Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,133 stories synthesized.
Check Point Research reveals that Iranian MOIS-affiliated groups like Void Manticore and MuddyWater are moving beyond imitation to directly engage with the cyber crime ecosystem, using commercial infostealers, ransomware branding, and affiliate models to advance state objectives.
WordPress 6.9.2, a security release fixing 11 vulnerabilities including a blind SSRF, stored XSS, path traversal, and an XXE in the bundled getID3 library, is available now with an urgent recommendation to update.
Google Cloud's H1 2026 Threat Horizons Report shows vulnerability exploits now account for 44.5% of initial cloud access vectors, up from 2.9%, as attackers weaponize flaws like React2Shell within 48 hours of disclosure.
Dutch intelligence agencies have uncovered a large-scale Russian state-sponsored campaign targeting Signal and WhatsApp accounts of military, government, and journalist personnel, with some Dutch government employees already compromised.
7-Eleven has confirmed a data breach after the ShinyHunters threat actor claimed to have stolen over 600,000 Salesforce records and demanded a ransom.
ESET researchers reveal that Sednit (APT28) reactivated its advanced implant team in April 2024, deploying a modern toolkit including SlimAgent, BeardShell, and Covenant against Ukrainian military personnel.
Fortinet disclosed a low-severity vulnerability in FortiManager and FortiAnalyzer that allows attackers to bypass brute-force lockout protections by exploiting a race condition in the authentication mechanism.
Fortinet has disclosed a stack-based buffer overflow vulnerability in the FortiManager fgtupdates service that could allow remote unauthenticated attackers to execute unauthorized commands.
Fortinet disclosed an improper control of interaction frequency vulnerability in FortiWeb that allows remote unauthenticated attackers to bypass authentication rate-limiting and brute-force admin logins.
Fortinet has disclosed a cleartext storage vulnerability in debug logs of FortiMail, FortiVoice, and FortiRecorder that allows an authenticated administrator to extract plaintext user secrets via CLI commands.
Fortinet disclosed a buffer overflow vulnerability in FortiSwitchAXFixed that lets an unauthenticated attacker on the same adjacent network execute arbitrary code via a crafted LLDP packet.
Fortinet has disclosed a high-severity OS command injection vulnerability in the web UI of FortiSandbox Cloud and FortiSandbox PaaS, allowing privileged attackers to execute arbitrary commands.
Fortinet disclosed a format string vulnerability in the fazsvcd daemon affecting FortiAnalyzer and FortiManager, allowing remote privileged attackers to execute arbitrary code.
Fortinet disclosed an argument injection vulnerability in FortiDeceptor's WEBUI that allows super-admin attackers with CLI access to delete sensitive files via crafted HTTP requests.
Microsoft has patched a use-after-free vulnerability in the Windows NDIS driver (ndis.sys) that lets low-privileged attackers gain kernel-level code execution.
Microsoft has patched a high-severity local privilege escalation vulnerability in the Windows cdd.dll driver that allows attackers with low-privileged code execution to gain SYSTEM-level access.
Microsoft has released a security update for a local privilege escalation vulnerability in the win32kfull driver, tracked as CVE-2026-24285, which allows attackers to gain SYSTEM privileges.
A local privilege escalation vulnerability in Array Networks MotionPro, tracked as CVE-2026-26364, allows low-privileged attackers to gain SYSTEM-level access via incorrect permissions in the ArrayInstallManager DCOM application.
Microsoft has released a security update addressing CVE-2026-25181, an out-of-bounds read information disclosure vulnerability in Windows GDI bitmap parsing that could leak sensitive memory.
Apple has patched a critical out-of-bounds write vulnerability (CVE-2026-20616) in macOS's libusd_ms library that could allow remote attackers to execute arbitrary code via a malicious Alembic file.
A local privilege escalation vulnerability in Fortinet FortiClient, tracked as CVE-2026-24018, allows attackers to gain root access via a symbolic link attack on shared objects.
Apple has released a security update for macOS to fix CVE-2026-20634, an out-of-bounds read vulnerability in the ImageIO framework that can be triggered by a specially crafted SGI image file.
Microsoft has patched a high-severity local privilege escalation vulnerability in the Windows cdd.dll driver that allows attackers with low-privileged code execution to gain SYSTEM privileges.