Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,373 stories synthesized.
A malicious Android app disguised as a Bahraini civil defense alert tool is distributing a four-stage surveillance platform capable of extensive data harvesting and device control.
A race condition in the Linux kernel's XFS filesystem, dubbed RefluXFS (CVE-2026-64600), allows local users to overwrite protected files and gain root privileges, bypassing security measures like SELinux.
The Rondo botnet is actively exploiting a critical vulnerability in GeoServer (CVE-2024-36401) to execute arbitrary commands and deploy malware.
ASUS has released critical security updates to address CVE-2026-13385, a vulnerability allowing unauthenticated remote command execution on multiple router firmware versions.
A hidden line of text in web content can trick AWS Kiro into executing arbitrary code, bypassing its security model.
A public proof-of-concept exploit is now available for CVE-2026-42980, a high-severity local privilege escalation vulnerability in the Windows NT OS Kernel.
A new study reveals that AI coding assistants, while adept at avoiding classic vulnerabilities, frequently introduce new risks like denial-of-service flaws and hardcoded secrets.
Iranian-linked threat actors are strategically building persistent access within organizations and critical infrastructure, aiming to enable future disruption during geopolitical events.
Swiss rail giant Stadler has refused a $12.3 million ransom demand from the Everest ransomware group following a cyberattack that compromised a data exchange platform shared with a supplier.
A massive influx of 432 Linux kernel Common Vulnerabilities and Exposures (CVEs) published over a single weekend has overwhelmed security professionals, prompting discussions on AI's role and the feasibility of traditional vulnerability management.
North Korean APT group Kimsuky has launched a new campaign compromising collaborative-work software vendors in South Korea to gain access to their downstream customers.
The White House has accused Chinese AI company Moonshot AI of covertly distilling Anthropic's advanced Fable AI model to create its own K3 model, labeling the act as unacceptable theft of proprietary technology.
GitHub is restructuring its bug bounty program to emphasize high-quality submissions and foster deeper relationships with top security researchers through a new permanent VIP program.
The accelerating pace of AI-driven cyberattacks is creating a critical detection lag, forcing organizations to fundamentally rethink their incident response strategies.
Generative AI tools in the enterprise, while boosting productivity, can significantly amplify ransomware risks by granting excessive permissions to AI assistants and agents, according to Acronis.
Royal ransomware operators are rapidly compromising Windows domains by combining Qbot for initial access with Cobalt Strike for lateral movement and domain control, outpacing defender response times.
Artificial intelligence is automating routine tasks in Security Operations Centers, enabling human analysts to focus on complex investigations and strategic decision-making.
A new variant of the TrickBot banking trojan has adopted DNS tunneling for command and control, significantly enhancing its ability to evade detection.
SolarWinds has released version 2026.3 of its Serv-U file transfer software, addressing 15 critical vulnerabilities that could allow authenticated attackers to escalate privileges and execute code as root.
Eclypsium's new InfraTrust initiative and monthly report aim to help organizations prioritize patching of infrastructure, firmware, and edge device vulnerabilities based on real-world exploitability and exposure.
A personal account of a near account takeover via SIM swap attack reveals critical weaknesses in traditional, point-in-time identity verification methods.
Astelia enhances its reachability analysis platform with agentic AI, enabling organizations to pinpoint and prioritize critical vulnerabilities amidst a deluge of alerts.
Rapid7's Q2 2026 product updates introduce bidirectional Microsoft Defender alert sync, Detection as Code, AI-driven AppSec pre-triage, and enhanced exposure management capabilities.
A vulnerability in the Adobe Acrobat Chrome extension, dubbed HermeticReader, allowed websites to access private WhatsApp chats without authentication, enabling unauthorized data exfiltration.