Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Phishing-as-a-service activity saw a significant spike to 7,295 uploads in the week of July 20-26, 2026, primarily driven by the abuse of OAuth device-code flows and adversary-in-the-middle (AiTM) kits targeting Microsoft 365 credentials.
A popular Chrome extension with 100,000 installs, 'Prompt Optimizer – SecondBrain,' is covertly exfiltrating user conversations from major AI platforms like ChatGPT, Claude, and Gemini, despite privacy claims.
A critical vulnerability in Microsoft Active Directory Certificate Services (AD CS), dubbed CertiGhost, has been patched, enabling unauthenticated attackers to escalate privileges and potentially achieve full domain compromise.
A supply chain attack has compromised the WordPress plugin Advanced Responsive Video Embedder, introducing a backdoor that allows unauthenticated attackers to gain full administrative control using a hardcoded token.
DEF CON, the world's largest hacker convention, has banned Meta-style smart glasses with recording features, citing significant privacy concerns for attendees and talent.
GitHub Security Lab announces significant updates to npm and GitHub Actions designed to disrupt common supply chain attack techniques, enhancing security for open-source projects and CI/CD pipelines.
Aembit integrates with Snowflake to provide enhanced security and governance for third-party AI agents accessing sensitive enterprise data.
Despite significant hype, AI-assisted vulnerability discovery has not yet led to a surge in real-world exploits, with new research indicating a similar exploitation rate to traditional methods.
CISA has issued an advisory for a vulnerability in the igloohome Smart Lock Mobile Application that could allow unauthorized access to backend services.
CISA has issued an advisory for a critical vulnerability in ABB's KNX Update Tool, noting that affected legacy devices will not receive a software fix.
CISA and the Australian Cyber Security Centre have jointly released CI Fortify, a new guidance document offering practical steps for critical infrastructure organizations to isolate vital systems during cyber incidents.
Apple has issued significant security updates addressing a large number of vulnerabilities across its operating systems, including iOS, macOS, watchOS, tvOS, and visionOS.
Single Sign-On (SSO) environments, while convenient, remain vulnerable to sophisticated credential attacks, necessitating robust security measures beyond basic password policies.
CAF Bank has suspended online banking services due to a flaw in third-party software integration, impacting charities' ability to access accounts and process payments.
Bugcrowd introduces Savant Pathseeker, an AI-powered tool for continuous web application and API penetration testing, offering validated exploitability evidence.
Prescient Security's AI-driven penetration testing service, Cait, now includes attack surface management and expanded asset testing, offering continuous security validation beyond web applications.
Cloudflare's Q2 2026 report highlights major internet disruptions caused by Super Typhoon Sinlaku, earthquakes in Venezuela, and geopolitical events in Iran and Sudan.
Rapid7 is evolving its Managed Detection and Response (MDR) services to incorporate preemptive defense and AI-driven agentic investigation capabilities, aiming to shorten response times in an increasingly accelerated threat landscape.
A critical stack overflow vulnerability in OpenWrt's DHCPv6 service, CVE-2026-53921, allows unauthenticated attackers to achieve remote code execution with root privileges.
Intel 471 integrates AI capabilities into its Verity471 platform with MCP471 and Agent471, aiming to make threat intelligence more accessible and actionable for security teams.
The US is spearheading an international coalition of over 20 nations to collaboratively define global 6G standards, prioritizing security and resilience to counter potential dominance by China.
SpecterOps enhances BloodHound Enterprise with AWS and Microsoft Entra ID support, enabling hybrid attack path management and integrating an AI agent for proactive threat elimination.
Microsoft launches Project Perception, a new agentic security system, and MAI-Cyber-1-Flash, its first cyber-focused AI model, to combat AI-enabled threats.
Malwarebytes has overhauled its Mobile Security product, introducing AI-driven features to combat the rising tide of sophisticated phone scams, including those powered by artificial intelligence.