Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,568 stories synthesized.
CISA disclosed CVE-2026-1840, a high-severity missing authentication vulnerability in Hubbell Aclara Metrum Cellular Web Interface that could let unauthenticated attackers alter critical device settings and trigger system restarts.
CISA disclosed four vulnerabilities in Siemens SINEC INS, including a critical OS command injection flaw allowing authenticated remote code execution on industrial systems.
A Malwarebytes deep-dive into dark web forums and marketplaces uncovered over 1,200 unpublicized data breaches since 2026, with stolen US identities selling for as little as 95¢ and more than 8.4 billion records exposed.
Security firm AIR created a fake AI agent skill that passed every tested security scanner and reached roughly 26,000 agents via a popular marketplace and Instagram ad, exposing critical gaps in AI agent supply chain vetting.
Picus Security details a methodology for security teams to validate exploitability of newly disclosed vulnerabilities before public exploits exist, addressing the widening gap between disclosure and weaponization.
Dragos released EmberAI, an OT-native AI built on its Intelligence Fabric, giving critical infrastructure teams a decade of operational threat data to prioritize vulnerabilities by real-world impact.
Microsoft's DART team uncovered two separate threat actors, including Storm-2603, simultaneously operating inside the same on-premises SharePoint environment, using Velociraptor, Cloudflare tunnels, Zoho Assist, and VS Code SSH for persistence.
A new macOS backdoor called FlutterShell abuses Google's Flutter framework and WKWebView to evade detection, active from December 2025 to March 2026.
The FBI issued a public warning that cybercriminals are using Traffic Distribution Systems to silently redirect users to phishing sites and malware portals, evading security scanners through precise targeting.
A new class of supply-chain vulnerabilities named Cordyceps targets GitHub Actions CI/CD workflows, allowing unauthenticated attackers to take full control of code repositories via a single pull request.
Meta paused its Model Capability Initiative after an internal security review found keystroke, mouse-movement, and screen-capture data from staff laptops was accessible across thousands of internal data tables.
A high-severity use-after-free vulnerability in Samsung's KNOX security framework, present for eight years, exposed millions of Galaxy devices to kernel-level attacks.
Key findings • Five CVEs disclosed June 21–23, 2026, affecting ImageMagick 7.1.x and 6.9.x • CVE-2026-56379 is a command injection in the SVG decoder via MVG commands • Two heap out-of-…
Key findings • Nine RCE vulnerabilities in picklescan disclosed between June 21-23, 2026, due to detection bypasses. • Flaws involve bypassing detection of standard library modules and functi…
Key findings • Four vulnerabilities disclosed in Nuxt framework between June 22-23, 2026. • Includes arbitrary file read (CVE-2026-56301) via world-connectable IPC socket on Linux dev servers…
Key findings • Nine vulnerabilities disclosed for Flowise between June 20-23, 2026, impacting versions prior to 3.1.2. • Critical flaws include Remote Code Execution (CVE-2026-56274, CVE-2024…
Abdellah Belmili, a 26-year-old Algerian national, has been extradited to the US for allegedly operating the cybercrime marketplaces Market0Day and Spoxy, which sold phishing kits and bulk SMS services targeting major financial institutions.
Hackers are using compromised Microsoft 365 accounts to power the CodeStorm phishing kit, which bypasses SPF, DKIM, and DMARC and replays credentials against Microsoft's live identity infrastructure to defeat MFA.
Arvin Shivram earned $148,337 from Google for uncovering CVE-2026-2031, a critical access control flaw in Google Cloud Application Integration that enabled remote code execution in production.
Two British teenagers linked to the Scattered Spider hacking collective have pleaded guilty to orchestrating a 2024 cyberattack on Transport for London that cost £29 million and disrupted services.
Scammers are exploiting anticipation for Grand Theft Auto VI by setting up fraudulent websites that offer 'VIP early access' for a fee paid in cryptocurrency, leaving victims with no game and no recourse.
Researchers have uncovered three malicious npm packages posing as PostCSS tools that deliver a multi-stage Windows remote access trojan, targeting developers in a supply-chain attack.
A critical integer overflow vulnerability in libssh2 (CVE-2026-55200, CVSS 9.2) lets unauthenticated attackers execute arbitrary code by sending crafted SSH packets, affecting all versions up to 1.11.1.
OpenAI has expanded its Daybreak cybersecurity initiative, combining AI models and Codex Security to help organizations identify, validate, and fix software vulnerabilities.