Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,726 stories synthesized.
Key findings • Google patched 25 vulnerabilities in Chrome on July 9, 2026, including critical use-after-free and inappropriate implementation flaws. • Vulnerabilities affected numerous Chrom…
Key findings • Google patched 25 vulnerabilities in Chromium on July 9, 2026, including critical use-after-free and inappropriate implementation flaws. • Vulnerabilities affected numerous Chr…
An international law enforcement effort involving 97 countries has resulted in the arrest of over 5,800 suspects and the seizure of $293 million in illicit assets as part of a broad crackdown on fraud schemes.
Key findings • Four vulnerabilities in Node Tar disclosed on July 9, 2026, affecting archive parsing and extraction. • Issues include NUL byte handling, negative entry sizes, and resource exh…
Key findings • Three denial-of-service vulnerabilities in PyPDF disclosed together on July 9, 2026. • Vulnerabilities stem from crafted PDFs exploiting image parsing and cross-reference strea…
A new wave of 'quishing' attacks is leveraging QR codes embedded in emails to bypass traditional security filters, leading to credential theft and malware delivery.
A malicious installer for the LetsVPN service is distributing GoodPersonRAT, a stealthy remote access trojan designed to grant attackers full control over infected systems.
The Helix data extortion group is targeting Microsoft 365 users with a novel approach using vishing and device code phishing to bypass traditional defenses and exfiltrate sensitive data, primarily from SharePoint.
Insurance company AssuranceAmerica has disclosed a data breach affecting nearly 7 million drivers, with attackers gaining access to sensitive customer information.
ESET researchers report a significant increase in malicious AI agents being planted in open-source tool repositories, posing risks to users and enabling cyber-attacks.
Google Chrome 150 has been released with patches for 27 vulnerabilities, including two critical-severity flaws.
Meta's new AI image generation tool, Muse Image, allows users to incorporate public Instagram photos and reels into AI-created content, raising significant privacy questions.
A red teamer exploited physical security and employee preoccupation with network issues to steal a valuable trophy from a Fortune 500 company.
Microsoft has released a patch for a zero-day vulnerability in Microsoft Defender, dubbed RoguePlanet, which was publicly disclosed by a researcher in dispute with the company.
A critical backdoor vulnerability, CVE-2026-11405, in Tenda firmware allows unauthenticated attackers to gain administrative access to devices via their web interface.
Wireshark 4.6.7, a crucial maintenance release, has patched twelve security flaws discovered in its protocol dissectors and capture file parsing capabilities.
Palo Alto Networks has disclosed CVE-2026-0288, a critical vulnerability in PAN-OS that allows unauthenticated attackers to execute arbitrary code or cause a denial-of-service by sending specially crafted network traffic.
A self-propagating bot observed scanning for open HTTP and SSH ports uses a unique URI string, "/_HELP_ME_ESCAPE_FROM_BELARUS_PLEASE_", which appears to be a genuine plea for assistance rather than an exploit.
A new Android spyware, PromptSpy, is the first mobile malware to use Google's Gemini AI during runtime to dynamically adapt its behavior and evade detection.
The APT-C-20 (Fancy Bear) threat group is employing a sophisticated fileless attack technique, embedding shellcode within PNG images to deploy a C# backdoor and evade traditional security measures.
Key findings • Twelve Wireshark vulnerabilities disclosed on July 8, 2026, primarily DoS flaws. • Flaws affect multiple protocol dissectors and file parsers, including IEEE 802.11, SSH, and p…
Key findings • Ten CVEs disclosed simultaneously for Drupal on July 8, 2026. • All vulnerabilities are detailed in Drupal's official security advisories. • Users are directed to https://w…
Key findings • Five Drupal security advisories disclosed simultaneously on July 8, 2026. • All vulnerabilities are detailed in Drupal's official security advisories. • Users are directed …
Mount Royal University has confirmed a cyberattack where hackers stole and deleted sensitive data from its file storage systems, with a group named CMD Organization claiming responsibility and demanding a $1.9 million ransom.