Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
Two key members of the notorious Scattered Spider cybercrime group have been sentenced to over five years in prison for their role in the 2024 Transport for London (TfL) hack.
Scammers are using a social-engineering tactic called GhostPairing to hijack WhatsApp accounts by tricking users into approving a new linked device, bypassing the need for passwords or verification codes.
JetBrains has released patches for six vulnerabilities impacting its development tools, including critical flaws in IntelliJ IDEA and TeamCity.
Researchers have identified a novel attack vector, 'Agent Data Injection' (ADI), that manipulates AI agents by corrupting the data they implicitly trust, leading to unintended actions like unauthorized purchases or command execution.
Intruder's new AI Pentesting service automates web application security assessments, offering rapid, on-demand testing with audit-ready reports.
A substantial portion of Windows 10 devices remain in use, posing a growing security risk as official support wanes and Extended Security Updates approach their end dates.
A new application for the Flipper Zero, named Specter, turns the popular hacking device into a passive tool for detecting active 13.56 MHz NFC readers, potentially identifying hidden skimming devices.
Splunk and Zoom have released patches for critical and high-severity vulnerabilities affecting their platforms, with potential impacts ranging from credential theft to account takeover.
Romania's National Agency for Cadastre and Land Registration (ANCPI) has been hit by a cyberattack that disrupted its e-Terra system, with threat actors claiming to offer stolen data on the dark web.
While AI tools can rapidly identify potential vulnerabilities, human knowledge and judgment are still essential for proving exploitability and real-world risk.
Cisco Talos explores the 'Hunter's Paradox,' where the overwhelming volume of security data necessitates AI, yet attackers' deceptive tactics challenge AI's reliability in threat hunting.
A Russian financially motivated threat actor is distributing a new backdoor, Starland RAT, by trojanizing legitimate software installers like WebEx and Zoom, targeting users for credential and cryptocurrency theft.
A nascent ransomware operation dubbed Spirals has demonstrated alarming speed, completing network intrusion, data exfiltration, and file encryption within a single day, posing a significant challenge to incident response.
Key findings • 14 ImageMagick vulnerabilities disclosed together, primarily memory leaks and DoS flaws. • Affected versions include ImageMagick before 7.1.2-26 and 6.9.13-51. • Multiple m…
Key findings • Google Chrome version 150.0.7871.125 patches 15 vulnerabilities disclosed on July 16, 2026. • Two critical use-after-free vulnerabilities in the Ozone component (CVE-2026-15764…
Key findings • 11 CVEs disclosed on July 16, 2026, impacting Chromium. • Two critical "Use after free" vulnerabilities in the Ozone component were patched. • High-severity flaws found in …
Key findings • Four memory exhaustion and infinite loop vulnerabilities disclosed for Python's Pillow imaging library. • Vulnerabilities affect EPS, PDF, and JPEG2000 parsing, with heap corru…
Tenable's Exposure Management Platform now unifies application security risks with enterprise-wide exposure data, offering code-to-runtime visibility.
A critical flaw in Shark RV2320EDUS robot vacuums allows attackers to hijack other vacuums in the same AWS region, enabling camera control, data theft, and Wi-Fi credential harvesting.
The Kratos PhaaS operation is actively targeting Microsoft 365 users across the US and Europe with advanced phishing techniques designed to steal credentials and sensitive data.
Lineation.ai introduces a new platform designed to secure autonomous AI agents at runtime, addressing critical vulnerabilities as these agents interact with sensitive data and execute workflows.
Microsoft introduces a new registry-based policy for Windows 11, allowing IT administrators to automatically accept Single Sign-On permissions for Entra ID-managed devices.
Splunk has released security updates to address three vulnerabilities in Splunk Enterprise and Splunk Cloud Platform, impacting REST API and Web components.
Visual Studio Code's latest update separates AI coding assistants like Copilot and Claude into their own process for improved stability and resource management.