Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
New research from Cato Networks demonstrates that AI models, when paired with specialized 'harness' tools, can execute complex cyberattack chains autonomously and rapidly.
Anthropic's Claude Tag AI agent for Slack operates on a unique shared-access model, where administrators configure a single access bundle for the agent rather than relying on individual user credentials.
A six-month phishing campaign, dubbed SeasonalInvite, is tricking users into installing legitimate RMM software like AnyDesk and TeamViewer via fake eCard lures.
CISA, NSA, and international partners have published comprehensive guidance for organizations on establishing effective Coordinated Vulnerability Disclosure (CVD) programs to better collaborate with security researchers.
Dutch police have dismantled a global cryptocurrency investment scam, arresting an alleged mastermind and shutting down operations that defrauded tens of thousands worldwide.
Researchers have developed an AI system that automates the discovery and exploitation of complex software vulnerabilities, successfully finding a zero-day in a popular WordPress plugin.
Mozilla, Google, Adobe, and Broadcom have issued urgent security updates to address a range of critical vulnerabilities affecting their popular software products.
Bitdefender researchers have detailed new techniques using Windows bind links to hide malware from endpoint detection and response (EDR) tools by manipulating filesystem views.
Rapid7's latest analysis reveals sophisticated methods attackers use to maintain persistent access within AWS environments by manipulating Identity and Access Management (IAM) users.
Sophos research indicates that compromised credentials, including those obtained through phishing and brute-force attacks, have surpassed software vulnerability exploitation as the leading method for ransomware initial access.
Tenable's blog post outlines how merging application security scanner data with exposure management platforms provides comprehensive visibility, filters noise, and automates patching for critical coding flaws.
Dell has issued urgent security updates for multiple critical vulnerabilities in its PowerProtect Data Domain products, including CVE-2026-53483 and CVE-2026-53481, which allow unauthenticated remote attackers to gain full system control.
Microsoft has patched five 'Important' rated information disclosure vulnerabilities in Windows RDP, potentially exposing sensitive system memory data.
Radware's DefensePro X platform now features a cloud-augmented architecture, integrating AI-powered cloud algorithms for enhanced application-layer DDoS attack detection while maintaining on-premises traffic inspection and mitigation.
LatticeFlow AI launches a platform to bridge the gap between AI governance frameworks and technical controls, enabling continuous risk monitoring for autonomous systems.
Nudge Security introduces new agentic capabilities to automatically detect and remediate dangerous OAuth grants and browser extensions, addressing a critical gap in enterprise security.
Polygraf AI's new Meeting Guard tool offers real-time detection of deepfakes and voice clones during enterprise meetings to combat AI-driven fraud.
A new proof-of-concept exploit, LegacyHive, targets a Windows User Profile Service vulnerability allowing privilege escalation, released shortly after Microsoft's July Patch Tuesday.
Fortinet, Ivanti, and ServiceNow have collectively released patches for 15 vulnerabilities, including critical flaws in ServiceNow's AI platform and Fortinet's security products.
A critical flaw in the Cursor AI code editor allows attackers to execute arbitrary code on Windows systems simply by having users clone and open a specially crafted Git repository.
The ClickFix social engineering technique has transformed into a sophisticated, industrialized attack ecosystem, leveraging a Malware-as-a-Service model to bypass traditional defenses.
A new iteration of the TuxBot IoT botnet framework, dubbed TuxBot v3 Evolution, has been discovered incorporating Large Language Model (LLM) assistance in its development, leading to both enhanced capabilities and notable bugs.
A sophisticated new malware framework, OkoBot, is actively targeting cryptocurrency users through a complex, multi-stage infection chain involving SSH tunnels and over 20 malicious payloads.
AWS Security Hub now offers enhanced protection for AI workloads and monitoring for Microsoft Azure environments, aiming to centralize security findings across diverse cloud platforms.