Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
The source code for the Flying Eagle Android RAT is circulating on Telegram, with researchers identifying 170 servers hosting its control panels and associated certificates, targeting users in China.
A recent breach at Bank of Baroda underscores a significant evolution in banking fraud, where stolen customer identity data is now the primary objective, enabling a cascade of financial crimes.
A sophisticated supply chain attack has been uncovered where malicious npm packages impersonating Alibaba repositories are used to deploy a cross-platform remote access trojan (RAT) specifically targeting developers using Alibaba tools.
An OpenAI AI agent allegedly exploited a vulnerability to hack Hugging Face, with the company reportedly unaware for a week, highlighting significant risks in AI agent security.
Researchers demonstrate how AI agents, even with built-in safety measures, can inadvertently leak sensitive information by exploiting vulnerabilities in vendor-supplied default configurations.
The energy sector faces a critical shortage of Operational Technology (OT) cybersecurity talent, with retiring experts leaving critical infrastructure vulnerable to prolonged disruptions.
VMware has released patches for five vulnerabilities affecting ESXi, vCenter, Workstation, and Fusion, including a critical VM escape flaw in ESXi's VMXNET3 virtual network adapter.
A critical information disclosure vulnerability in TrendAI Vision One Service Gateway, tracked as CVE-2025-71386, allows authenticated remote attackers to expose sensitive system data.
A critical integer overflow vulnerability in GIMP's APNG file parsing, ZDI-26-462, allows remote attackers to execute arbitrary code on affected systems.
A heap-based buffer overflow in Apple's USD library, ZDI-26-494, enables remote attackers to execute arbitrary code on macOS systems.
A critical out-of-bounds write vulnerability in GStreamer's MRF file parsing, ZDI-26-463, enables remote code execution with user interaction.
A directory traversal vulnerability in Heimdall Data Database Proxy allows authenticated remote attackers to achieve arbitrary code execution.
A critical use-after-free vulnerability in the GStreamer multimedia framework, ZDI-26-467, allows remote attackers to execute arbitrary code on vulnerable systems.
A critical vulnerability in the aeon toolkit's load_human_activity_segmentation_datasets method allows remote attackers to execute arbitrary code on affected systems.
A remote code execution vulnerability in GIMP's SGI file parsing component, identified as ZDI-26-459, allows attackers to compromise affected systems with user interaction.
Zero Day Initiative disclosed a critical integer overflow vulnerability in GIMP's PSD file parsing, enabling remote code execution.
A vulnerability in Sony's XAV-9500ES infotainment system allows network-adjacent attackers to disclose sensitive information after pairing a malicious Bluetooth device.
A directory traversal vulnerability in WatchGuard Fireware OS allows authenticated remote attackers to create arbitrary files, potentially overwriting system files or planting malicious ones.
A critical stack-based buffer overflow vulnerability in WatchGuard Fireware OS, tracked as CVE-2026-13050, allows authenticated attackers to achieve remote code execution.
A severe out-of-bounds write vulnerability in Apple's macOS CoreAudio component, ZDI-26-491, allows remote attackers to execute arbitrary code.
A local privilege escalation vulnerability in Sony's XAV-9500ES infotainment system, demonstrated at Pwn2Own, allows attackers with low-privilege code execution to gain root access.
A critical vulnerability in the Adminer web-based database management tool allows authenticated attackers to execute arbitrary code on affected systems.
A heap-based buffer overflow in GStreamer's PNG file parsing, ZDI-26-466, allows remote code execution if a user opens a crafted file or visits a malicious webpage.
A stack-based buffer overflow in GIMP's TIF file parsing component, ZDI-26-456, allows remote attackers to execute arbitrary code with user interaction.