Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
A financially motivated cybercrime campaign is distributing the Vidar stealer and XMRig miner by employing sophisticated evasion techniques, including code signing abuse and file-size inflation.
A growing trend of AI-driven vulnerability discovery is outpacing traditional defense mechanisms, creating a critical need for organizations to adapt their security strategies.
A 19-year-old suspected member of the Scattered Spider cybercrime group, Peter Stokes, was reportedly identified and apprehended through the use of Microsoft's Global Device ID (GDID) telemetry, following a death threat made to a cybersecurity researcher.
Atrium Health will pay $1.8 million to resolve a class action lawsuit alleging its patient portal unlawfully shared sensitive health data with third parties like Meta and Google.
A class-action lawsuit targeting xAI and Stability AI over the creation of deepfake child sexual abuse material (CSAM) has been expanded to include new plaintiffs alleging their images were used via Grok and Stable Diffusion models.
CISA has added CVE-2026-48908, CVE-2026-55255, and CVE-2026-56290 to its Known Exploited Vulnerabilities (KEV) Catalog, citing active exploitation.
A new Office of Management and Budget directive, M-26-14, fundamentally reshapes federal agency logging requirements, prioritizing comprehensive asset visibility as the critical first step toward achieving cybersecurity maturity.
macOS systems are generating unusual DNS queries for NIMLOC (Type 32) records, which, despite their historical association with an obsolete routing architecture, are actually tied to NetBIOS name service broadcasts.
A prevalent social engineering scam uses fake account reports on Reddit and Discord to trick users into revealing login credentials or verification codes, leading to account compromise.
A critical vulnerability (CVE-2026-20896) in Gitea's reverse-proxy authentication mechanism is being actively exploited, allowing attackers to bypass authentication with a single HTTP header.
A novel cloud worm named CAI (Cloud AI Infrastructure Attack Framework) is actively targeting cloud-native developer tools, eliminating competing malware, and engaging in credential theft and cryptomining.
A new Android banking trojan, RedWing, is being offered as a Malware-as-a-Service (MaaS) on Telegram, enabling less sophisticated threat actors to steal banking credentials and one-time passcodes.
Siemens' SINEC OS, particularly on the RUGGEDCOM RST2428P device, is affected by numerous vulnerabilities, some critical, that could lead to denial of service or memory corruption.
Hitachi Energy's PROMOD V industrial control system software contains a vulnerability that transmits sensitive data over insecure HTTP, potentially exposing it to interception and credential theft.
CISA has issued an advisory detailing three critical vulnerabilities in Labcenter Proteus 9, an industrial control system software, that could allow for information disclosure and arbitrary code execution.
Hitachi Energy's e-mesh EMS product is affected by a critical heap-based buffer overflow vulnerability in its NGINX component, potentially leading to application outages and arbitrary code execution.
CISA has issued an advisory for multiple Digi International devices, including PortServer TS, Digi One SP, and Digi One IA, due to two critical vulnerabilities.
Siemens Mendix Studio Pro versions prior to V11.12 contain a file parsing vulnerability (CVE-2026-48192) that allows for code injection, potentially leading to arbitrary code execution.
CISA has issued an advisory detailing three critical vulnerabilities in Hydro-Québec's Le Circuit Electrique charging station backend, potentially allowing for privilege escalation and denial-of-service attacks.
A critical vulnerability dubbed 'Rogue Agent' in Google Cloud Dialogflow CX allowed attackers to inject persistent malicious Python code into AI chatbots, potentially exfiltrating conversations and enabling phishing attacks.
A Trend Micro audit uncovered nearly 5,000 security issues across over 2,200 public Model Context Protocol (MCP) servers, highlighting critical vulnerabilities that endanger the burgeoning AI agent landscape.
Eight victims of the 'Predatorgate' spyware scandal have filed a lawsuit seeking €8 million in damages from Intellexa SA and associated individuals, alleging the company developed and distributed the Predator spyware used to hack their devices.
Outdated Service Level Agreements for Security Operations Centers (SOCs) are failing to keep pace with AI-driven security, leading to increased incident costs and vendor protection, according to a new analysis.
A new phishing campaign targets Russian aerospace and aviation organizations with fake invoices to deploy AnyDesk for unattended remote access, employing scheduled tasks for persistence and artifact deletion to evade detection.