advisory1 source
GitHub Dependabot Delays Updates to Thwart Malware Distribution
GitHub's Dependabot is now implementing a three-day delay on non-security package updates to prevent the rapid spread of newly introduced malware.
Jul 27, 2026
Stories
Every story we’ve synthesized.
Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
kev1 source · 1 CVE
Fortinet CVE-2025-68686 Added to CISA KEV Under Active Exploitation
Key findings • Fortinet CVE-2025-68686 has been added to CISA's KEV catalog due to confirmed active exploitation. • The vulnerability poses an immediate threat, requiring urgent patching and …
Jul 27, 2026 · updated Jul 28, 2026
research2 sources
Anthropic's Claude Opus 5 Enhances AI Coding and Cybersecurity on AWS
Anthropic's latest AI model, Claude Opus 5, is now available on AWS, offering significant improvements in coding assistance and cybersecurity tasks, with enhanced agent capabilities and robust data privacy.
Jul 26, 2026 · updated Jul 27, 2026
advisory4 sources
Claude AI Chats Exposed Publicly Via Google Search Due to Missing 'noindex' Tags
Sensitive conversations, including legal advice and engineering work, were inadvertently made public through Google Search results due to shareable links from Anthropic's Claude AI lacking proper indexing tags.
Jul 26, 2026 · updated Aug 4, 2026
advisory2 sources · 33 CVEs
Weekly Cyber Security Newsletter Covers Certighost, Check Point 0-day, HTTP/2 Flaws, and Notepad++ Abuse
A new cybersecurity newsletter highlights critical vulnerabilities including Certighost in Active Directory, an actively exploited Check Point flaw, multiple HTTP/2 DoS bugs, and malware distributed via Notepad++ plugins.
Jul 26, 2026 · updated Jul 27, 2026
advisory1 source
ESAFENET CDG 3 System Targeted for Default Credential Exploitation
Scans are actively targeting the ESAFENET CDG 3 document management system, exploiting well-known default credentials to gain unauthorized access and potentially compromise sensitive data.
Jul 26, 2026
trend1 source
Pro-Iran Hacktivist Networks Mobilize During Kinetic Conflict, Leveraging Common Tools
Pro-Iran hacktivist groups are increasingly coordinating during geopolitical conflicts, utilizing readily available infostealers and DDoS-for-hire services to exert psychological pressure and disrupt targets.
Jul 26, 2026
1 source
Linux Kernel: 19 Vulnerabilities Across Subsystems Disclosed Together on July 26, 2026
Key findings • 19 Linux kernel vulnerabilities disclosed together on July 26, 2026, affecting diverse subsystems. • Issues span memory management, networking, USB, and cryptography, requiring…
Jul 26, 2026 · updated Jul 27, 2026
1 source
Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed Together
Key findings • 25 Linux kernel vulnerabilities disclosed together on July 26, 2026, affecting diverse subsystems. • Issues span memory management, networking, USB, and cryptography, requiring…
Jul 26, 2026 · updated Jul 27, 2026
1 source
Linux Kernel Ksmbd: Three SMB Vulnerabilities Disclosed Together on July 26, 2026
Key findings • Three Ksmbd vulnerabilities in the Linux kernel were disclosed on July 26, 2026. • CVE-2026-64394 involves missing access checks for SMB2_SET_INFO. • CVE-2026-64393 had inc…
Jul 26, 2026 · updated Jul 27, 2026
1 source
Linux Kernel: 25 Vulnerabilities Across Subsystems Disclosed and Patched Together
Key findings • 25 Linux kernel vulnerabilities disclosed on July 26, 2026, affecting diverse subsystems. • Patches released same-day address issues in networking, USB, memory management, and …
Jul 26, 2026 · updated Jul 27, 2026
research1 source
PentesterFlow: Open-Source AI Agent Automates Penetration Testing Workflows
PentesterFlow, a new open-source AI tool, aims to automate penetration testing and bug hunting workflows from reconnaissance to reporting, emphasizing human oversight and evidence-based findings.
