Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,566 stories synthesized.
Dutch police have identified evidence suggesting local criminals played a role in the cyberattack on telecom provider Odido, which exposed the personal data of over 6 million customers.
Experts emphasize that transitioning to post-quantum cryptography is a vast organizational undertaking, extending far beyond technical implementation to encompass infrastructure, vendor management, and employee education.
An internal dispute within the OpenMandriva Linux project escalated into an attempted sabotage by a contributor with administrative privileges, involving repository wipes and malicious package pushes.
A prompt injection vulnerability in GitHub's Agentic Workflows allows attackers to exfiltrate data from private repositories via public issues.
The European Commission is taking legal action against Spain, France, Ireland, and the Netherlands for failing to implement the NIS2 Directive on cybersecurity.
A malicious version of the Injective SDK package was published on npm, compromising developers and potentially stealing cryptocurrency wallet private keys and seed phrases.
The Australian Cyber Security Centre (ACSC) has issued a warning about a widespread campaign exploiting numerous Content Management System (CMS) platforms and plugins, leading to the deployment of webshells and significant compromise.
Threat actors are using old, inactive GitHub accounts and compromised tokens to map out corporate organizations and repositories via the GitHub API, raising concerns about supply chain security.
The RedHook Android banking trojan has been updated to abuse ADB Wireless Debugging and the Shizuku tool, granting it shell-level access and silent permission escalation capabilities.
Cisco Talos reports China-nexus threat actor UAT-7810 is expanding its Operational Relay Box (ORB) networks using custom malware, exploiting vulnerabilities in unpatched routers to deploy new backdoors.
Microsoft has integrated MDASH, an AI-powered system, into its security workflow to proactively discover and patch vulnerabilities in Windows, leading to a significant increase in disclosed CVEs.
npm version 12 introduces significant security enhancements by disabling install scripts by default and deprecating granular access tokens that bypass two-factor authentication.
GitHub has implemented a new custom properties system to ensure every repository has a clearly defined owner, streamlining security workflows and accountability.
CISA has issued an advisory for a hard-coded credentials vulnerability in Schneider Electric's Easergy MiCOM Px40 Series protection relays, potentially exposing device identification data.
A critical vulnerability in the end-of-life OpenPLC v3 industrial control system software allows authenticated attackers to achieve arbitrary code execution.
CISA has issued an advisory detailing multiple vulnerabilities in Schneider Electric's PowerChute Serial Shutdown software, versions 1.4 and prior, posing significant risks to industrial control systems.
European lawmakers narrowly failed to block the reintroduction of an interim rule allowing tech platforms to voluntarily scan chats for child sexual abuse material, moving the controversial 'Chat Control' measure closer to revival.
Wordfence Intelligence disclosed 246 vulnerabilities in 179 WordPress plugins and 40 themes between June 29 and July 5, 2026, with immediate firewall protection for premium users.
A critical integer overflow vulnerability (CVE-2026-14544) in HP's Linux Imaging and Printing software (HPLIP) enables remote attackers to execute arbitrary code.
Scammers are exploiting the FIFA World Cup with cryptocurrency prediction and betting sites that employ pump-and-dump schemes, fake tokens, and vanishing platforms to defraud fans.
A coordinated malware campaign distributed 17 fake npm and PyPI packages impersonating Paysafe, Skrill, and Neteller SDKs, designed to steal developer API keys and sensitive credentials.
A critical use-after-free vulnerability in the Linux kernel's DRM GEM core, CVE-2026-46215, allows local users with GPU render node access to escalate privileges to root.
Microsoft details GigaWiper, a sophisticated Golang backdoor that consolidates multiple destructive malware functionalities into a single implant, increasing threat actor efficiency.
Users report Windows Update automatically installing an LG monitor application that displays unsolicited McAfee advertisements, raising privacy and consent concerns.