Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,288 stories synthesized.
The DShield SIEM has been updated to ELK stack version 8.19.15, introducing enhanced dashboards and new log collection capabilities for TTY and Suricata logs to improve threat analysis.
Cribl is acquiring CardinalOps to integrate agentic detection engineering capabilities into its platform, aiming to bolster SecOps efficiency and visibility into MITRE ATT&CK coverage.
Key findings • Oracle CVE-2026-46817 added to CISA KEV on July 15, 2026. • The vulnerability is confirmed to be actively exploited in the wild. • Federal agencies must remediate CVE-2026-…
Mandiant highlights the risks of improperly secured serverless applications, which can be exploited by attackers to gain initial access and potentially compromise entire cloud environments.
Cynomi is developing autonomous AI agents designed to significantly boost security team productivity by automating remediation, compliance, and task execution.
Microsoft's July 2026 Patch Tuesday release tackles a record 622 vulnerabilities, with two critical flaws exploited in the wild and listed on CISA's KEV catalog.
The White House has established 'Gold Eagle,' a federal clearinghouse to enhance the sharing of AI-driven cyber threat intelligence between government agencies and the private sector.
Microsoft's July 2026 Patch Tuesday release is its largest ever, patching a staggering 622 vulnerabilities, including two actively exploited zero-days and critical flaws in Copilot and Exchange.
Spanish authorities have arrested four individuals and dismantled a sophisticated cybercrime organization responsible for €140 million in fraud through investment scams and business email compromise attacks.
Researchers have identified significant security weaknesses in the Automated Frequency Coordination (AFC) systems for 6 GHz Wi-Fi, potentially enabling attackers to disrupt critical infrastructure by spoofing device locations.
A security flaw in Anthropic's Claude Tag Slack integration could allow unauthorized actions by interpreting literal "@Claude" text as commands, Tego AI reports.
The U.S. unsealed an indictment against three Russian nationals accused of operating Media Land and ML Cloud, a St. Petersburg-based bulletproof hosting service that provided infrastructure and technical support to cybercriminals.
A threat actor created hundreds of fake GitHub repositories mimicking legitimate software and security projects to distribute infostealer malware, targeting developers and users.
Microsoft's July 2026 Patch Tuesday release is its largest ever, patching 569 vulnerabilities, including three zero-days, two of which are being actively exploited in the wild.
Synopsys has refuted claims by the nascent D1R ransomware group that it breached the company's systems and accessed sensitive data belonging to its major customer, Bosch.
Microsoft's July 2026 Patch Tuesday fixes 570 vulnerabilities, with three zero-days, including two exploited in the wild, impacting SharePoint Server and Active Directory Federation Services.
SonicWall is urging customers to patch its Secure Mobile Access (SMA) 1000 Series appliances following active exploitation of two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410.
Finnish authorities have issued a wanted notice for convicted hacker Aleksanteri Kivimäki in connection with the 2020 Vastaamo data breach, which compromised sensitive patient records.
Fortinet has released patches for seven vulnerabilities affecting its core network security products, including critical flaws in FortiSandbox and FortiOS.
Adobe has released urgent security updates for its ColdFusion platform, addressing eight critical vulnerabilities that could lead to arbitrary code execution and privilege escalation.
A new Rust-based remote access trojan, LabubaRAT, is being distributed by threat actors who disguise it as NVIDIA software to evade detection and gain persistent access to Windows hosts.
Two unpatched vulnerabilities in Anthropic's Claude for Chrome extension allow attackers to access sensitive user data from Gmail, Google Docs, and Calendar.
A dark web administrator for the Doxbin platform has been sentenced to over two years in prison for encouraging and facilitating swatting incidents that targeted individuals and organizations across multiple countries.
A vulnerability in ABB's Advant Master Online Builder could allow unauthorized code execution due to an improperly handled search path for DLL loading.