Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Cloudflare announced a significant enhancement to its secure web gateway and data loss prevention (DLP) services, integrating them with Cloudflare Workers for unprecedented customization and inline policy evaluation.
CISA has issued a critical advisory for multiple vulnerabilities in Guangzhou Juan IoT Technology's EseeCloud App and Firmware, potentially allowing attackers full control over affected IP cameras.
CISA has issued an advisory for multiple critical vulnerabilities in J4Care dcm4chee-arc-light, potentially allowing attackers to delete medical images, disclose patient data, or cause denial-of-service conditions.
CISA has issued an advisory for Thermo Fisher Torrent Suite Software versions <=5.18, detailing CVE-2026-107777, a path traversal vulnerability that allows authenticated attackers to read arbitrary files.
A new study leverages AI to estimate the cumulative human effort spent on analyzing public-key cryptographic algorithms, revealing a recent shift in focus from elliptic curves to lattices.
Burger King Japan has confirmed a significant data breach affecting approximately 11.18 million records associated with its official app members, exposing personal details including names, birth dates, and contact information.
A critical flaw in ChatGPT's GitHub integration, disclosed by researcher Sunil Tripathy, could allow attackers to steal sensitive secrets from private repositories through indirect prompt injection.
A second-order SQL injection vulnerability in the Backuply WordPress plugin allows attackers with subscriber access to gain administrator privileges and take over websites.
Citrix has disclosed four XenServer vulnerabilities, including three high-severity flaws that could enable a privileged user within a virtual machine to compromise or crash the host system.
Attackers are leveraging trusted Microsoft programs and encrypted network traffic, combined with social engineering via ClickFix, to establish persistence and prepare Windows systems for potential ransomware deployment.
A sophisticated, subscription-based phishing platform known as the 'Iron Man System' has been linked to an estimated one billion phishing messages targeting 75,000 organizations globally.
A long-running traffic distribution system, Help TDS, linked to the Hotejka affiliate program and potentially a rebrand of ROI777, is directing over 20,000 Cloudflare Pages domains to tech support scam pages.
Cloudflare has open-sourced Void, a new JavaScript package and Vite plugin designed to simplify the creation and deployment of full-stack applications on Cloudflare's infrastructure.
ServiceNow's new AI Passport solution provides enterprises with runtime control over AI agent actions, aiming to ensure production readiness through a robust governance framework.
Bank of America incurred significant costs and hired 1,000 contractors to remediate vulnerabilities identified by Anthropic's Mythos AI model.
Attackers are increasingly abusing CAPTCHA verification prompts to trick users into downloading malware, revealing credentials, and executing malicious commands.
Cloudflare and OpenAI have launched a research pilot using Cloudflare's network signals to help OpenAI's search crawler discover hundreds of millions of new web pages, improving AI's ability to find and present relevant information.
The Aoki infostealer is actively targeting API keys and tokens for popular AI coding assistants like Claude and Gemini, posing a significant risk to developer accounts and sensitive project data.
A new remote access trojan, KGB RAT, is being sold as a service with claims of bypassing Windows Defender, enabling credential theft, keylogging, and remote PC control.
Next.js has released urgent security updates to address two critical vulnerabilities allowing unauthenticated remote code execution and a high-severity flaw enabling denial-of-service attacks.
The UK's National Cyber Security Centre (NCSC) has published new guidance to help organizations securely configure Transport Layer Security (TLS) and protect data in transit.
The UK's National Cyber Security Centre (NCSC) has updated its guidance on Transport Layer Security (TLS) configurations to incorporate post-quantum cryptography (PQC), urging organizations to begin migration.
Threat actors are impersonating popular AI products to spread malware and steal sensitive information, targeting US businesses and increasing pressure on MSSPs.
A new Rust-based Remote Access Trojan (RAT) named CikaBika Bot is utilizing Discord for its command-and-control (C&C) infrastructure, enabling sophisticated reconnaissance, remote execution, and data exfiltration.