Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,567 stories synthesized.
CrowdStrike highlights that attackers increasingly leverage known, unpatched browser flaws combined with social engineering and chained exploits, moving beyond solely relying on zero-days.
Google Threat Intelligence reports Russia is expanding AI-enabled influence operations beyond Ukraine to target the EU and NATO, leveraging proxy networks and hacktivists.
Medical device manufacturer Medtronic has begun notifying patients of a data breach claimed by the ShinyHunters ransomware group, which alleges the theft of over 9 million records.
Proton has upgraded its AI assistant, Lumo 2.0, introducing advanced multimodal features, memory functions, and enhanced web search, all while maintaining its core zero-access encryption for user privacy.
Aikido Security has acquired Root for $70 million, integrating automated vulnerability remediation into its application security platform to enhance open-source package hardening and reduce supply-chain risk.
Microsoft is fast-tracking its transition to quantum-resistant cryptography, aiming to secure critical products and services by 2029 due to accelerating advances in quantum computing.
New research reveals that AI models can be tricked into executing harmful commands by mimicking legitimate user input, bypassing critical safety controls.
A persistent campaign has been distributing trojanized Python packages on PyPI, granting attackers the ability to read arbitrary files on compromised Telegram bot servers.
Fake Amazon job offers via SMS and email are luring victims into task scams, promising high pay for minimal work and leading to financial loss or data theft.
A significant majority of cybersecurity professionals report critical false negatives from automated pentesting tools, leading to a sharp decline in confidence and adoption of fully autonomous approaches.
WatchTowr Labs has disclosed CVE-2026-8451, a pre-authentication memory overread vulnerability in Citrix NetScaler appliances, dubbed 'CitrixBleed To Infinity And Beyond,' stemming from insecure XML parsing.
Cybercriminals are employing sophisticated phishing campaigns against hospitality organizations in the EU and Asia, using malicious ZIP files and novel techniques like blockchain abuse to achieve persistence.
The RustDuck botnet, rewritten in Rust, is rapidly evolving to hijack routers, servers, and IoT devices for large-scale DDoS attacks.
A Reddit disclosure claims Anthropic's Claude Code CLI tool contains undisclosed, obfuscated code designed to detect users in China or those using Chinese AI lab proxies, raising significant trust concerns.
Huntress CEO confirms a threat hunter disclosed law enforcement contact to a ransomware operator, calling it 'poor judgment' amid insider threat allegations.
Reflectiz and Taboola will host a webinar discussing the escalating risks of unvetted third and fourth-party scripts on websites, amplified by AI.
Microsoft unveils a suite of security enhancements for June 2026, including an AI-powered vulnerability discovery system and new protections against prompt injection attacks targeting local AI agents.
Microsoft Security Blog outlines a new attack pattern where malicious instructions are injected into AI agent tool descriptions, enabling agents to perform unintended actions and exfiltrate data.
CISA has issued a critical alert for Delta Electronics DVP12SE PLCs, detailing two high-severity vulnerabilities that allow unauthenticated remote command execution and denial-of-service attacks.
CISA has issued an advisory for CVE-2025-31115, a race condition vulnerability in XZ Utils impacting several B&R Industrial Automation products, potentially leading to system crashes or memory corruption.
CISA has issued an alert for CVE-2026-13207, an authentication bypass vulnerability in Frangoteam FUXA SCADA/HMI versions 1.3.1 and prior, allowing unauthenticated remote attackers to enumerate user accounts and role assignments.
CISA has issued a critical alert for multiple vulnerabilities in StoneFly Storage Concentrator versions prior to 8.0.4.29, potentially allowing attackers to gain broad unauthorized access and execute arbitrary commands with root privileges.
CISA has issued an advisory for CVE-2026-8045, a medium-severity XML external entity injection vulnerability in Schneider Electric's EcoStruxure IT Data Center Expert software.
CISA alerts to critical flaws in Mitsubishi Electric's MELSOFT Update Manager, potentially allowing attackers to execute arbitrary code, tamper with data, or cause denial-of-service.