Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
Sophisticated phishing campaigns are now fingerprinting victims' devices and operating systems via user-agent data to deliver tailored, OS-specific malware, significantly boosting their success rates.
A 19-year-old dual citizen of the U.S. and Estonia, allegedly linked to the Scattered Spider cybercrime group, has been extradited from Finland to Chicago to face federal charges.
A new Python-based remote access trojan, ChocoPoc, is being distributed via weaponized proof-of-concept exploits hosted on GitHub, leveraging malicious Python packages to infect unsuspecting users.
A social engineering tactic known as ClickFix has become the leading method for malware delivery, with researchers noting its expansion to macOS and targeting of developers.
A critical vulnerability in Argo CD's repo-server component enables unauthenticated attackers to execute arbitrary code and potentially seize control of Kubernetes clusters.
Canada's Communications Security Establishment has revealed that Russian hackers claimed to have infiltrated a Quebec municipality's water utility, potentially gaining control of critical operational technology systems.
The Department of Homeland Security is investigating a cyberattack that compromised the Homeland Security Information Network (HSIN), a platform used for sharing sensitive data among government and private sector partners.
Pentera Labs researchers demonstrated a novel attack chain where a compromised inbox and Claude Desktop's personalization features were leveraged to achieve remote code execution on a developer's machine.
GitHub Security Lab has released a guide detailing six essential security configurations for project maintainers to bolster their repositories' defenses.
Vensure Employer Solutions' CISO implemented an AI-powered solution to drastically reduce firewall log ingestion, cutting costs and improving security posture by filtering out low-value data.
A new integration between Criminal IP and the OpenCTI platform enriches threat indicators with contextual data, transforming raw data into actionable intelligence for security teams.
Security Operations Centers (SOCs) are drowning in alerts, leading to significant business costs due to delayed threat detection and inefficient resource allocation.
Two critical vulnerabilities, DuneSlide (CVE-2026-50548 and CVE-2026-50549), discovered in the AI code editor Cursor, enable prompt injection attacks to bypass security sandboxes and execute arbitrary commands on developer machines.
A new fileless malware campaign dubbed Veil#Drop leverages Google's Blogspot platform to distribute the PureLog Stealer, evading traditional defenses by executing entirely in memory.
A year-old, unpatched vulnerability in Apple's 'Hide My Email' feature allows attackers to reveal users' actual email addresses behind anonymized aliases.
The Ousaban banking trojan, previously targeting Brazil, has been updated to target Spain and Portugal using sophisticated phishing, steganography, and geofencing techniques.
Link11 has unveiled a rebuilt Layer 3/4 DDoS mitigation solution that leverages AI and behavior analysis for rapid threat detection and response.
Critical flaws in the popular Fluentd log collector could allow remote code execution, information exposure, denial-of-service, and server-side request forgery.
SentinelOne's updated Autonomous SOC maturity model emphasizes that achieving AI-driven security operations hinges on robust data foundations and governance, not just advanced tools.
A malicious Google ad campaign is distributing the MacSync Stealer malware via a fake Claude Code CLI installer, aiming to harvest macOS credentials and crypto seed phrases.
A zero-day denial-of-service vulnerability in Anthropic's buffa Rust library, affecting versions prior to 0.8.0, allows attackers to trigger unbounded heap allocations and crash processes.
Threat actors are increasingly leveraging the Bring Your Own Vulnerable Driver (BYOVD) technique to disable antivirus and EDR solutions, gaining kernel-level privileges to bypass defenses.
Citrix has released security updates for its NetScaler ADC and Gateway products, addressing six vulnerabilities, notably a new denial-of-service flaw dubbed 'HTTP/2 Bomb' and a critical information disclosure bug.
Researchers demonstrate how an AI model can transform a theoretical attack concept into a practical browser-only ransomware technique, bypassing traditional security measures.