Stories

Every story we’ve synthesized.

Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.

patch1 source

FreeRDP 3.29.0 Security Update Patches 22 Vulnerabilities

The latest FreeRDP release, version 3.29.0, addresses 22 security advisories with a focus on hardening the codebase, particularly in media and channel handling.

Jul 15, 2026

research1 source

CrashStealer Malware Impersonates Apple App to Steal Mac Passwords

A new macOS infostealer, CrashStealer, uses a notarized installer and mimics Apple's CrashReporter to trick users into revealing administrator passwords, enabling theft of sensitive data from Keychain and other applications.

Jul 15, 2026

patch5 sources

Microsoft Blocks Windows Updates on Some Dell PCs Due to Shutdown Bug

Microsoft is halting the deployment of recent Windows 11 security updates to specific Dell devices because a bug is causing unexpected shutdowns and performance degradation.

Jul 15, 2026 · updated Jul 20, 2026

research1 source

Researcher Exploits EU Age Verification App Using AI-Powered Chrome Extension

A security researcher has demonstrated a bypass of the EU's age verification app using a Chrome extension powered by ClaudeAI, exploiting a design flaw that allows reusable 'over 18' attestations.

Jul 15, 2026

patch1 source

Google Chrome and Mozilla Firefox Address Critical Vulnerabilities

Google Chrome 150 and Mozilla Firefox 152 have received critical security updates to patch newly discovered vulnerabilities, with public exploit code available for some Firefox flaws.

Jul 15, 2026

research1 source

Chinese Hackers Integrate Commercial AI Models into Espionage Campaigns

State-sponsored Chinese hackers are leveraging large language models like Claude Code and DeepSeek-v4-pro to automate and enhance their cyberespionage operations, marking a significant shift in threat actor tactics.

Jul 15, 2026

research2 sources

Malicious NuGet Packages Masquerade as Game Cheats to Steal Data

Researchers have uncovered 11 malicious NuGet packages disguised as game cheats and tools, deploying a sophisticated two-stage attack to steal sensitive gamer data via Telegram bots.

Jul 15, 2026 · updated Jul 22, 2026

research6 sources

LegacyHive 0-Day Allows Standard Windows Users to Load Arbitrary Registry Hives

A newly disclosed proof-of-concept exploit, LegacyHive, targets a Windows User Profile Service vulnerability, enabling standard users to load other users' registry hives and potentially escalate privileges.

Jul 15, 2026 · updated Jul 28, 2026

research1 source

SingGuard-NSFA Offers Open-Source Guardrails for Agentic AI

A new open-source framework, SingGuard-NSFA, has been released to provide robust guardrails for agentic AI workflows, addressing operational threats with advanced risk taxonomy and efficient inference modes.

Jul 15, 2026

patch1 source

Microsoft Hyper-V Netvsc Vulnerability Enables Local Privilege Escalation

A local privilege escalation vulnerability in Microsoft Hyper-V's netvsc component, tracked as CVE-2026-54129, allows attackers with prior low-privileged code execution within a virtual machine to gain kernel-level privileges.

Jul 15, 2026

patch1 source · 1 CVE

OpenSSL OCSP Stapling Vulnerability Allows Remote Code Execution

A double free vulnerability in OpenSSL's OCSP Stapling verification (CVE-2026-35188) enables remote attackers to execute arbitrary code, though user interaction is required.

Jul 15, 2026

advisory12 sources · 6 CVEs

CISA Warns of Actively Exploited SharePoint Vulnerabilities

The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a critical alert regarding three actively exploited vulnerabilities in Microsoft SharePoint Server, urging organizations to apply patches and implement hardening measures.

Jul 15, 2026 · updated Jul 22, 2026

patch2 sources

Siemens, Schneider, Rockwell Address Critical ICS Vulnerabilities in July Patch Tuesday

Industrial giants Siemens, Schneider Electric, and Rockwell Automation have released advisories detailing numerous vulnerabilities, including critical flaws, in their Industrial Control System (ICS) products.

Jul 15, 2026

advisory5 sources

Autel EV Chargers Vulnerable to Remote Code Execution via WebSocket Flaw

A critical integer underflow vulnerability in Autel MaxiCharger AC Elite Home EV chargers allows unauthenticated attackers to execute arbitrary code remotely.

Jul 15, 2026

patch1 source

MSI Center Vulnerability Allows Local Privilege Escalation

A local privilege escalation vulnerability (ZDI-26-430, CVE-2026-6102) in MSI Center's NTIOLib_X64 driver allows attackers with initial code execution to gain SYSTEM privileges.

Jul 15, 2026

patch1 source

Linux Kernel vmwgfx Vulnerability Allows Local Privilege Escalation

A local privilege escalation vulnerability in the Linux Kernel's vmwgfx component, ZDI-26-443, allows attackers with low-privileged code execution to gain elevated permissions.

Jul 15, 2026

patch2 sources · 1 CVE

Fuji Electric Tellus Driver Vulnerable to Denial-of-Service Attacks

A vulnerability in Fuji Electric's Tellus pcid64 driver allows local attackers to cause denial-of-service conditions on affected systems.

Jul 15, 2026

advisory1 source · 1 CVE

dnsmasq Vulnerability Allows Unauthenticated Remote Code Execution

A critical heap-based buffer overflow in dnsmasq, CVE-2026-2291, allows unauthenticated remote attackers to execute arbitrary code.

Jul 15, 2026

patch1 source

ASUS Business Manager Vulnerable to Local Privilege Escalation

A local privilege escalation vulnerability in ASUS Business Manager, ZDI-26-431, allows attackers with initial code execution to gain SYSTEM privileges.

Jul 15, 2026

patch1 source

Linux Kernel Race Condition in CAN ISO-TP Protocol Enables Local Privilege Escalation

A race condition vulnerability in the Linux Kernel's CAN ISO-TP protocol allows local attackers with prior low-privileged code execution to escalate privileges to the kernel level.

Jul 15, 2026

patch1 source

WatchGuard Fireware OS Vulnerable to IKEv2 Denial-of-Service Attack

A null pointer dereference vulnerability in WatchGuard Fireware OS's IKEv2 implementation allows unauthenticated remote attackers to cause a denial-of-service condition.

Jul 15, 2026

patch1 source · 1 CVE

OpenSSL Vulnerability Exposes Sensitive Information via X.509 Email Parsing Flaw

A critical out-of-bounds read vulnerability in OpenSSL's X.509 email name processing allows unauthenticated attackers to disclose sensitive information.

Jul 15, 2026

patch2 sources

Synology DiskStation DS925+ MailPlus Vulnerability Allows Unauthenticated Redis Access

A vulnerability in Synology's DiskStation DS925+ MailPlus allows network-adjacent attackers to access the Redis instance without authentication, potentially leading to code execution.

Jul 15, 2026

patch5 sources · 1 CVE

X.Org Server Vulnerability Allows Local Privilege Escalation via Heap Buffer Overflow

A heap-based buffer overflow in X.Org Server, CVE-2026-56003, permits local privilege escalation after initial low-privileged code execution.

Jul 15, 2026