Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,139 stories synthesized.
A critical SQL injection vulnerability in QNAP TS-453E NAS devices, discovered during Pwn2Own Berlin 2026, allows authenticated network-adjacent attackers to execute arbitrary code as admin.
A format string vulnerability in QNAP TS-453E NAS devices, disclosed at Pwn2Own, allows network-adjacent attackers to execute arbitrary code as admin.
A command injection vulnerability in the revssh service of ChargePoint Home Flex EV chargers, disclosed at Pwn2Own, allows unauthenticated network-adjacent attackers to execute arbitrary code as root via a crafted OCPP message.
Zero Day Initiative has disclosed CVE-2022-1972, a Linux kernel vulnerability in nf_tables_newset that allows local attackers to write past the end of an allocated buffer, potentially enabling privilege escalation to root.
A critical buffer overflow in Synology DiskStation Manager's Netatalk library, discovered at Pwn2Own, lets unauthenticated remote attackers execute arbitrary code as root.
A critical heap-based buffer overflow vulnerability in GIMP's HDR file parsing, tracked as CVE-2026-2049, allows remote code execution when a user opens a malicious HDR file.
A hard-coded password vulnerability (CVE-2025-13957) in Schneider Electric's EcoStruxure Data Center Expert allows authenticated remote attackers to execute arbitrary code via the PostgreSQL service.
A critical integer overflow in Canon imageCLASS MF654Cdw printers, discovered at Pwn2Own, lets unauthenticated attackers execute arbitrary code by sending a crafted TrueType font.
A critical unauthenticated remote code execution vulnerability (CVE-2026-4149) in Sonos Era 300 speakers allows attackers to execute arbitrary code at the kernel level via a flaw in SMB response handling.
A hard-coded credentials vulnerability in the QNAP TS-453E Hyper Data Protector Plugin, discovered at Pwn2Own, lets network-adjacent attackers bypass authentication without any credentials.
Trend Micro reveals a sophisticated Warlock attack chain exploiting SharePoint vulnerabilities, using BYOVD and legitimate tools like TightVNC and Velociraptor for persistence and lateral movement.
International law enforcement has taken down SocksEscort, a malicious proxy service that compromised over 360,000 routers and IoT devices worldwide since 2020 to facilitate cybercrime.
Check Point Research has published a detailed analysis of the Handala Hack persona, revealing the evolving tactics of the Iranian MOIS-affiliated threat actor Void Manticore, including the use of NetBird tunneling and AI-assisted PowerShell wipers.
Zimperium researchers have uncovered PixRevolution, an Android banking trojan that uses live screen streaming and accessibility permissions to hijack Brazil's PIX instant payment transfers in seconds.
Two critical vulnerabilities in n8n, including a zero-click unauthenticated RCE bug (CVE-2026-27493), allow attackers to fully compromise servers and decrypt stored credentials.
CISA has issued Emergency Directive 26-03 over active exploitation of CVE-2026-20127, a critical authentication bypass in Cisco Catalyst SD-WAN that gives unauthenticated attackers administrative access to federal networks.
Pro-Iranian hacking group Handala has claimed a devastating wiper attack on medical technology firm Stryker, wiping over 200,000 systems and exfiltrating 50TB of data, forcing offices in 79 countries to shut down.
Iran-linked hacktivist group Handala claims to have wiped data from over 200,000 systems at medical technology firm Stryker, forcing the company to send home 5,000 workers in Ireland and disrupting hospital supply chains.
Tenable Research has disclosed nine cross-tenant vulnerabilities in Google Looker Studio, collectively named LeakyLooker, that could allow attackers to run arbitrary SQL queries and access sensitive cloud data across tenants.
Rapid7 warns that a global campaign has compromised over 250 legitimate WordPress sites since December 2025 to deliver infostealer malware via fake Cloudflare Captcha pages and ClickFix social engineering.
Aryaka Threat Research Lab has uncovered a persistent malware campaign targeting HR and recruiting staff with phishing emails disguised as job applications, deploying the BlackSanta EDR-killer module to disable endpoint defenses.
Apple released iOS 16.7.15 (build 20H380) on March 11, 2026, addressing security vulnerabilities in the iOS 16 operating system.
Apple released iPadOS 16.7.15 (build 20H380) on March 11, 2026, delivering security fixes for iPad models that cannot upgrade to newer iPadOS versions.
Apple has released iPadOS 15.8.7 (build 19H411) as a security update for older iPad models, addressing unspecified vulnerabilities.