Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Zelle must face a New York lawsuit alleging inadequate fraud controls, while other incidents include a hack wiping Romania's land registry and a fine for 23andMe.
Wordfence Intelligence tracked 139 vulnerabilities in WordPress Core and plugins between July 13-19, 2026, including critical flaws like an unauthenticated file upload and an RCE in WordPress Core.
A malvertising campaign is using Bing ads to distribute a fake Claude desktop application that installs the SectopRAT information-stealing malware.
Cloudflare's new Cache Response Rules allow users to modify origin server response headers before content is cached, improving cache hit ratios and reducing origin load without server-side changes.
CISA has issued an advisory for a critical path traversal vulnerability in Rockwell Automation ThinManager, potentially impacting critical infrastructure sectors.
CISA has issued an advisory detailing several critical vulnerabilities in Pronetiqs Panduit IntraVUE software, versions 3.2.1a14 and prior, which could allow attackers to manipulate industrial control devices.
CISA has issued an advisory detailing two critical vulnerabilities in Johnson Controls' C-CURE 9000 and Victor application servers, potentially enabling unauthenticated attackers to achieve arbitrary code execution and forge server-side requests.
A critical out-of-bounds read vulnerability in MZ Automation's lib60870 library could allow attackers to crash industrial control systems, impacting sectors like energy and water.
A cleartext storage vulnerability in Johnson Controls' XAAP Android application could allow attackers with physical device access to steal sensitive information.
CISA has issued an advisory detailing several critical vulnerabilities in Weintek cMT3092X HMIs, potentially allowing privilege escalation and credential theft.
Cisco Talos reports a 49% year-over-year increase in CVEs in Q2 2026, highlighting the growing challenge of patching, and details a new Rust-based RAT called msaRAT that evades detection by hijacking browser C2 channels.
Cryptocurrency exchange BitMEX announced it will shut down operations on September 23rd, following years of regulatory challenges and a series of other crypto-related criminal cases making headlines.
Wordfence has unveiled PRISM, an AI system that autonomously discovers vulnerabilities, and Eclipse, an AI-assisted triage tool, significantly accelerating their security research pipeline.
Threat actors are exploiting the popular Notepad++ text editor by bundling legitimate application installers with malicious plugins to establish persistence and deploy malware.
GitHub's Dependabot now defaults to a three-day delay for non-security dependency updates, a move aimed at preventing the automatic inclusion of malicious code in software supply chains.
Fraudsters are leveraging inexpensive 'liveness kits' and AI to create synthetic identities that can bypass mobile verification and achieve better credit scores than legitimate borrowers.
This week's cybersecurity landscape is fraught with disguised threats, including Android spyware, PLC attacks, AI prompt injection, and malicious software hidden in seemingly legitimate packages and extensions.
Microsoft's latest email threat report reveals a 92% drop in Tycoon2FA phishing after a March disruption, but warns of a tenfold increase in Microsoft Teams vishing attempts.
A significant portion of organizations are delaying or canceling Microsoft Copilot deployments due to concerns that the AI assistant could expose confidential data, a new survey reveals.
A critical directory traversal vulnerability in the Exim mail transfer agent allows local attackers to escalate privileges on affected systems.
A critical sandbox escape flaw in Anthropic's Claude Cowork AI agent for macOS could allow it to access and modify sensitive files on the host system.
Australian energy giant Origin Energy has confirmed a significant data breach, with customer data compromised and an investigation underway to determine the full scope of the incident.
Researchers discovered a flaw in OpenAI's ChatGPT workspace agents, dubbed 'AgentForger,' allowing attackers to remotely create and deploy malicious AI agents within a victim's workspace.
Two critical path traversal vulnerabilities in Kubernetes CSI drivers for NFS and SMB allow attackers to access cross-tenant data and potentially disrupt nodes.