Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,564 stories synthesized.
A threat actor created hundreds of fake GitHub repositories mimicking legitimate software and security projects to distribute infostealer malware, targeting developers and users.
Microsoft's July 2026 Patch Tuesday release is its largest ever, patching 569 vulnerabilities, including three zero-days, two of which are being actively exploited in the wild.
Synopsys has refuted claims by the nascent D1R ransomware group that it breached the company's systems and accessed sensitive data belonging to its major customer, Bosch.
Microsoft's July 2026 Patch Tuesday fixes 570 vulnerabilities, with three zero-days, including two exploited in the wild, impacting SharePoint Server and Active Directory Federation Services.
SonicWall is urging customers to patch its Secure Mobile Access (SMA) 1000 Series appliances following active exploitation of two zero-day vulnerabilities, CVE-2026-15409 and CVE-2026-15410.
Finnish authorities have issued a wanted notice for convicted hacker Aleksanteri Kivimäki in connection with the 2020 Vastaamo data breach, which compromised sensitive patient records.
Fortinet has released patches for seven vulnerabilities affecting its core network security products, including critical flaws in FortiSandbox and FortiOS.
Adobe has released urgent security updates for its ColdFusion platform, addressing eight critical vulnerabilities that could lead to arbitrary code execution and privilege escalation.
A new Rust-based remote access trojan, LabubaRAT, is being distributed by threat actors who disguise it as NVIDIA software to evade detection and gain persistent access to Windows hosts.
Two unpatched vulnerabilities in Anthropic's Claude for Chrome extension allow attackers to access sensitive user data from Gmail, Google Docs, and Calendar.
A dark web administrator for the Doxbin platform has been sentenced to over two years in prison for encouraging and facilitating swatting incidents that targeted individuals and organizations across multiple countries.
A vulnerability in ABB's Advant Master Online Builder could allow unauthorized code execution due to an improperly handled search path for DLL loading.
A critical Linux kernel vulnerability, CVE-2026-31431, known as 'Copy Fail,' allows local authenticated users or compromised containers to gain root privileges on affected ABB Ability Edgenius systems.
A critical vulnerability in Rockwell Automation's 1715-AENTR EtherNet/IP Adapter allows unauthenticated remote attackers to execute arbitrary CLI commands, potentially leading to system compromise.
CISA has issued an advisory detailing four critical vulnerabilities in ABB's T-MAC Plus industrial control system software, with CVSS scores up to 9.9.
A phishing campaign is impersonating LastPass and Bitwarden, sending fake security alerts to trick users into visiting malicious websites designed to steal credentials.
Five AsyncAPI npm packages with nearly 3 million weekly downloads were compromised through a GitHub Actions supply chain attack, injecting a remote-access implant.
A large-scale fraud operation has been uncovered, utilizing over 8,400 phishing domains and 6,600 social media scam ads to target Turkish banks and government portals, impersonating dozens of financial institutions.
Picus Security has developed a method to test vulnerability exploitability by analyzing underlying attack techniques, avoiding the risks of live exploit execution.
Dutch intelligence agencies have revealed a widespread Russian cyber-espionage campaign targeting internet-connected cameras across Europe and Ukraine to gather intelligence on NATO logistics and Ukrainian troops.
VMware has released critical security updates for its Avi Load Balancer, addressing seven severe vulnerabilities including remote code execution and authentication bypass flaws.
Pro-Iran hacktivist groups are utilizing Telegram channels to coordinate distributed denial-of-service (DDoS) attacks and hack-and-leak operations, employing the platform for recruitment, target sharing, and propaganda amplification.
Qilin ransomware operators are employing the DCSync technique to steal critical Active Directory credentials, including KRBTGT and NTLM hashes, by exploiting the Directory Replication Service Remote Protocol.
Rapid7 Labs has disclosed CVE-2026-55040, a medium-severity authentication bypass vulnerability in Microsoft SharePoint that, when chained with another RCE flaw, allows unauthenticated attackers to achieve remote code execution.