Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,726 stories synthesized.
European lawmakers narrowly failed to block the reintroduction of an interim rule allowing tech platforms to voluntarily scan chats for child sexual abuse material, moving the controversial 'Chat Control' measure closer to revival.
Wordfence Intelligence disclosed 246 vulnerabilities in 179 WordPress plugins and 40 themes between June 29 and July 5, 2026, with immediate firewall protection for premium users.
A critical integer overflow vulnerability (CVE-2026-14544) in HP's Linux Imaging and Printing software (HPLIP) enables remote attackers to execute arbitrary code.
Scammers are exploiting the FIFA World Cup with cryptocurrency prediction and betting sites that employ pump-and-dump schemes, fake tokens, and vanishing platforms to defraud fans.
A coordinated malware campaign distributed 17 fake npm and PyPI packages impersonating Paysafe, Skrill, and Neteller SDKs, designed to steal developer API keys and sensitive credentials.
A critical use-after-free vulnerability in the Linux kernel's DRM GEM core, CVE-2026-46215, allows local users with GPU render node access to escalate privileges to root.
Microsoft details GigaWiper, a sophisticated Golang backdoor that consolidates multiple destructive malware functionalities into a single implant, increasing threat actor efficiency.
Users report Windows Update automatically installing an LG monitor application that displays unsolicited McAfee advertisements, raising privacy and consent concerns.
A new phishing-as-a-service platform, Forg365, combines advanced techniques like adversary-in-the-middle (AiTM) and device code phishing with AI-generated lures to steal Microsoft 365 credentials.
Latvijas Valsts Mezi (LVM), a major Latvian state-owned forestry company, is still grappling with IT system restoration weeks after a significant ransomware attack disrupted operations and customer services.
Cloudflare is fast-tracking its transition to post-quantum cryptography, prioritizing the deployment of ML-DSA signatures despite their current limitations, as newer, more efficient algorithms are not yet ready.
A novel threat actor is using 'vibe-coded' PowerShell scripts to stealthily map Active Directory environments, evading detection by mimicking legitimate network traffic.
Citrix introduces MCP Gateway for NetScaler, enabling secure routing and governance of enterprise AI agent traffic to Model Context Protocol servers.
The UNC6692 threat group is employing a sophisticated social engineering tactic, using Microsoft Teams to impersonate IT helpdesk staff and trick users into downloading their SNOW malware.
A recent cryptomining incident reveals AI gateways as a significant attack vector, potentially exposing sensitive cloud infrastructure and identity data to threat actors.
Analysis of the Everest ransomware reveals a discrepancy between its claims of 1 TB data theft and the actual malware capabilities, suggesting separate tools were used for exfiltration.
Many security operations centers struggle to effectively use threat intelligence feeds due to a lack of structured context and timely integration, leaving valuable data underutilized.
Foxit has released critical security updates addressing 20 vulnerabilities in its PDF Reader and Editor for Windows and macOS, with several allowing for remote code execution.
Interpol's Operation First Light 2026, a four-month global effort, resulted in over 5,800 arrests and $293 million in seized assets targeting social engineering scams.
The pervasive use of large language models may fundamentally alter human language, thought patterns, and social interactions, researchers warn.
Researchers discover that GitHub Copilot can be tricked into generating malicious code through a multi-turn conversational exploit, bypassing its single-turn safety measures.
The 'GodDamn' ransomware is employing a sophisticated Bring Your Own Vulnerable Driver (BYOVD) technique, utilizing a Microsoft-signed kernel driver to disable security software on victim systems.
Key findings • Nine vulnerabilities in Mistune patched in version 3.3.0, disclosed on July 9, 2026. • Flaws include denial-of-service via quadratic complexity in parsing and recursive include…
Key findings • Nine vulnerabilities in Authlib's Mistune patched in version 3.3.0. • Flaws include denial-of-service via quadratic complexity in parsing. • URL filtering bypass and arbitr…