Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
Cisco Talos has released ClamAV versions 1.5.3 and 1.4.5, addressing seven security flaws, including heap buffer overflows and denial-of-service vulnerabilities, in its malware scanning engine.
The open-source T3MP3ST framework empowers AI coding agents to conduct autonomous red-teaming operations, finding zero-day vulnerabilities without new API keys.
A personal account of a significant financial loss underscores the risks associated with financial institutions and major tech companies not mandating multi-factor authentication (MFA).
Flipper Devices is restructuring its open-source firmware development for the Flipper Zero, introducing new rules for community contributions to manage feature requests and pull requests.
Anthropic's advanced AI model, Claude Mythos 5, capable of generating exploits and achieving privilege escalation, has been cleared for redeployment to US critical infrastructure after a government-imposed suspension.
Key findings • Four Linux kernel vulnerabilities disclosed on July 5, 2026, affecting af_unix, ipv6, and KVM subsystems. • CVE-2026-53361 addresses a race condition in af_unix garbage collect…
Key findings • Three Linux Kernel vulnerabilities disclosed on July 5, 2026, affecting af_unix, ipv6, and KVM subsystems. • CVE-2026-53361 involves a race condition in af_unix garbage collect…
Microsoft has issued KB5095189, a cumulative update specifically for the Windows 11 Out-of-Box Experience (OOBE) on versions 24H2 and 25H2, enhancing initial device setup stability.
A U.S. government entity reportedly paid $1 million to the Kairos group to prevent the leak of stolen data, highlighting a new extortion tactic that bypasses traditional ransomware encryption.
New research reveals fundamental flaws in attested TLS protocols used for confidential computing's remote attestation, enabling diversion and relay attacks that undermine trust.
Rapid7's Metasploit Framework receives a significant update, introducing modules for upgrading SMB sessions to Meterpreter, an RCE exploit for Peyara Remote Mouse, and a new payload for Linux loongarch64 systems.
Security researchers have disclosed seven vulnerabilities in the FatFs filesystem library, a component embedded in millions of devices, potentially allowing attackers to corrupt memory and execute code.
A critical use-after-free vulnerability in the Linux kernel, dubbed 'Bad Epoll' (CVE-2026-46242), enables unprivileged users to escalate privileges to root, impacting Linux systems, servers, and Android devices.
A sophisticated new modular malware framework named Avalon has emerged, combining extensive credential harvesting, lateral movement, and ransomware capabilities, including the CrownX variant, while employing advanced techniques to evade security defenses.
India's government has mandated Google and Apple to remove three apps allegedly misused to remotely disable e-rickshaws, citing passenger safety risks.
Organizations face escalating security risks as shadow IT evolves into shadow SaaS, shadow AI, and autonomous agents, overwhelming traditional governance models.
Malicious npm packages disguised as Rollup polyfill tools have been distributed by North Korean threat actors to steal developer secrets and establish remote access.
Key findings • Ten malicious npm packages were disclosed on July 3, 2026. • All advisories were published within a 29-minute window, indicating coordination. • Most packages were newly pu…
Key findings • Three moderate-severity vulnerabilities in Keycloak's FGAP v2 implementation were disclosed on July 3, 2026. • CVE-2026-14615 and CVE-2026-14613 allow bypassing permission filt…
A roundup of cybersecurity news includes the sentencing of a Canadian hacker, the disclosure of numerous zero-day vulnerabilities in open-source projects, and the sentencing of two individuals for ATM jackpotting.
A new buyer's guide ranks the top Post-Quantum Cryptographic Solutions for 2026, evaluating vendors on standards compliance, crypto-agility, and enterprise maturity as the threat of quantum computing looms.
AdaptHealth disclosed a breach where attackers used social engineering against a third-party contractor to gain access to cloud systems and steal patient data, including insurance billing passwords.
Cybercriminals are impersonating well-known brands in online advertisements to lure unsuspecting users to fraudulent gambling websites, employing sophisticated tactics like AI-generated videos and fake app stores.
Attackers are increasingly targeting AI agents with indirect prompt injection, using SEO poisoning and hidden HTML to trick them into executing malicious commands, including fraudulent payments and trusting fake websites.