Jul 26, 2026
research1 source
GitLab RCE Exploit Chains Two Memory Safety Flaws in Oj JSON Parser
A sophisticated exploit chain leverages two previously undiscovered memory safety vulnerabilities in the Oj Ruby JSON parser to achieve remote code execution on default GitLab installations.
Jul 25, 2026
research3 sources
Researcher Claims Universal Jailbreak for Top AI Models, Withholds Details for Responsible Disclosure
A security researcher claims to have developed a universal jailbreak technique effective against major AI models like GPT-5.6 and Claude Opus 5, opting for responsible disclosure over immediate public release.
Jul 25, 2026 · updated Aug 6, 2026
breach3 sources
ShinyHunters Data Fuels Sextortion Scams Demanding $2,000 in Bitcoin
Scammers are leveraging data previously leaked by the ShinyHunters extortion group to send targeted sextortion emails demanding $2,000 in Bitcoin, falsely claiming to have compromised victims' devices.
Jul 25, 2026 · updated Jul 28, 2026
research4 sources
Fastjson 1.x RCE Vulnerability Actively Exploited Despite No Official Patch
Attackers are actively exploiting a critical Fastjson 1.x RCE vulnerability (CVE-2026-16723) in Java applications, particularly those using Spring Boot, with no official patch currently available.
Jul 25, 2026 · updated Jul 28, 2026
research1 source
Insurance Phishing Evolves to Real-Time Account Hijacking, CTM360 Reports
CTM360 research reveals a shift in insurance phishing attacks towards real-time account hijacking, bypassing MFA and enabling immediate fraudulent activity.
Jul 25, 2026
breach1 source
DevMan RaaS Portal Streamlines Operations for Ransomware Affiliates
The DevMan ransomware-as-a-service operation, tracked as Funky Mantis, utilizes a sophisticated web portal to centralize payload generation, victim management, and affiliate payouts, enhancing operational efficiency.
Jul 25, 2026
patch1 source · 3 CVEs
GNU Coreutils & Diffutils: Three Vulnerabilities Disclosed in Early July 2026
Key findings • Three vulnerabilities in GNU coreutils and diffutils disclosed between July 23-25, 2026. • CVE-2026-56391: Out-of-bounds read in uniq due to multibyte input handling. • CVE…
Jul 25, 2026 · updated Jul 26, 2026
patch1 source · 25 CVEs
Linux Kernel: 25 Vulnerabilities Across Subsystems Addressed in Coordinated July 2026 Disclosure
Key findings • 25 Linux kernel vulnerabilities disclosed in a single batch on July 25, 2026. • Fixes span multiple subsystems including networking, USB, Wi-Fi, and architecture-specific drive…
Jul 25, 2026 · updated Jul 26, 2026
patch1 source · 3 CVEs
Linux Kernel: Three Vulnerabilities in I2C, Media, and USB Subsystems Disclosed Together
Key findings • Three Linux kernel vulnerabilities disclosed on July 25, 2026, affecting i2c, media, and USB subsystems. • CVE-2026-64236: Fixes a division by zero in the i2c: davinci driver d…
Jul 25, 2026 · updated Jul 26, 2026
patch2 sources · 8 CVEs
FFmpeg: Four Memory Corruption Vulnerabilities Disclosed in Batch
Key findings • Four FFmpeg vulnerabilities disclosed together, including heap out-of-bounds writes and reads. • Flaws affect PNG/APNG encoders, vf_quirc filter, TY demuxer, and S/PDIF muxer. …
Jul 25, 2026 · updated Jul 28, 2026
patch2 sources · 4 CVEs
Libssh2: Three Vulnerabilities Disclosed Together Affecting SFTP and Cipher Negotiation
Key findings • Three Libssh2 vulnerabilities (CVE-2026-66032, CVE-2026-66035, CVE-2026-66033) disclosed on July 25, 2026, affect versions up to 1.11.1. • CVE-2026-66035 and CVE-2026-66033 are…
Jul 25, 2026 · updated Jul 28, 2026
research1 source
Researcher Publishes Proof-of-Concept for GitLab RCE Vulnerability
A proof-of-concept exploit for GitLab allows authenticated users to execute arbitrary commands as the 'git' user on unpatched self-managed instances.
Jul 25, 2026