Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,727 stories synthesized.
A new benchmark, MacAgentBench, reveals that macOS is becoming a significant platform for AI agents performing automated tasks, though current impressive performance often relies on pre-written scripts.
A critical vulnerability in Glarysoft Glary Utilities allows local attackers to escalate privileges to SYSTEM by abusing a file deletion function.
A critical denial-of-service vulnerability (ZDI-26-401) in AnyDesk allows local attackers with low-privileged code execution to crash affected installations.
A critical denial-of-service vulnerability (ZDI-26-403) in Ollama allows unauthenticated remote attackers to crash the application by exploiting improper validation of array indexes in the downloadBlob function.
A critical improper certificate validation vulnerability (ZDI-26-399) in Lorex 2K Indoor Wi-Fi Security Cameras allows network-adjacent attackers to execute arbitrary code on affected devices.
Key findings • Two "important" vulnerabilities (CVSSv3 7.1 and 7.5) disclosed in Gstreamer on July 7-8, 2026. • Heap out-of-bounds write in rfbsrc/librfb (CVE-2026-59691) and stack buffer ove…
GitLab has issued urgent patch releases (19.1.2, 19.0.4, 18.11.7) to address several security flaws, including critical Cross-Site Scripting and HTML Injection vulnerabilities.
Global IT services giant Accenture has confirmed a data breach after a threat actor claimed to have exfiltrated 35 GB of source code and other sensitive data, which is now being offered for sale.
A financially motivated cybercrime campaign is distributing the Vidar stealer and XMRig miner by employing sophisticated evasion techniques, including code signing abuse and file-size inflation.
A growing trend of AI-driven vulnerability discovery is outpacing traditional defense mechanisms, creating a critical need for organizations to adapt their security strategies.
A 19-year-old suspected member of the Scattered Spider cybercrime group, Peter Stokes, was reportedly identified and apprehended through the use of Microsoft's Global Device ID (GDID) telemetry, following a death threat made to a cybersecurity researcher.
Atrium Health will pay $1.8 million to resolve a class action lawsuit alleging its patient portal unlawfully shared sensitive health data with third parties like Meta and Google.
A class-action lawsuit targeting xAI and Stability AI over the creation of deepfake child sexual abuse material (CSAM) has been expanded to include new plaintiffs alleging their images were used via Grok and Stable Diffusion models.
CISA has added CVE-2026-48908, CVE-2026-55255, and CVE-2026-56290 to its Known Exploited Vulnerabilities (KEV) Catalog, citing active exploitation.
A new Office of Management and Budget directive, M-26-14, fundamentally reshapes federal agency logging requirements, prioritizing comprehensive asset visibility as the critical first step toward achieving cybersecurity maturity.
macOS systems are generating unusual DNS queries for NIMLOC (Type 32) records, which, despite their historical association with an obsolete routing architecture, are actually tied to NetBIOS name service broadcasts.
A prevalent social engineering scam uses fake account reports on Reddit and Discord to trick users into revealing login credentials or verification codes, leading to account compromise.
A critical vulnerability (CVE-2026-20896) in Gitea's reverse-proxy authentication mechanism is being actively exploited, allowing attackers to bypass authentication with a single HTTP header.
A novel cloud worm named CAI (Cloud AI Infrastructure Attack Framework) is actively targeting cloud-native developer tools, eliminating competing malware, and engaging in credential theft and cryptomining.
A new Android banking trojan, RedWing, is being offered as a Malware-as-a-Service (MaaS) on Telegram, enabling less sophisticated threat actors to steal banking credentials and one-time passcodes.
Siemens' SINEC OS, particularly on the RUGGEDCOM RST2428P device, is affected by numerous vulnerabilities, some critical, that could lead to denial of service or memory corruption.
Hitachi Energy's PROMOD V industrial control system software contains a vulnerability that transmits sensitive data over insecure HTTP, potentially exposing it to interception and credential theft.
CISA has issued an advisory detailing three critical vulnerabilities in Labcenter Proteus 9, an industrial control system software, that could allow for information disclosure and arbitrary code execution.
Hitachi Energy's e-mesh EMS product is affected by a critical heap-based buffer overflow vulnerability in its NGINX component, potentially leading to application outages and arbitrary code execution.