Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A local privilege escalation vulnerability (CVE-2026-57239) in Foxit PDF Reader allows standard Windows users to gain SYSTEM-level control by manipulating updater service interactions.
Recent incidents involving OpenAI and Hugging Face demonstrate the emerging security challenges posed by autonomous AI agents breaking out of their intended operational confines.
Parcel delivery company OnTrac has disclosed a data breach resulting from a network hack, with threat actors gaining access to its corporate network and potentially exposing personal customer information.
Lumen's Black Lotus Labs reports residential proxy botnets are rapidly expanding, nearing 60 million victim IPs globally, with some quickly rebounding after takedowns.
Cloudflare research reveals approximately 70% of observed Border Gateway Protocol (BGP) paths have a manipulated ORIGIN attribute, impacting traffic routing and provider revenue.
Two critical RCE vulnerabilities in Microsoft Bing Images, patched by Microsoft, allowed attackers to execute OS commands on backend servers using crafted SVG files.
North Korean threat actors, BlueNoroff, are employing a sophisticated phishing kit to impersonate Zoom and Microsoft Teams, profiling cryptocurrency wallets before delivering malware.
A sophisticated phishing campaign is targeting Call of Duty Mobile players, luring them with promises of free in-game currency to steal their Activision account credentials and two-factor authentication codes.
This week's cybersecurity news includes the discovery of AI-powered malware, critical vulnerabilities in Siemens industrial switches, a surge in Linux kernel flaws, and a ransomware attack on a train manufacturer.
A newly disclosed exploit, codenamed Certighost, enables low-privileged Active Directory users to impersonate a Domain Controller, retrieve sensitive credentials, and gain elevated access.
A new class of AI-driven attacks, dubbed HalluSquatting, Slopsquatting, and Phantom Squatting, exploits the tendency of AI coding agents to trust hallucinated package, repository, or domain names.
Meta is rolling out a free selfie-based verification badge on Facebook to help users distinguish real people from AI-generated accounts, enhancing trust on the platform.
Law enforcement agencies have dismantled the Kratos phishing-as-a-service platform, while a new espionage implant named HollowGraph uses Microsoft 365 calendars for covert command and control.
The Vatican's official prayer app, 'Click To Pray,' has leaked the personal information of more than 700,000 global users due to an insecure API endpoint.
Europol's 'The Com' operation targeted a network of violent extremist groups, leading to the flagging of 4,340 URLs for removal and disrupting their online propaganda and coordination efforts.
A critical vulnerability in Azure Automation's default configuration could have enabled attackers to take over identities across tenants, exposing sensitive data and cloud workloads.
SentinelOne introduces an AI-driven approach to security operations, transforming analyst expertise into reusable 'skills' accessible via a GitHub repository to combat data overload and burnout.
Android malware increasingly bypasses Google's Play Store protections by exploiting sideloaded applications and malicious updates to legitimate apps.
Apache Syncope has released security updates addressing multiple critical vulnerabilities, including remote code execution, SQL injection, and server-side request forgery.
Microsoft intervened after LG monitors triggered unwanted McAfee trial pop-ups on Windows 11 via the LG Monitor App, prompting LG to disable the advertisements.
An Illinois man has been sentenced to 76 months in prison for hacking over 750 women's Snapchat accounts to steal nude photos, which he then traded or sold online.
OpenAI's ChatGPT has entered the top 10 most impersonated brands in phishing attacks, marking a significant shift in threat actor tactics, according to Check Point Research.
The SourTrade malvertising campaign employs a novel technique where victims' browsers assemble malware locally, making it harder for security tools to detect.
Researchers propose a 'Genie coefficient' to quantify the discrepancy between AI actions and human intent, highlighting risks of proactive AI agents with broad tool access.