Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,566 stories synthesized.
A critical vulnerability in Motorola MR2600 Wi-Fi routers allows unauthenticated local attackers to execute arbitrary code by uploading a malicious firmware image, potentially leading to full network compromise.
Researchers at the University of Florida have developed VeriChat, an AI-powered conversational assistant designed to identify malicious circuitry and hidden backdoors in integrated circuit designs.
A new report from Orca Security reveals a critical gap in AI security, with nearly all fixable vulnerabilities in AI deployments left unaddressed, exposing organizations to significant risks.
Official SpaceX and Starlink X accounts were briefly compromised to promote a fraudulent cryptocurrency, leading to a 'rug-pull' scam that defrauded investors.
Researchers have detected a significant increase in internet-wide scanning activity specifically targeting Model Context Protocol (MCP) servers and AI assistant configuration files, posing a threat to sensitive internal systems.
Microsoft is testing a new Windows 11 Copilot feature called 'PC Insights' that uses AI to analyze system performance and identify hardware bottlenecks.
Key findings • CVE-2008-4128, a Cisco vulnerability, is now confirmed actively exploited in the wild. • CISA added this flaw to its Known Exploited Vulnerabilities catalog on July 13, 2026. …
The European Union has imposed sanctions on nine individuals and four entities linked to a Russian cyber-espionage network accused of targeting critical infrastructure and governments across at least nine countries since 2010.
Debian 13.6 (trixie) has been released, fixing an expired UEFI Secure Boot certificate issue and patching more than a hundred security advisories across various software packages.
A new open-source penetration testing framework, KittySploit, integrates local AI agents for autonomous attack path planning, featuring over 1,150 modules and a hybrid Python/Zig core.
This week's cybersecurity news features a 16-year-old Linux KVM escape vulnerability, numerous flaws in Ubiquiti's UniFi ecosystem, and innovative methods for data theft from air-gapped systems.
Apple has filed a federal lawsuit against OpenAI and former employees, accusing the AI company of orchestrating a systematic campaign to steal confidential hardware designs and trade secrets.
Version 8.14.0 of the jscrambler npm package was compromised, silently installing and executing a native infostealer on Windows, macOS, and Linux systems.
A bug in Microsoft Teams for macOS is causing blank screens or freezes during screen sharing, primarily impacting government cloud tenants.
Key findings • Ten ImageMagick vulnerabilities disclosed between July 9-11, 2026, with moderate to low severity. • Multiple vulnerabilities related to memory management, including use-after-f…
Researchers have developed 'Ghostcommit,' a novel technique that embeds malicious prompt injection instructions within PNG image metadata to bypass AI code reviewers and trick coding agents into exfiltrating sensitive repository secrets.
A critical vulnerability in Dell's BIOS password storage mechanism allows attackers with physical access to recover administrator and user passwords in mere milliseconds.
A study revealed that 281 popular Android VPN apps on the Google Play Store suffer from critical security flaws, including unencrypted data transfer and traffic leaks.
Rapid7's Metasploit Framework has released new modules targeting a critical RCE vulnerability in FlowiseAI's CSV Agent and a privilege escalation flaw in macOS PackageKit.
The EPA conducted a national cyber drill simulating a three-day internet outage to test water utilities' resilience and manual operational capabilities.
Healthcare vendors are increasingly becoming the primary targets for cyberattacks, with AI tools poised to amplify the scale and sophistication of these threats.
A recently disclosed vulnerability, dubbed 'Squidbleed,' in the widely-used Squid proxy server allows for the leakage of sensitive HTTP requests, potentially impacting numerous organizations.
An open-source tool named ScamBuster employs AI to impersonate potential victims, engaging with phishing attackers to gather intelligence on their operations and infrastructure.
CISA has added CVE-2026-48939 and CVE-2026-56291 to its Known Exploited Vulnerabilities Catalog, citing active exploitation of file upload flaws.