Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,569 stories synthesized.
CISA issued an advisory for CVE-2026-4827, an insufficient entropy vulnerability affecting dozens of Schneider Electric products across Easergy, EcoStruxure, PowerLogic, and Saitel lines, potentially allowing unauthenticated network attackers to bypass session management.
CISA disclosed CVE-2026-8806, an expected behavior violation in Mitsubishi Electric's MELSEC iQ-F Series FX5-ENET/IP Ethernet module, with no fix planned, affecting critical manufacturing globally.
CISA disclosed two unpatched vulnerabilities in the Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT, allowing attackers to intercept sensitive health data or block legitimate connections.
CISA disclosed three vulnerabilities in Rockwell Automation FactoryTalk Historian Site Edition, including an authentication bypass and two denial-of-service flaws, with patches available.
CISA disclosed CVE-2026-6865, a path traversal vulnerability in Schneider Electric's EasyLogic T150 and Saitel DP remote terminal units, affecting critical energy and manufacturing sectors worldwide.
CISA has issued an advisory for CVE-2026-12390, a type confusion vulnerability in AzeoTech DAQFactory versions 21.1 and prior that can be exploited by uploading specially crafted .ctl files to achieve arbitrary code execution.
CISA disclosed CVE-2026-8805, an integer overflow vulnerability in Mitsubishi Electric's MELSEC iQ-F Series FX5-EIP EtherNet/IP Module, allowing remote denial-of-service via rapid TCP connections.
CISA disclosed a critical vulnerability (CVE-2026-40624, CVSS 9.8) in AVer PTC500S, PTC115, PTC500+, and PTC115+ cameras that allows unauthenticated remote attackers to execute arbitrary code.
A critical unauthenticated arbitrary file deletion vulnerability (CVE-2026-8713, CVSS 9.1) in the Avada Builder WordPress plugin, affecting up to 1 million sites, has been patched in version 3.15.4.
A USB worm is spreading clipboard-stealing malware that targets cryptocurrency wallets by abusing Windows shortcut (.LNK) files and using Tor for stealthy C2 communication.
A weekly roundup covers abuse of Claude AI chat for malware delivery, malicious npm packages (NastyC2), device-code phishing attacks, and 25 other security stories.
The threat actor TeamPCP has injected malicious code into more than 1,000 open-source packages since February 2026, exploiting CI/CD pipelines and AI-driven deployment to steal cloud credentials.
Mozilla released Firefox 152 patching multiple high-severity bugs, including use-after-free flaws and sandbox escapes that attackers can chain for full system compromise.
Key findings • Critical CVE-2026-54003 allows unauthenticated admin creation via spoofed reverse proxy headers • Two CVEs bypass the pages.access permission in REST API and page picker • …
Researcher Justin O'Leary discovered a vulnerability in Google's Config Connector Kubernetes operator that lets any namespace user gain GCP Organization Owner access, but Google rejected the bounty, calling it 'working as intended.'
Researchers at SpecterOps have demonstrated that Microsoft SQL Server 2025's native AI features can be abused for covert data exfiltration and command-and-control communication, bypassing traditional security monitoring.
Sysdig researchers caught attackers using a misconfigured Ollama AI server as the brain for a fully automated hacking tool that scans, exploits, and extracts credentials without human intervention.
Market intelligence platform Klue suffered an OAuth breach exploited by the 'Icarus' threat actors to steal Salesforce CRM data from multiple organizations in an ongoing extortion campaign.
International law enforcement agencies have cleaned malware from nearly 15,000 WordPress sites and taken down over 100 servers linked to the SocGholish botnet and the Russian cybercrime group Evil Corp.
Apple patched a high-severity Bluetooth vulnerability in Beats Studio Buds that could allow attackers within range to eavesdrop on conversations via the microphone.
A data leak dubbed 'FortiBleed' has exposed VPN credentials for 73,932 Fortinet and FortiGate firewall URLs globally, posing immediate risk of unauthorized network access.
A coordinated campaign dubbed Operation Escaneo has breached government and financial targets across Latin America, exploiting flaws in Fortinet and Ivanti appliances to steal millions of records.
Attackers are luring PlayStation Vita and retro gaming enthusiasts with fake GitHub repositories that deliver Lumma Stealer and other malware disguised as legitimate homebrew plugins.
A campaign using AI-generated phishing pages and a fake Blue Screen of Death tricks Brazilian bank customers into running PowerShell commands that deliver the SmartRAT trojan.