Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,566 stories synthesized.
A new phishing-as-a-service platform, Forg365, combines advanced techniques like adversary-in-the-middle (AiTM) and device code phishing with AI-generated lures to steal Microsoft 365 credentials.
Latvijas Valsts Mezi (LVM), a major Latvian state-owned forestry company, is still grappling with IT system restoration weeks after a significant ransomware attack disrupted operations and customer services.
Cloudflare is fast-tracking its transition to post-quantum cryptography, prioritizing the deployment of ML-DSA signatures despite their current limitations, as newer, more efficient algorithms are not yet ready.
A novel threat actor is using 'vibe-coded' PowerShell scripts to stealthily map Active Directory environments, evading detection by mimicking legitimate network traffic.
Citrix introduces MCP Gateway for NetScaler, enabling secure routing and governance of enterprise AI agent traffic to Model Context Protocol servers.
The UNC6692 threat group is employing a sophisticated social engineering tactic, using Microsoft Teams to impersonate IT helpdesk staff and trick users into downloading their SNOW malware.
A recent cryptomining incident reveals AI gateways as a significant attack vector, potentially exposing sensitive cloud infrastructure and identity data to threat actors.
Analysis of the Everest ransomware reveals a discrepancy between its claims of 1 TB data theft and the actual malware capabilities, suggesting separate tools were used for exfiltration.
Many security operations centers struggle to effectively use threat intelligence feeds due to a lack of structured context and timely integration, leaving valuable data underutilized.
Foxit has released critical security updates addressing 20 vulnerabilities in its PDF Reader and Editor for Windows and macOS, with several allowing for remote code execution.
Interpol's Operation First Light 2026, a four-month global effort, resulted in over 5,800 arrests and $293 million in seized assets targeting social engineering scams.
The pervasive use of large language models may fundamentally alter human language, thought patterns, and social interactions, researchers warn.
Researchers discover that GitHub Copilot can be tricked into generating malicious code through a multi-turn conversational exploit, bypassing its single-turn safety measures.
The 'GodDamn' ransomware is employing a sophisticated Bring Your Own Vulnerable Driver (BYOVD) technique, utilizing a Microsoft-signed kernel driver to disable security software on victim systems.
Key findings • Nine vulnerabilities in Authlib's Mistune patched in version 3.3.0. • Flaws include denial-of-service via quadratic complexity in parsing. • URL filtering bypass and arbitr…
Key findings • Nine vulnerabilities in Mistune patched in version 3.3.0, disclosed on July 9, 2026. • Flaws include denial-of-service via quadratic complexity in parsing and recursive include…
Key findings • Google patched 25 vulnerabilities in Chromium on July 9, 2026, including critical use-after-free and inappropriate implementation flaws. • Vulnerabilities affected numerous Chr…
Key findings • Google patched 25 vulnerabilities in Chrome on July 9, 2026, including critical use-after-free and inappropriate implementation flaws. • Vulnerabilities affected numerous Chrom…
An international law enforcement effort involving 97 countries has resulted in the arrest of over 5,800 suspects and the seizure of $293 million in illicit assets as part of a broad crackdown on fraud schemes.
Key findings • Four vulnerabilities in Node Tar disclosed on July 9, 2026, affecting archive parsing and extraction. • Issues include NUL byte handling, negative entry sizes, and resource exh…
Key findings • Three denial-of-service vulnerabilities in PyPDF disclosed together on July 9, 2026. • Vulnerabilities stem from crafted PDFs exploiting image parsing and cross-reference strea…
A new wave of 'quishing' attacks is leveraging QR codes embedded in emails to bypass traditional security filters, leading to credential theft and malware delivery.
A malicious installer for the LetsVPN service is distributing GoodPersonRAT, a stealthy remote access trojan designed to grant attackers full control over infected systems.
The Helix data extortion group is targeting Microsoft 365 users with a novel approach using vishing and device code phishing to bypass traditional defenses and exfiltrate sensitive data, primarily from SharePoint.