Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,172 stories synthesized.
Multiple critical vulnerabilities in HPE Networking Fabric Composer, including two with CVSS 10.0 scores, permit unauthenticated attackers to execute code and gain full administrative control.
Attackers are distributing a modified Exodus cryptocurrency wallet installer that silently installs a remote access trojan (RAT), posing a significant risk beyond cryptocurrency theft.
Palo Alto Networks CEO Nikesh Arora highlights the critical risk posed by $1 trillion in accumulated cybersecurity technical debt, warning it could enable major breaches as AI-powered attacks proliferate.
Google has released an update for Chrome, addressing 26 security vulnerabilities, with two critical use-after-free flaws in Shared Tab Groups and WebGL posing the most significant risk.
Attackers are actively exploiting CVE-2026-9586, a critical SQL injection flaw in Sangoma Switchvox SMB Edition, enabling unauthenticated remote code execution.
A flaw in Hugging Face Transformers (CVE-2026-80047) enables malicious AI models to write Python files to user systems before consent for remote code execution is granted.
Visa has upgraded its A2A Protect solution with a unified fraud score, integrating Featurespace technology to detect and prevent account-to-account payment fraud in real-time.
F5 has updated its Web Application Firewall (WAF) with AI-driven anomaly detection and agentic threat intelligence to combat AI-powered threats and enable faster virtual patching.
Vali Cyber's ZeroLock 5 introduces multi-factor authentication to the command line for ESX and Linux hypervisors, aiming to thwart insider threats and credential theft targeting critical virtualization infrastructure.
OpenAI's new Astra AI model can independently find unknown security flaws and build functional exploits, prompting the company to implement enhanced safeguards.
Researchers developed a tool to identify deceptive scareware ads on Google's Ads Transparency Center, finding that reported malicious ads and domains continue to run.
SonicWall has issued an urgent warning about two zero-day vulnerabilities in its SMA1000 series appliances that are being actively exploited in the wild, potentially allowing for unauthenticated remote code execution.
Stratus Security releases Sift, a free command-line tool to detect hardcoded credentials and sensitive data across Microsoft 365, Slack, Jira, and local environments.
Anthropic has launched Claude Fable 5.1 and Mythos 5.1, advanced AI models designed for enhanced coding, research, and enterprise applications, featuring improved safeguards and cost reductions.
Researchers found that advanced AI models struggled with simple CAPTCHAs, even when provided with correct answers, revealing unexpected limitations in their reasoning and tool-use capabilities.
OWASP has launched the Open Automated Security Initiative for Software (OASIS) to leverage AI and human expertise for faster, more effective patching of open source vulnerabilities.
The latest Risky Business podcast episode delves into the arrest of alleged TeamPCP hackers in Australia, the White House's water facility security plans, and emerging AI-driven cyber threats.
Key findings • Google Chrome 152.0.7977.75 patches 26 vulnerabilities disclosed on September 2, 2026. • Two critical use-after-free vulnerabilities (CVE-2026-84353, CVE-2026-84352) affect Sha…
Key findings • 12 vulnerabilities disclosed simultaneously for Google Chrome on September 2, 2026. • High-severity flaws include improper input validation, buffer overflows, and use-after-fre…
Key findings • Two SonicWall vulnerabilities (CVE-2026-83548, CVE-2026-83549) added to CISA KEV on September 2, 2026. • These flaws are confirmed to be under active exploitation in the wild, …
An international law enforcement operation, in collaboration with CrowdStrike, has successfully disrupted the Sality botnet, a persistent threat active since 2003.
Key findings • 16 vulnerabilities disclosed for WWBN AVideo between August 30 and September 1, 2026. • Critical flaws include indefinite password resets (CVE-2026-84480) and authentication by…
Microsoft Defender Experts are tracking a malware campaign that uses counterfeit software download sites to impersonate trusted vendors and distribute malicious installers, primarily targeting China-based operations.
Key findings • 11 malicious npm packages were disclosed on September 1, 2026. • All advisories were published within a single minute. • All packages were first published just 12 hours bef…