Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,568 stories synthesized.
CISA alerts to critical flaws in Mitsubishi Electric's MELSOFT Update Manager, potentially allowing attackers to execute arbitrary code, tamper with data, or cause denial-of-service.
CISA has identified multiple critical vulnerabilities in OFFIS DCMTK Toolkit versions prior to 3.7.0, including path traversal and memory leaks, that could allow attackers to compromise sensitive medical data and disrupt operations.
CISA has issued an alert for two critical vulnerabilities in Schneider Electric's EasyLogic T150 and Saitel DP RTU devices, which could allow unauthenticated attackers to expose sensitive credentials.
A new cryptocurrency theft campaign, dubbed Silent Swap, is leveraging fake Google Notes browser extensions distributed via unsigned installers to replace user-copied wallet addresses with attacker-controlled ones.
Apple has issued critical security updates for iOS, iPadOS, macOS Tahoe, and Safari, addressing over two dozen vulnerabilities, many of which target the WebKit browser engine.
A new bypass technique called GuardFall leverages long-standing shell injection vulnerabilities to circumvent safety measures in popular open-source AI coding agents, posing a significant risk of arbitrary command execution.
Analysis of dark web forums shows Business Email Compromise (BEC) is a complex, multi-stage operation requiring significant infrastructure and planning beyond simple email scams.
A study of 444 iOS AI chatbot apps found that 282 of them leaked sensitive API keys or proxy access in their network traffic, leaving developers vulnerable to unauthorized usage and unexpected costs.
Jamf has launched AI Governance for Mac, a new feature enabling organizations to discover, manage, and control the use of AI tools on their macOS devices.
CISA's Binding Operational Directive 26-04 mandates federal agencies move from technical patch metrics to risk-based vulnerability prioritization and reporting, impacting federal contractors and influencing private sector standards.
SystemBC, a versatile malware known as Coroxy, is increasingly used by ransomware gangs to establish hidden persistence and proxy malicious traffic, now leveraging Tor for stealthier command-and-control.
A sophisticated 'Boss Scam' campaign is targeting Indian enterprises, combining social engineering with DLL sideloading to hijack WhatsApp Web sessions for CEO fraud and large-scale financial theft.
New AI capabilities allow intelligence agencies to query vast video archives using natural language, enabling behavioral analysis and unprecedented mass surveillance possibilities.
Threat actors pre-planned and deployed extensive fraud infrastructure targeting the FIFA World Cup 2026 months in advance, spanning multiple sectors and languages, according to Check Point Research.
A proof-of-concept exploit for CVE-2026-24294 demonstrates a new NTLM reflection bypass flaw affecting Windows Server 2025 and Windows 11 24H2, allowing SYSTEM-level access.
Insurance giant Aflac disclosed a data breach impacting its Japanese subsidiary, where attackers accessed systems and stole sensitive personal and financial data.
A suite of critical vulnerabilities in the wolfSSL embedded TLS library could allow attackers to forge certificates, execute remote code, and launch denial-of-service attacks across billions of devices.
Trail of Bits integrates NIST-standard post-quantum cryptography into the widely-used pyca/cryptography library, enabling Python applications to prepare for the quantum computing threat.
X has introduced hosted Model Context Protocol (MCP) servers, simplifying API access for AI tools like Cursor and Claude, while raising questions about write operation security.
The ToddyCat APT group has developed a new tool, Umbrij, to steal cloud email credentials by exploiting the OAuth 2.0 protocol through Google's API, employing a novel technique dubbed Shadow Token via Remote Debug (STRD).
Key findings • Three vulnerabilities in GPAC disclosed between June 28 and June 30, 2026. • Two use-after-free vulnerabilities (CVE-2025-60464, CVE-2025-60465) leading to Denial of Service. …
The Blackfield ransomware group is extorting Nidec Corporation for $2 million following a breach that impacted its Taiwanese subsidiary.
The UK's healthcare sector has experienced a dramatic tenfold increase in cyber-attacks during the first five months of 2026, with SonicWall reporting 264,000 security events.
Ransomware groups like Black Basta have evolved into sophisticated, corporate-style organizations, leveraging specialized teams and outsourcing to maximize profits through advanced extortion tactics.