Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 6,174 stories synthesized.
Key findings • 16 vulnerabilities disclosed simultaneously for Erlang/OTP on September 1, 2026. • Multiple high-severity flaws in inets httpd related to HTTP request smuggling and DoS. • …
Cybercriminals are increasingly abusing legitimate cloud platforms like Azure, Google Cloud, and AWS to host phishing infrastructure, making malicious traffic appear legitimate and bypassing traditional security measures.
A whistleblower complaint claims the U.S. Postal Service is implementing new, untested IT systems to manage mail-in ballots for the 2026 midterm elections, raising concerns about potential disenfranchisement.
Five individuals have pleaded guilty to federal charges for their involvement in a widespread ATM jackpotting scheme that used malware to force cash machines to dispense funds.
A sophisticated ClickFix campaign is compromising organizations by using the Polygon blockchain to dynamically update its command-and-control infrastructure, making it harder to block.
The Mirage Kitten group is employing a sophisticated social engineering tactic, posing as recruiters to deliver novel Node.js malware via fake coding tests to software developers.
Attackers are exploiting Microsoft Teams' external communication features to impersonate IT support and trick employees into granting remote access or executing malware.
Key findings • Mozilla disclosed 25 vulnerabilities affecting Firefox and Thunderbird on September 1, 2026. • Two critical sandbox escape vulnerabilities (CVE-2026-84121, CVE-2026-84119) were…
Cloudflare has prototyped a Cache Transcoding system using Zstandard (zstd) to significantly increase effective cache capacity by compressing eligible assets, trading minor CPU increases for substantial storage and bandwidth savings.
Over 21,000 Microsoft Exchange servers are still vulnerable to CVE-2026-62911, an authentication bypass flaw that allows attackers to impersonate users by replaying captured NTLM credentials.
Attackers are using shared ChatGPT conversation links to trick Windows users into executing malicious commands that install malware, including a remote control client.
Forescout researchers successfully adapted a PLC exploit using AI, demonstrating a potential new threat vector for industrial control system attacks.
WordPress has launched a new Core Security Initiative to employ AI-assisted tools for discovering vulnerabilities before malicious actors can exploit them.
Key findings • Four medium-severity vulnerabilities disclosed by Samsung Mobile on September 1, 2026. • Vulnerabilities affect Samsung's open-source components: mTower and rlottie. • Issu…
A new Python-based malware framework, BraZetsu, is being used by threat actor Exilware to map compromised corporate networks and identify valuable data for sale on underground marketplaces.
A novel social engineering tactic known as ClickFix has become the most prevalent method for attackers to gain initial access into corporate networks, bypassing traditional security measures by leveraging user interaction.
Attackers are luring users with a fake Claude Opus 5 desktop application, distributing the RevStealer infostealer malware designed to steal passwords, browser data, and cryptocurrency.
Healthcare technology company Aesto Health has disclosed a significant data breach impacting approximately 9.5 million individuals, compromising sensitive personal and protected health information.
METR, a non-profit focused on AI model evaluation, disclosed two security incidents where attackers stole an API key and attempted unauthorized access, leading to the consumption of approximately $600,000 in AI credits.
WatchGuard has released patches for three critical vulnerabilities in its Fireware OS, allowing unauthenticated remote code execution.
Key findings • 25 WordPress plugins affected by a single disclosure event on September 1, 2026. • Vulnerabilities span SQL injection, XSS, arbitrary file upload, authentication bypass, and SS…
Hackers are exploiting trojanized website themes distributed via Composer to deliver spyware and steal cryptocurrency wallet seeds from iPhones, targeting older iOS versions.
APT group Mirage Kitten is employing novel Node.js and JavaScript-based remote access trojans, NodeRabbit and PollCat, delivered via spear-phishing campaigns targeting the aviation and FinTech sectors in the Middle East and Africa.
A password-spraying campaign between July and August 2026 targeted AWS root accounts at more than 150 organizations, though no successful compromises were confirmed.