Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,568 stories synthesized.
Cisco disclosed two actively exploited vulnerabilities: an SSRF bug in Unified Communications Manager now used in the wild, and an SD-WAN zero-day exploited since early 2026, according to Mandiant.
Nathan Austad, known online as 'Snoopy,' was sentenced to 18 months in prison for his role in the November 2022 credential-stuffing attack that compromised 60,000 DraftKings accounts.
Key findings • Four vulnerabilities disclosed in Zephyr RTOS between June 22-24, 2026, affecting serial, Bluetooth, and file system components. • CVE-2026-10642: Unbounded loop in PL011 UART …
Key findings • Eight vulnerabilities in Siyuan Note prior to v3.7.0 disclosed on June 24, 2026. • Multiple Stored XSS vulnerabilities escalate to RCE in the Electron client. • Unauthentic…
Key findings • Twelve Rocket.Chat vulnerabilities disclosed on June 24, 2026, impact authentication, data handling, and SSO. • Multiple CVEs allow account takeover via NoSQL injection in OAut…
A sophisticated phishing campaign impersonates Microsoft Teams to deliver a signed remote monitoring and management installer, granting attackers full system control and credential theft capabilities.
A malicious document reader app on the Google Play Store, downloaded over 100,000 times, is distributing the Anatsa (TeaBot) Android banking trojan to steal credentials from 831 financial institutions worldwide.
Key findings • 18 vulnerabilities disclosed for Gogs between June 22-24, 2026, ranging from medium to critical severity. • Critical RCE vulnerabilities include path traversal (CVE-2026-52813)…
Zscaler ThreatLabz uncovers a campaign using a malicious Microsoft Edge extension named 'Edgecution' that abuses Chrome native messaging to execute code on victim systems, linked to an initial access broker for the Payouts King ransomware group.
Key findings • 18 CVEs fixed in Chrome 149.0.7827.196/197, including 4 Critical and 14 High • Two Critical WebGL UAF bugs (CVE-2026-13028, CVE-2026-13032) can escape the sandbox on Android …
Key findings • Nine vulnerabilities disclosed for Warp on June 24, 2026, affecting multiple components. • Multiple command injection flaws allow arbitrary code execution via branch names, env…
EvilTokens, a device-code phishing kit, evades static URL analysis by delivering an AES-GCM encrypted payload that only renders after browser-side JavaScript decryption, hiding the Microsoft-branded authentication page from traditional scanners.
CrowdStrike warns that AI agents inherit excessive permissions via APIs and service accounts, creating dangerous identity attack surfaces that attackers can exploit for lateral movement and data theft.
LayerX researchers demonstrated a prompt injection technique called BioShocking that tricks AI browsers like ChatGPT Atlas and Perplexity's Comet into bypassing guardrails and exfiltrating user credentials.
A coordinated law enforcement operation involving Europol, Bitdefender, Bitsight, ESET, and Microsoft has disrupted the malware-as-a-service infrastructure behind Amadey and StealC, recovering 27 million stolen credentials.
A financially motivated campaign targeting Indian Windows users delivers a RAT — likely XWorm — through fake Income Tax Department assessment notices and a multi-stage .NET loader.
Key findings • Seven XSS vulnerabilities disclosed together in Frappe Framework 17.0.0-dev on June 24, 2026. • Vulnerabilities affect multiple UI components including Tree View, Number Cards,…
A public proof-of-concept exploit is now available for CVE-2026-45504, an SSRF flaw in Exchange Server 2016 and 2019 that lets authenticated attackers read arbitrary files.
Attackers are exploiting CVE-2025-54068, a critical RCE vulnerability in Laravel Livewire, to steal credentials from thousands of applications worldwide.
Multiple critical vulnerabilities in Webmin before version 2.641 allow attackers to impersonate users, bypass 2FA, and gain root access.
The White House issued an executive order directing U.S. federal civilian agencies to migrate high-value systems to NIST-approved post-quantum cryptography by 2030 for key establishment and 2031 for digital signatures.
Palo Alto Networks Unit 42 discovered a BitB campaign that fakes software error pop-ups inside realistic browser windows to trick users into downloading malware installers.
A new malware cluster named GhostShell is targeting Ukrainian drone operators and defense supply chains with a multi-stage attack using mTLS implants and Telegram-based C2.
Security researchers at Cracken have identified critical architectural vulnerabilities in 12 open-source agentic red-team tools that allow attackers to steal LLM API keys, escape sandboxes, and fully compromise operators' systems.