Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,167 stories synthesized.
Key findings • Four vulnerabilities disclosed in Joomla's J2Store extension on September 3, 2026. • Vulnerabilities include missing authorization, cart tampering, XSS, and PayPal callback for…
Cybercriminals have breached the popular fishing app Fishbrain, stealing user data including password hashes and salts, potentially exposing millions of anglers' credentials.
Attackers are embedding QR codes directly into email markup, circumventing security tools that rely on image file inspection and redirecting users to phishing sites.
AIR Security has emerged from stealth with $50 Million in funding to address the growing security risks associated with AI agents and their integrations.
Thomson Reuters has disclosed a cyber incident impacting its C-Track court management software, potentially exposing sensitive court records across both Canadian and US jurisdictions.
Two critical vulnerabilities in VMware Workstation and Fusion, CVE-2026-59346 and CVE-2026-59347, allow attackers with local VM admin privileges to execute code on the host system.
Microsoft Teams and the new Outlook for Windows are crashing on ARM-based devices following the August 2026 security updates, specifically KB5121003.
Cybercriminals are increasingly abusing the legitimate Node.js runtime to execute malware and evade security defenses, a technique observed since February 2026.
The Shai-Hulud infostealer worm has significantly broadened its scope, now targeting 469 credential locations across developer environments, CI/CD tools, cloud configurations, and AI tools, up from 189.
Cisco has released patches for critical vulnerabilities in its IOS XR and Nexus network devices, while also issuing a warning about unpatched flaws in its Secure Email offering.
Two distinct cyberattack campaigns targeting organizations in Latin America are utilizing artificial intelligence to enhance their data exfiltration capabilities, according to a new report.
The Gentlemen ransomware operation, also known as GOLD SHERIFF, is executing swift network intrusions, disabling security defenses and backups in under 24 hours before deploying ransomware.
California's new Digital Age Assurance Act will require Windows, macOS, iOS, and Android to collect user age brackets starting January 1, 2027, aiming to protect minors.
Traditional VPNs are a major security vulnerability for Operational Technology (OT) networks, granting overly broad access that traditional IT security models fail to address, according to a new analysis.
A critical vulnerability (CVE-2026-20212) in Cisco Nexus 9000 Series Switches with Silicon One ASICs allows unauthenticated remote attackers to execute arbitrary code with root privileges.
A former employee, whose system access was not revoked post-termination, caused significant financial and operational damage by deleting files and corrupting a database.
A CEO suggests implementing data diodes and one-way network architectures to prevent advanced AI models from accessing the internet and causing security breaches.
A security researcher alleges a local privilege escalation vulnerability, dubbed FalconFlank, exists in CrowdStrike's Falcon Sensor, potentially allowing SYSTEM-level access.
OpenMatter Network has unveiled significant platform enhancements, introducing MatterSDK with MatterVault for enhanced secret protection and Model Router for streamlined AI model management.
Microsoft will automatically enable Memory Integrity protection on eligible Windows devices starting October 2026, enhancing kernel-level security and potentially enabling Virtualization-based Security (VBS).
Anthropic's Claude AI can now execute tasks in the background on macOS and Windows, raising new security considerations for enterprises.
Key findings • Ten malicious npm packages disclosed simultaneously on September 3, 2026. • Packages impersonated internal development tools for Apple and Google Cloud. • All packages were…
The SANS Internet Storm Center's Honeypot-Omaha sensor uses the Cowrie tool to emulate SSH and Telnet, attracting and logging detailed threat actor activities for analysis.
Attackers are impersonating IT support on Microsoft Teams to trick users into granting remote access, leading to enterprise-wide compromise.