Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Cybercriminals are increasingly using stolen API keys from major AI providers like OpenAI, Anthropic, and Google to fund autonomous scanning tools, leading to a significant rise in malicious AI agent discussions on underground forums.
A critical vulnerability in Sparx Systems Enterprise Architect allows remote attackers to disclose sensitive information through XML External Entity (XXE) processing in its XSLT debugger.
A use-after-free vulnerability in FreeBSD Kernel's kqueue component, tracked as CVE-2026-58093, allows local privilege escalation.
A Time-Of-Check Time-Of-Use vulnerability in FreeBSD Kernel's shared memory implementation allows local privilege escalation, assigned CVE-2026-58094.
Netscout's latest report indicates a 24% year-over-year surge in DDoS attacks, with massive increases in high-volume assaults that exploit network equipment vulnerabilities.
Linus Torvalds has revealed the use of AI tool Claude Code in developing eight Linux kernel patches aimed at enhancing page-cache read performance, marking a significant step in AI-assisted operating system development.
Adobe has patched CVE-2026-81983, a critical vulnerability in Acrobat and Acrobat Reader that allows memory corruption and potential code execution through specially crafted PDF files.
NinjaOne introduces Katana AI, an agentic AI technician, and the NinjaOne MCP server to streamline IT issue resolution and integrate with existing AI tools.
Key findings • 12 malicious npm packages disclosed within a 2-minute window on October 16, 2026. • All packages were newly published, appearing on the registry just 19 hours before disclosure…
A new approach advocates for building smaller, single-purpose AI agents with minimal privileges rather than attempting to contain general-purpose AI, reducing the attack surface and potential for unintended actions.
Key findings • Fortinet's CVE-2025-61624 was added to CISA KEV on October 16, 2026. • The vulnerability is confirmed to be under active exploitation in the wild. • Immediate patching and …
Key findings • Ten vulnerabilities disclosed in Google Chrome on October 15, 2026, including critical and high severity flaws. • Vulnerabilities include use-after-free and memory corruption b…
Key findings • Three High and two Medium severity vulnerabilities disclosed in Chromium on October 15, 2026. • Vulnerabilities include use-after-free and memory corruption bugs in V8, DOM, Co…
A sophisticated espionage campaign, tracked as CL-UNK-1211, has been observed targeting government entities and state-affiliated infrastructure, with attackers leveraging AI-generated payloads and custom malware for extensive reconnaissance and data exfiltration.
Key findings • 25 Microsoft Office SharePoint CVEs disclosed Oct 13-15, 2026, including high-severity flaws. • Vulnerabilities include path traversal, SQL injection, XSS, SSRF, and privilege …
Key findings • Microsoft Office Word faces 23 vulnerabilities disclosed on October 15, 2026. • Majority of flaws are high-severity memory corruption bugs like heap/stack overflows and use-aft…
A cyberattack targeting BAE Systems has crippled the Bankruptcy Noticing Center (BNC), halting all operations for federal bankruptcy courts nationwide and disrupting the transmission of critical legal notices.
A critical Linux kernel vulnerability, CVE-2026-99999 (PwnEscape), allows guest virtual machines to read sensitive memory from the host system, posing a significant risk to cloud environments.
Researchers have identified nearly 8,000 websites using HTTP headers to communicate with AI agents, with 30 sites attempting indirect prompt injection to manipulate AI behavior.
Threat actors are creating networks of hyper-local websites optimized for AI crawlers, aiming to bias chatbot responses and influence voters.
A weekly roundup of cybersecurity threats reveals active exploitation of PAN-OS, a novel DNS-based cryptocurrency wallet drainer, an NVIDIA container escape vulnerability, and a self-healing backdoor with psychological harassment features.
Cisco Talos's Q3 vulnerability report reveals a record-breaking discovery of over 70,000 CVEs, yet a slower growth in actively exploited vulnerabilities highlights significant patch debt.
CISA has issued an advisory detailing several critical vulnerabilities in CISA Malcolm versions prior to v26.08.0, impacting critical infrastructure sectors.
CISA has issued an advisory detailing six vulnerabilities in Eclipse Foundation Eclipse Milo, affecting versions 0.6.0 through 1.1.4, with potential impacts ranging from data deletion to denial-of-service conditions.