Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A quirk in Microsoft Defender XDR's DeviceNetworkEvents table can cause legitimate public IP connections, including command-and-control channels, to go undetected.
Key findings • Three Freerdp vulnerabilities disclosed together between July 20-21, 2026. • CVE-2026-64621: Double-free vulnerability in crafted .rdp files leading to potential RCE. • CVE…
Key findings • Four vulnerabilities disclosed together for Apache MINA SSHD on July 21, 2026. • Two path traversal vulnerabilities (CVE-2026-56623, CVE-2026-56452) affect sshd-git and sshd-sc…
San Francisco City Attorney David Chiu has demanded Apple and Google remove 13 AI-powered 'nudify' apps from their stores, citing their profit from non-consensual intimate imagery.
US healthcare finance software provider Craneware has disclosed a cyber incident resulting in the exfiltration of file names, employee data, and customer/partner records.
Healthcare technology company Clover Health Investments has disclosed a data breach impacting customers’ personal and health information, stemming from a social engineering attack that compromised employee accounts.
North Korean state-sponsored hackers are employing elaborate social engineering tactics, posing as recruiters to deliver custom malware to Web3 professionals through fake job assessment portals.
Amazon GuardDuty's new AI-powered investigation agent, now in public preview, automates initial threat investigation steps, significantly reducing response times for security teams.
Linux kernel developers rapidly patched more than 400 vulnerabilities, including memory-safety flaws, in a single 24-hour period, highlighting the growing role of AI in vulnerability discovery.
A critical vulnerability (CVE-2026-58443) in Gitea allows attackers with public-only write tokens to modify private pull request branches and trigger private Actions workflows.
BeyondTrust's new Pathfinder Platform integrates PAM, ITDR, and CIEM to provide a holistic view of identity security and address the growing threat of privilege escalation through non-human identities.
Operational technology security expert Benjamin Bachmann debunks the air gap myth and emphasizes attacker focus on operational control over data theft in industrial environments.
Key findings • Six vulnerabilities disclosed across Rockwell Automation products on July 21, 2026, including DoS, RCE, and path traversal. • CVE-2026-10714 in FactoryTalk Services Platform al…
A cyberespionage campaign is leveraging Telegram bots to control backdoors within Middle Eastern government networks, using the popular messaging app to mask malicious communications.
Researchers discovered widespread vulnerabilities in TCG Opal2-compliant self-encrypting drives, compromising the hardware encryption relied upon by millions of devices.
A local privilege escalation vulnerability (ZDI-26-446, CVE-2026-50297) in Microsoft Windows WMI Providers allows attackers with low-privileged code execution to gain higher privileges.
Atlassian's Vishal Thakur introduces PR3TACK, an open-source framework that catalogs plausible, yet unobserved, attacker tactics to help defenders prepare for future threats.
A new report reveals that AI agents are increasingly logging into enterprise systems using human credentials, creating substantial identity and audit trail risks for organizations.
CrowdStrike's research highlights that the effective operationalization of frontier AI, rather than the models themselves, is key to improving cybersecurity outcomes.
A critical authentication bypass vulnerability in Palo Alto Networks' PAN-OS GlobalProtect is being actively exploited by threat actors to deploy the Qilin ransomware.
GNOME is reducing its vulnerability disclosure timeline from 90 to 30 days, citing the increasing volume of AI-generated security reports that often lack disclosure.
OVHcloud has detailed its aggressive strategy to patch a critical KVM hypervisor vulnerability, CVE-2026-53359, by rebooting tens of thousands of hosts, impacting approximately one million virtual machines.
A new open-source toolkit named Furtex offers security researchers and red teamers advanced capabilities for testing Linux endpoint defenses through novel evasion techniques.
Key findings • CISA added two WordPress vulnerabilities to its KEV catalog on July 21, 2026. • Both flaws, CVE-2026-60137 and CVE-2026-63030, are confirmed to be actively exploited in the wil…