Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Two critical vulnerabilities, CVE-2026-59309 and CVE-2026-59310, with CVSS scores of 9.8, allow unauthenticated remote attackers to bypass authentication or execute arbitrary code on VMware vCenter Server.
A state-sponsored campaign has compromised trusted South Korean websites to exploit the AnySign4PC financial security software, installing backdoors without user interaction.
The Silver Fox threat group has deployed a sophisticated attack chain against a Japanese manufacturer, leveraging new vulnerable drivers and legitimate tools to install the ValleyRAT backdoor for persistent industrial system access.
A Chinese-speaking threat actor is employing AI models, including DeepSeek via the Hermes Agent framework, to conduct autonomous cyberattacks, combining AI-driven scanning with manual exploitation.
Key findings • Three Linux kernel vulnerabilities disclosed between July 29-30, 2026, impacting Android SDK components. • Vulnerabilities include a buffer length check issue (CVE-2026-64559) …
Key findings • Four ImageMagick vulnerabilities disclosed on July 30, 2026, primarily involve heap buffer overflows and over-reads. • CVE-2026-62343 and CVE-2026-62363 relate to morphology an…
Key findings • 25 vulnerabilities disclosed for Apache Traffic Server on July 30, 2026. • Issues span memory corruption, DoS, access control bypasses, and request smuggling. • Multiple HT…
Key findings • Google Chrome version 151.0.7922.72 addresses 25 vulnerabilities disclosed on July 30, 2026. • Vulnerabilities include Use-after-free, Inappropriate implementation, and Insuffi…
Key findings • 25 vulnerabilities in Chrome for iOS were disclosed simultaneously on July 30, 2026. • The vulnerabilities range from Low to High severity, impacting UI spoofing, data leakage,…
Key findings • 25 vulnerabilities disclosed simultaneously for Google Chrome on Android on July 30, 2026. • High-severity flaws include potential sandbox escapes and UI spoofing. • All is…
Key findings • Eleven CVEs for Google Chromium disclosed simultaneously on July 30, 2026. • Vulnerabilities affect Chrome on both iOS and Android platforms. • Key issues include UI spoofi…
Key findings • Five vulnerabilities disclosed in Undici on July 30, 2026, affecting multiple release lines. • Issues include improper sanitization of cookie attributes and request body valida…
A campaign distributing a fake Flash Player installer is delivering the sophisticated AtlasRAT malware, which uses a Microsoft-themed certificate to mask its command-and-control traffic.
New research from Claroty reveals that 20% of cyber-physical systems in large data centers are just one network hop away from internet-exposed pathways, posing significant risks.
WordPress.org's 'Protect The Shire' initiative, intended to enhance security, inadvertently creates a window of vulnerability by delaying the availability of plugin and theme updates, including critical security patches.
A sophisticated Linux cryptomining campaign is employing the Pluggable Authentication Modules (PAM) framework to obscure its XMRig botnet activities, creating a significant challenge for detection and forensics.
GitLab has released critical security updates to fix 13 vulnerabilities, including high-severity flaws that could lead to sensitive data exposure, manipulation of CI/CD pipelines, and denial-of-service conditions.
Attackers are leveraging Microsoft Teams voice calls to trick employees into granting remote access, enabling rapid deployment of Chaos ransomware.
The UK's National Cyber Security Centre (NCSC) is calling on network device manufacturers to embed forensic observability features directly into their products to aid incident response.
Anthropic's Claude AI platform experienced a worldwide outage on July 29, 2026, impacting multiple models and API services with "Request Failed With 529 Overloaded" errors for approximately 101 minutes.
The financially motivated threat group Toy Ghouls has launched a new custom ransomware named GenieLocker, targeting organizations in Russia, with variants for Windows, Linux, and VMware ESXi environments.
A sophisticated cybercrime platform named Work Panel is enabling threat actors to conduct scalable vishing attacks, turning simple helpdesk impersonations into enterprise account takeovers.
Google Chrome 151 has been released with patches for 370 security vulnerabilities, including seven critical bugs affecting key components like Compositing, Views, Skia, and Ozone.
Node.js has released critical security updates addressing 11 vulnerabilities across its active branches, including two high-severity flaws that could lead to denial-of-service conditions and bypass filesystem restrictions.