerabilities in Google Chrome were patched on July 24, 2026. • The vulnerabilities include three 'Use after free' flaws and one 'Out of bounds write' flaw…
A sophisticated campaign is poisoning DNS responses on hotel Wi-Fi gateways to redirect guests to attacker-controlled servers, aiming to steal Microsoft 365 credentials.
Ransomware attacks targeting higher education institutions saw an 8% increase in the first half of 2026, with the 'The Gentlemen' ransomware group being a primary driver of this trend.
Google has launched CodeMender, an AI agent designed to automatically detect, verify, and patch security vulnerabilities in code, aiming to counter the growing use of AI by attackers.