Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,128 stories synthesized.
Key findings • A batch of 24 vulnerabilities disclosed between Sep 8-11, 2026, impacts Cisagov Csaf, Mirth Connect, Orthanc DICOM Server, and AVEVA Pipeline Integrity Monitor. • Flaws include…
IDScan.net has confirmed a significant data breach impacting over 153 million U.S. and Canadian driver's licenses, with the stolen data reportedly appearing for sale on the dark web.
Key findings • 21 vulnerabilities disclosed for Concrete CMS versions prior to 9.5.3 between Sept 8-11, 2026. • Flaws include Stored XSS, CSRF, authorization bypasses, and SSTI. • Multipl…
Key findings • 25 Linux kernel vulnerabilities disclosed on September 11, 2026, affecting multiple subsystems. • Vulnerabilities span memory management, tracing, device drivers, and security …
The Florida Department of Motor Vehicles has confirmed a data breach resulting from credentials stolen from a police officer's personal device, attributed to the ShinyHunters cybercrime group.
Key findings • 14 MongoDB vulnerabilities disclosed between Sep 10-11, 2026, impacting server and multiple language drivers. • Multiple High-severity flaws in GridFS component allow query man…
Key findings • 24 CVEs disclosed together for Apache projects between Sep 7-11, 2026, ranging from Medium to Critical severity. • Critical vulnerabilities (CVSS 9.8) in Apache Camel K allow c…
Cyber extortion group FulcrumSec exploited stolen GitHub access tokens found in client-side JavaScript to exfiltrate over a terabyte of data from pharmaceutical giant Novo Nordisk.
New research analyzing 2.47 million simulated phishing attacks suggests organizations should prioritize credential leak and user reporting rates over simple click-through rates for more effective security awareness testing.
A novel attack technique, GuardBreaker, demonstrates how threat actors can manipulate AI's safety mechanisms to bypass analysis and compromise networks, highlighting the urgent need for robust AI governance.
GitLab has released patches for CVE-2026-85706, a critical CVSS 10.0 path traversal vulnerability in its repository commits API, which attackers are actively probing.
A critical path traversal vulnerability in GitLab, CVE-2026-85706, is being actively exploited in the wild just one day after patches were made available, highlighting the rapid threat actor response to newly disclosed flaws.
A novel offensive operation utilizes a semi-autonomous AI agent to harvest, validate, and consolidate access to LLM inference services, creating a partially self-expanding supply chain.
Researchers have demonstrated InjectEave, a novel electromagnetic side-channel attack that can leak low-frequency analog information from devices, enabling eavesdropping on audio or appliance states without physical access.
A new IoT malware strain named KATARU has emerged, utilizing multiple Linux privilege escalation exploits and Mirai-like DDoS capabilities, posing a significant threat to unsecured devices.
Russian state-sponsored hackers are using Anthropic's Claude AI to automate malware rebuilding and evasion, targeting governments and defense organizations.
A large-scale business email compromise campaign sent over one million emails impersonating CEOs to trick employees into approving fraudulent payments.
Metasploit has released sixteen new modules, including ten exploits, with five targeting vulnerabilities listed on the CISA Known Exploited Vulnerabilities (KEV) catalog.
The global fraud landscape is fragmenting, moving away from large, centralized marketplaces towards smaller, specialized 'Fraud-as-a-Service' (FaaS) providers.
A new phishing campaign is exploiting Microsoft 365's Direct Send feature, with attackers specifically timing their attacks to coincide with US Eastern business hours.
Microsoft's September 2026 security update KB5124008 is causing connection failures for enterprise clients using Always On VPN with certificate-based authentication.
Cloudflare CASB now allows security teams to automatically remediate SaaS misconfigurations, moving beyond passive alerts to proactive, event-driven responses.
A critical vulnerability in ConfigServer Security & Firewall (CSF) for cPanel/WHM, CVE-2026-65638, allows unauthenticated remote command execution via the MESSENGER service.
VPN provider Surfshark disclosed a security incident where threat actors accessed a misconfigured test server containing internal configurations and engineering materials, though no user data was compromised.