Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,317 stories synthesized.
A critical out-of-bounds read vulnerability in MZ Automation's lib60870 library could allow attackers to crash industrial control systems, impacting sectors like energy and water.
A cleartext storage vulnerability in Johnson Controls' XAAP Android application could allow attackers with physical device access to steal sensitive information.
CISA has issued an advisory detailing several critical vulnerabilities in Weintek cMT3092X HMIs, potentially allowing privilege escalation and credential theft.
Cisco Talos reports a 49% year-over-year increase in CVEs in Q2 2026, highlighting the growing challenge of patching, and details a new Rust-based RAT called msaRAT that evades detection by hijacking browser C2 channels.
Cryptocurrency exchange BitMEX announced it will shut down operations on September 23rd, following years of regulatory challenges and a series of other crypto-related criminal cases making headlines.
Wordfence has unveiled PRISM, an AI system that autonomously discovers vulnerabilities, and Eclipse, an AI-assisted triage tool, significantly accelerating their security research pipeline.
Threat actors are exploiting the popular Notepad++ text editor by bundling legitimate application installers with malicious plugins to establish persistence and deploy malware.
GitHub's Dependabot now defaults to a three-day delay for non-security dependency updates, a move aimed at preventing the automatic inclusion of malicious code in software supply chains.
Fraudsters are leveraging inexpensive 'liveness kits' and AI to create synthetic identities that can bypass mobile verification and achieve better credit scores than legitimate borrowers.
This week's cybersecurity landscape is fraught with disguised threats, including Android spyware, PLC attacks, AI prompt injection, and malicious software hidden in seemingly legitimate packages and extensions.
Microsoft's latest email threat report reveals a 92% drop in Tycoon2FA phishing after a March disruption, but warns of a tenfold increase in Microsoft Teams vishing attempts.
A significant portion of organizations are delaying or canceling Microsoft Copilot deployments due to concerns that the AI assistant could expose confidential data, a new survey reveals.
A critical directory traversal vulnerability in the Exim mail transfer agent allows local attackers to escalate privileges on affected systems.
A critical sandbox escape flaw in Anthropic's Claude Cowork AI agent for macOS could allow it to access and modify sensitive files on the host system.
Australian energy giant Origin Energy has confirmed a significant data breach, with customer data compromised and an investigation underway to determine the full scope of the incident.
Researchers discovered a flaw in OpenAI's ChatGPT workspace agents, dubbed 'AgentForger,' allowing attackers to remotely create and deploy malicious AI agents within a victim's workspace.
Two critical path traversal vulnerabilities in Kubernetes CSI drivers for NFS and SMB allow attackers to access cross-tenant data and potentially disrupt nodes.
A high-severity use-after-free vulnerability (CVE-2026-50458) in Windows' Brokering File System allows local attackers to escalate privileges to SYSTEM.
Cobalt introduces an AI-assisted offering designed to deliver continuous offensive security testing and actionable penetration testing results within 24 hours.
A new benchmark by SentinelOne demonstrates that even advanced AI models falter when tasked with sustained, complex malware investigations, highlighting the need for human oversight.
Google is introducing a new AI-powered account recovery method that uses selfie videos to verify user identity when traditional recovery options fail.
A simple operational security mistake by cyber spies led to the exposure of the JadeProx espionage campaign and its novel TriBack malware, impacting organizations across Asia and Latin America.
Google has launched CodeMender, an AI agent designed to autonomously find, validate, and patch software vulnerabilities, aiming to accelerate the remediation lifecycle.
A Russian cyberespionage campaign, tracked as CL-STA-1114 and attributed to the Void Blizzard/LAUNDRY BEAR threat actor, is actively exploiting a zero-day vulnerability in Zimbra Collaboration Suite (ZCS) to steal sensitive user credentials and data.