Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,566 stories synthesized.
Qilin ransomware operators are employing the DCSync technique to steal critical Active Directory credentials, including KRBTGT and NTLM hashes, by exploiting the Directory Replication Service Remote Protocol.
Rapid7 Labs has disclosed CVE-2026-55040, a medium-severity authentication bypass vulnerability in Microsoft SharePoint that, when chained with another RCE flaw, allows unauthenticated attackers to achieve remote code execution.
A failed DNSSEC rollover for Albania's .AL TLD caused widespread outages, prompting Cloudflare's 1.1.1.1 resolver to implement a new Extended DNS Error code to signal bypassed validation.
Two new sophisticated phishing kits, Jalisco and OmegaLord, are actively targeting Microsoft 365 accounts by employing advanced techniques to bypass multi-factor authentication, researchers report.
Researchers at Tracebit have developed 'context bombs' to thwart AI-driven prompt injection attacks by using decoy resources that trigger safety guardrails in offensive AI agents.
A study of 85 popular crypto wallet browser extensions has revealed significant privacy vulnerabilities, allowing for the linking of separate user addresses and cross-site tracking.
SAP has released security updates for 16 vulnerabilities, including three critical flaws in its NetWeaver, Commerce Cloud, and AppRouter products.
Apple warns users about scammers impersonating support and financial institutions via FaceTime to steal sensitive information and drain bank accounts.
SAP's July 2026 Security Patch Day addresses a critical memory corruption flaw in SAP NetWeaver Application Server ABAP, rated CVSS 9.9, alongside other significant vulnerabilities.
Cisco Talos Intelligence Integrations leverage threat intelligence across Cisco products to help defenders combat AI-driven attacks and adaptive malware.
Google Workspace now supports FIDO2 security keys and phone passkeys for Windows login via Google Credential Provider for Windows (GCPW), bolstering organizational security.
Cisco Talos has published research detailing how threat actors exploit Python's popular packaging ecosystem for sophisticated supply-chain attacks.
Key findings • Five Perl-related vulnerabilities disclosed on July 14, 2026, impacting core interpreter and modules. • CVE-2026-58102 and CVE-2026-58101 detail heap read and DoS flaws in Cryp…
Angelo Martino, a ransomware negotiator, has been sentenced to 70 months in prison for leaking client information to the BlackCat/ALPHV ransomware gang, enabling them to extort over $75 million.
xAI's Grok Build coding CLI inadvertently uploaded full Git repositories, including commit history, to xAI's storage instead of just necessary files.
ESET researchers discovered that eleven older versions of Microsoft-signed UEFI boot shims (versions 0.9 and below) can bypass Secure Boot protections, with Microsoft revoking certificates for these specific shims.
ServiceNow has released security updates to address CVE-2026-6875, a critical sandbox escape vulnerability in its AI Platform that allows unauthenticated attackers to execute malicious code remotely.
Over 140 npm packages disguised as Wi-Fi bypass tools were found to secretly enlist visiting browsers into DDoS attacks, researchers reported.
A critical flaw in FortiClient EMS enables unauthenticated attackers to impersonate AD Connectors, potentially leading to unauthorized access.
A critical vulnerability in Fortinet's FortiSIEM Windows Agent could permit attackers on the same local network to execute arbitrary code by spoofing the supervisor's hostname.
Fortinet has issued a security advisory for a reflected Cross-Site Scripting (XSS) vulnerability in its SSL-VPN feature, potentially allowing authenticated attackers to execute arbitrary code.
FortiOS and FortiProxy captive portals are susceptible to an HTTP Response Splitting vulnerability that allows attackers to inject arbitrary headers.
A critical path traversal vulnerability in Fortinet's FortiOS, FortiPAM, FortiProxy, and FortiSwitch Manager allows authenticated attackers with physical access to delete the root file system via crafted CLI commands.
Fortinet has disclosed a vulnerability in FortiOS and FortiProxy that allows attackers with a valid web filter override token to inject arbitrary HTTP headers.