Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
Three vulnerabilities in IBM WebSphere Application Server's administrative console could allow for cross-site scripting and path traversal attacks, potentially exposing sensitive data.
Ukraine's security agency reports a significant increase in Russian state-sponsored cyberattacks targeting media organizations, aiming to disrupt broadcasts and spread disinformation.
OpenSSH 10.4 has been released, patching eight security vulnerabilities, including critical flaws in SFTP and SCP, and introducing experimental support for post-quantum cryptography.
This week's security landscape was marked by the disruption of the NetNut residential proxy network, novel AI-driven ransomware, and the exploitation of trust mechanisms in various software and AI systems.
Cloudflare introduces Workers Cache, a new feature that places a tiered cache directly in front of its Workers platform, enabling automatic response caching and reducing latency and CPU usage for developers.
Check Point Research has uncovered 'Cavern Manticore,' an Iran-nexus APT group employing a sophisticated, modular .NET command-and-control framework to target Israeli organizations, particularly in the government and IT sectors.
Two critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing risks of denial-of-service and memory corruption for web applications.
Check Point Research's latest threat intelligence report details active exploitation of critical vulnerabilities in Oracle E-Business Suite, Linux kernel, Citrix NetScaler, and Progress Kemp LoadMaster, alongside emerging AI-driven cyber threats.
OWASP ModSecurity versions up to 3.0.15 contain vulnerabilities that allow attackers to bypass firewall rules, impacting security for web applications.
A leaked RedLine Stealer C2 server led researchers to a sophisticated phishing campaign targeting a South Korean maritime manufacturer with fraudulent domains and spoofed business emails.
The ShinyHunters extortion group has leaked data belonging to over 2.3 million individuals associated with the Moody Bible Institute (MBI), including names, contact details, and personal identifiers.
France's national cybersecurity agency, ANSSI, will cease certifying non-quantum-safe encryption products starting in 2027, pushing a nationwide transition to quantum-resistant cryptography.
A 15-year-old in Japan was arrested for using a ChatGPT-assisted tool to systematically cancel nearly 47,000 user registrations on the Bandai Channel streaming service, forcing a temporary service outage.
Malware disguised as 'agent skills' for AI coding assistants like Claude Code and OpenAI Codex can bypass security scanners using novel evasion techniques.
The source code for KSOS, a secure Unix-like operating system developed in the late 1970s and 1980s with US Department of Defense backing, has been released by The Unix Heritage Society.
Researchers have demonstrated TrojPix, a novel attack that exfiltrates data from air-gapped systems by manipulating on-screen pixels to emit faint radio signals via video cables.
A new Java-based remote access trojan, QuimaRAT, is being sold as a Malware-as-a-Service (MaaS), offering cross-platform compatibility for Windows, Linux, and macOS.
A vulnerability in Opera GX enabled malicious websites to silently install add-ons capable of stealing user data from visited pages without interaction.
A wave of malicious browser extensions and deceptive online advertisements are distributing malware, targeting users across multiple platforms and browsers.
A recent incident involving a compromised AI agent in finance underscores the critical need to assess AI agent security risks based on their potential business impact, not solely on their access levels.
Parrot OS 7.3 has been released, featuring optimized package builds for modern CPUs, a new Go-based menu system for on-demand tool installation, and official Vagrant boxes.
The new open-source Omnigent framework acts as a meta-harness for multiple AI coding agents, aiming to standardize credential handling and command execution to improve oversight and cost management for development teams.
Kaseya's 2026 SaaS Security Report highlights significant risks from unmanaged guest accounts, weak MFA, and insecure OAuth implementations in SaaS environments.
Criminals are increasingly leveraging AI and organized tactics to automate payment fraud, from credential stuffing to sophisticated impersonation scams, while consumers prioritize robust fraud protection.