Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,178 stories synthesized.
ConnectWise has suspended its Cloud Backup service after a supply chain attack granted unauthorized access to its environment, impacting customer data protection capabilities.
Key findings • 14 vulnerabilities disclosed in Cpanel::JSON::XS on October 19, 2026, all patched in version 4.80. • Issues include potential for CPU exhaustion, memory leaks, and out-of-bound…
Cloudflare details how it drastically reduced AI code reviewer inference costs by 68% through a multi-pronged optimization strategy, cutting expenses from $2.46 to $0.77 per review.
Senator Ron Wyden is pushing federal agencies to implement Encrypted Client Hello (ECH) to shield sensitive user traffic from adversaries.
A surge in AI-driven vulnerability discovery is leading to a significant increase in security patches being bypassed by attackers, forcing vendors to issue follow-up fixes.
Key findings • 25 vulnerabilities disclosed across IBM Concert, Cloud Pak System, and MQ on October 19, 2026. • High severity flaws in Concert (CVE-2026-6719) and MQ (CVE-2026-12665, CVE-2026…
Key findings • Nine vulnerabilities disclosed for IBM Concert (v1.0-3.0.0) on October 19, 2026. • High severity flaw (CVE-2026-6719) allows decryption of sensitive information due to weak cry…
Attackers are exploiting a vulnerability in Siemens Software Center by pairing legitimate software with malicious DLLs to deliver ClickFix malware.
Cloudflare introduces Clairic, a novel AI model designed for rapid and cost-effective extraction of structured data from unstructured inputs, available on Workers AI.
Key findings • Critical supply-chain attack in Rank Math SEO PRO (CVE-2026-111862) led to malware infection. • 25 CVEs disclosed on Oct 19, 2026, affecting numerous WordPress plugins. • M…
Bright Security introduces STAR Fuzzer, an AI-powered tool that automates the generation of fuzzing harnesses and the identification of security-critical functions without requiring a running application.
Key findings • Five vulnerabilities in Hmailserver disclosed on October 19, 2026, with High and Medium severity ratings. • Local privilege escalation possible via incorrect installer permissi…
A Ukrainian drone strike on a data center near St. Petersburg has caused service disruptions for Russia's largest social network, VKontakte, impacting user access to various platform features.
Key findings • 40 malicious npm packages were disclosed in a coordinated event. • All advisories were published within a 7-minute window on October 19, 2026. • Packages were newly publish…
The Department of Homeland Security is banning the use of Chinese AI model DeepSeek and its affiliates by civilian federal agencies, citing national security and data privacy risks.
A new report from Moody's reveals a significant lag in vulnerability remediation, with exploited flaws taking a median of 87 days to be patched.
Check Point Research's latest threat intelligence report highlights significant data breaches at CenterPoint Energy and Burger King Japan, alongside critical vulnerabilities in LiteLLM, Ivanti Connect Secure, and GitLab.
Attackers are exploiting vulnerable university and government websites to manipulate search results, using copyright takedown requests related to OnlyFans content as a cover.
Attackers compromised AOMEI's update servers for its popular Backupper software, briefly pushing malware to users worldwide.
Key findings • Three medium-severity authorization vulnerabilities disclosed in Frappe Helpdesk and CRM on October 19, 2026. • CVE-2026-111939 allows impersonation and phishing ticket creatio…
Back-office support services firm Conduent has agreed to a preliminary $80 million settlement in a class-action lawsuit stemming from a 2024 data breach that impacted approximately 62.2 million individuals.
Axonius introduces Axonius AI Workforce, enabling organizations to deploy autonomous Virtual Workers for environment monitoring, risk identification, and automated remediation.
Sweet Security introduces Virtual Patching, a one-click solution to protect cloud and AI applications from newly discovered vulnerabilities while permanent fixes are developed.
Tenable One Cloud Exposure now supports Microsoft Entra Agent ID, enabling organizations to discover and secure the unique identities of AI agents operating in their cloud environments.