Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,569 stories synthesized.
pgAdmin 4 version 9.16 fixes seven security flaws (CVE-2026-12044–12050), including a critical SQL injection in dialog templates and a prompt injection in the AI Assistant that could enable remote code execution via PostgreSQL's COPY TO PROGRAM.
QNAP released urgent firmware updates fixing command injection, URL injection, and memory corruption flaws across QTS, QuTS hero, QuTS cloud, and QVP.
A wave of ShinyHunters breaches targeting Salesforce and Snowflake environments reveals attackers have shifted from exploiting software flaws to stealing identities, abusing OAuth tokens, and bypassing MFA.
A VBScript malware campaign is actively targeting users in 11 countries through WhatsApp Desktop and Web, using compromised accounts to send malicious .vbs files disguised as financial documents that ultimately install remote monitoring and management software.
Apple has seeded visionOS 27.0 beta 2 (build 24M5306i) to developers, including security fixes that are not yet detailed in the release notes.
Apple released iPadOS 27.0 beta 2 (build 24A5370h) for developer testing, with security fixes expected to be detailed at final release.
Gizmodo confirmed a security incident on Saturday after readers encountered ClickFix malware prompts on article pages, attributed to an ErrTraffic affiliate.
A new report from BindingHook reveals that Chinese state-sponsored cyber operations rely on a commercial ecosystem of private contractors, botnet operators, and data brokers, a model termed 'composite responsibility.'
Canada's spy agency, CSIS, secured a novel threat reduction warrant to remotely disinfect servers, home routers, and IoT devices infected by two foreign-run botnets, marking a legal and operational first for domestic cyber defense.
Cornell Tech researchers disclose WARP, a novel attack that uses a single Reddit comment to poison AI deep-research agents like ChatGPT and Gemini.
Researchers discovered 23 malicious plugins on the ClawHub AI agent registry that exploited unreserved official scopes to execute arbitrary code within Claude and OpenClaw agents.
Elastic Security Labs has uncovered OXLOADER, a novel loader distributed through Google Ads that impersonates the Node.js installer to deploy the CASTLESTEALER infostealer on Windows systems.
Key findings • Three CVEs disclosed together for Apache NiFi on June 22, 2026, affecting versions up to 2.9.0 • CVE-2026-44911 (CVSS 8.8) lets read-only users invoke privileged configuration …
Researchers uncovered a coordinated campaign where attackers compromised over 10,000 GitHub repositories by cloning legitimate projects and injecting malicious links in README files, distributing Trojan malware families like SmartLoader and StealC.
INTERPOL's 2025/2026 report warns of a dramatic rise in cybercrime across Asia and the South Pacific, driven by AI-powered scams, ransomware-as-a-service, and rapid digitalization.
Key findings • 25 CVEs across 23 WordPress plugins disclosed June 19–22, 2026 • Critical unauthenticated file deletion in Avada Builder (CVE-2026-8713, CVSS 9.1) affects ~1M sites • Thr…
During an authorized red-team evaluation, Anthropic's Mythos AI model reportedly infiltrated nearly all NSA classified systems within hours, prompting unprecedented US export controls on AI models.
Asymptote Labs has released Agent Beacon, an open-source telemetry layer that monitors AI coding agents across developer laptops, CI jobs, and cloud environments, providing security teams with normalized visibility into agent behavior.
New research shows that DNS-over-TLS, HTTPS, and QUIC expose DNS flows via plaintext packet headers, enabling eavesdroppers to identify and exploit IoT device traffic.
Researchers found 282 of 444 iOS apps with LLM features exposed exploitable credentials or backend access, affecting popular apps across 13 categories.
The release of systemd 261 adds a software-based TPM, a cloud instance metadata subsystem, process state persistence across kexec reboots, and a new operating system installer, impacting nearly all modern Linux distributions.
Key findings • Ten vulnerabilities in Libexpat disclosed on June 21, 2026, all fixed in version 2.8.2. • A majority of the CVEs are integer overflows in various parsing functions. • CVE-2…
A new botnet named AryStinger has infected over 4,000 D-Link routers, primarily DIR-850L and DIR-818LW models, exploiting old vulnerabilities to turn them into proxies for malicious traffic.
Key findings • Nine vulnerabilities disclosed for Craft CMS and Craft Commerce between June 19-21, 2026. • Flaws include RCE, SSRF, path traversal, authorization bypass, and multiple stored X…