Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
The FCC's ban on foreign-manufactured routers, despite recent waivers, risks leaving millions of home routers without critical security updates, potentially impacting home security systems.
Apple is shifting its long-standing patch release strategy to a faster cadence, acknowledging the escalating threat posed by AI-driven cyberattacks that shorten the window for exploitation.
The FBI, with industry partners, has seized hundreds of domains associated with NetNut, a residential proxy service linked to the Popa botnet, disrupting a major tool used by cybercriminals.
Wordfence Intelligence has identified 199 vulnerabilities across 169 WordPress plugins and 9 themes during the week of June 22-28, 2026, highlighting ongoing security challenges in the popular CMS ecosystem.
Cisco Talos researchers have identified ARToken, a sophisticated phishing-as-a-service platform that shares infrastructure and operational patterns with the EvilTokens platform, offering advanced capabilities for business email compromise operations.
A sophisticated phishing campaign is distributing the AsyncRAT malware by abusing trusted cloud services like Dropbox and TryCloudflare tunnels, employing a multi-stage process involving obfuscated scripts and Python for stealthy payload deployment.
A Chinese businessman received a 30-year sentence for a massive crypto fraud, while a Hollywood director was jailed for defrauding Netflix of $11 million intended for a film project.
A vulnerability chain in Anthropic's Claude Cowork for Windows allows local code execution to escalate privileges to root within the product's Linux sandbox, bypassing security protections.
CISA has issued an advisory detailing two critical vulnerabilities in ST Engineering iDirect iQ-Series terminals that could allow for unauthorized information access and denial-of-service conditions.
CISA has issued an advisory detailing critical vulnerabilities in Gardyn IoT Hub devices, including CVE-2026-13768, which could allow unauthenticated attackers to execute arbitrary commands and pivot to other network devices.
CISA has issued an advisory for CubeSpace CW0057 Reaction Wheel firmware versions prior to 5.0.20, detailing CVE-2026-13743, a vulnerability allowing malicious firmware uploads via physical access.
Malwarebytes Labs reports on ClickFix campaigns using fake Google and Cloudflare verification pages to trick users into executing malicious commands, distributing multiple malware families.
Microsoft is implementing enhanced security measures and stricter vetting for its Cloud Solution Providers (CSPs) to counter nation-state actors exploiting partners as an entry point to customer networks.
This week's security landscape is marked by diverse threats, from AI compute hijacking and an Apple email privacy flaw to sophisticated ransomware campaigns and platform-aware phishing.
A researcher chained a guardrail bypass with a path traversal vulnerability in ChatGPT's file download feature to access sensitive system files like /etc/passwd.
Attackers are exploiting user habits and Microsoft 365's OAuth consent flows to hijack accounts in mere seconds, bypassing MFA protections.
Attackers are leveraging a DLL sideloading technique with the legitimate VLC media player executable to deploy the sophisticated ValleyRAT remote access trojan.
A bug in classic Outlook for Windows caused the Copilot button to disappear for users with Basic-tier Copilot licenses, with Microsoft resolving the issue via a server-side fix.
Rapid7's Red Team has developed a novel multi-agent AI architecture to formalize offensive methodologies, integrating advanced AI models to automate tasks while retaining human oversight for critical decisions.
A path-traversal vulnerability in Cisco Catalyst Center (CVE-2026-20191) allows unauthenticated remote attackers to read arbitrary files, posing a significant confidentiality risk.
A sophisticated campaign named ChocoPoC is weaponizing proof-of-concept exploit code to target vulnerability researchers, distributing a Python RAT via GitHub and PyPI.
IBM launches Project Lightwell, a massive $5 billion initiative leveraging Anthropic's AI to find and fix vulnerabilities in open-source software, assigning 20,000 engineers to the task.
Cloudflare introduces new granular controls for website owners to manage AI crawler access, categorizing traffic into Search, Agent, and Training to prevent unauthorized content scraping and training.
A new ransomware campaign is impersonating Interpol in phishing emails, tricking victims into downloading malicious attachments and deploying destructive malware.