Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,568 stories synthesized.
CISA has confirmed that ransomware gangs are actively exploiting the BlueHammer vulnerability in Microsoft Defender, a privilege escalation flaw previously used in zero-day attacks.
Apple has released security updates for iOS, macOS, and Safari, addressing more than 30 vulnerabilities, with four in WebKit identified using AI tools.
Kali Linux 2026.2 has been released, featuring significant improvements to virtual machine boot times, the addition of nine new security tools including AI-powered options, and modernization of its package management system.
Researchers have uncovered six vulnerabilities in Apple's AirDrop and Google/Samsung's Quick Share protocols, impacting over five billion devices and potentially exposing sensitive data.
Microsoft is enhancing security for Teams meetings by introducing a 'bot bouncer' feature designed to prevent unauthorized bots from joining, addressing privacy and security concerns.
GitHub's Advisory Database is struggling to keep pace with a record influx of open-source vulnerability reports, leading to significant delays in publishing critical security information.
CISA warns of critical vulnerabilities in Daktronics controllers that could allow attackers to remotely manipulate highway signs and billboards, potentially displaying false information or taking full control of the devices.
A new open-source tool, OWASP Agent Memory Guard, aims to prevent AI agents from being compromised through their persistent memory stores.
The sole registrar for India's mandated .bank.in domains allegedly exposed an API, leaking credentials and personal information of thousands of bank employees, undermining the initiative's security goals.
Anahi Santiago, CISO of ChristianaCare, warns that expanding hospital-at-home programs and AI integration are significantly increasing cloud security risks for healthcare organizations.
Four years into the Ukraine invasion, Russian influence operations are shifting focus back to the US and Europe, employing AI for planning and content generation to undermine Western coalitions and promote Kremlin interests.
An independent security researcher has identified 14 vulnerabilities, including critical flaws, in Indian government IT systems, potentially exposing millions of citizens' personally identifiable information.
CISA has added CVE-2026-48558, a SimpleHelp authentication bypass vulnerability, to its Known Exploited Vulnerabilities (KEV) Catalog, citing active exploitation.
An anonymous researcher has published exploit code for 15 zero-day vulnerabilities, with at least two already being exploited in the wild, raising concerns about rapid attacker adoption.
A critical pre-authentication remote code execution vulnerability, CVE-2026-8037, has been discovered in Progress Kemp LoadMaster load balancers, allowing unauthenticated attackers to gain control.
Nation-state threat actors from Iran, Russia, and China are increasingly targeting US water and wastewater facilities, exploiting common vulnerabilities for disruptive sabotage.
The latest rewrite of the Model Context Protocol (MCP) fixes a known AI agent authentication flaw but introduces new risks by offloading security responsibilities to developers.
Researchers demonstrate how a clean-looking GitHub repository can exploit AI coding agents like Claude Code to establish a reverse shell on a developer's system, granting attackers full control.
A public proof-of-concept exploit is available for CVE-2026-20251, a critical RCE vulnerability in Splunk Secure Gateway, allowing low-privileged users to execute arbitrary code.
GitHub's Advisory Database experienced an unprecedented surge in advisories in May 2026, leading to significant delays in processing and publication.
Researchers have identified a new class of weak RSA cryptographic keys containing numerous zeros, found in expired certificates for major organizations and on NetApp software, alongside a separate pattern affecting SSH hosts running CompleteFTP.
WhatsApp is rolling out an optional username feature, allowing users to create a unique handle to connect with others without revealing their phone number.
A malicious Chromium extension disguised as the AI search engine Perplexity AI has been discovered intercepting user search queries and redirecting traffic through attacker-controlled infrastructure.
Dell has released a critical security advisory for its Wyse Management Suite (WMS) versions prior to 5.5 HF1, addressing two vulnerabilities that could allow remote code execution.