Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Hackers breached the UK's Legal Aid Agency, stealing records dating back to 1978, with the incident impacting approximately 250,000 records and including sensitive data from HM Prison and Probation Service.
Graylark's Raven AI technology can pinpoint specific indoor locations from user-submitted photos by analyzing visual cues, raising significant privacy concerns.
Microsoft has resolved a Windows 11 update issue that caused black screens and Windows Explorer crashes, primarily affecting Azure Virtual Desktop hosts using FSLogix.
A former Air Force CISO revealed that pilots in Afghanistan used commercially purchased USB drives for classified mission data, creating significant security risks that predated the 2008 Agent.BTZ worm incident.
Citizen Lab has uncovered 'AdFection,' a sophisticated spyware campaign using Discover-Tech's targeted advertising to deliver zero-click infections, impacting organizations like Al Jazeera and the U.S. Department of Defense.
A critical zero-day vulnerability in Windows Server, CVE-2026-70111, allows network-adjacent attackers to crash servers by sending a single malicious DFS referral response over SMB.
CenterPoint Energy has confirmed a data breach impacting over 1 million Texans, with compromised data including names, addresses, Social Security numbers, and driver's license numbers.
Anthropic's latest threat report reveals AI agents are automating every stage of cyberattacks, from reconnaissance to data exfiltration, significantly reducing attacker resource requirements.
The UK government is debating potential amendments to its Cyber Security and Resilience Bill to address emerging AI-driven threats, including autonomous worms and attacks on critical infrastructure.
London's Metropolitan Police Service (MPS) has been issued an enforcement notice by the UK's Information Commissioner's Office (ICO) for unlawfully using the Auror retail crime platform without proper data protection checks or formal procurement.
A new ranking of the top ten malware analysis tools for 2026 evaluates evasion resistance, interactivity, and verdict quality, with VirusTotal identified as the premier starting point for investigations.
Despite claims of enhanced security, decision models like TypeSafe AI's Jev remain susceptible to prompt injection attacks, potentially allowing attackers to hijack agent actions.
A deceptive application impersonating Google Chrome, listed as a sponsored result on Google Play, has reportedly garnered over 100,000 downloads, prompting renewed concerns about app store vetting processes.
Exposed AI-related software on the public internet surged by 63% in just nine months, indicating a rapidly expanding attack surface for these critical systems.
A local privilege escalation vulnerability in NoMachine, identified as ZDI-26-774 and CVE-2026-111185, allows attackers with low-privileged access to gain elevated permissions.
A numeric truncation vulnerability in Telegram's rlottie library allows attackers to achieve remote code execution by tricking users into opening malicious files or visiting compromised web pages.
A heap-based buffer overflow in X.Org Server's XKB component, tracked as CVE-2026-93520, enables local privilege escalation.
A syslog log_message format string vulnerability in QNAP TS-453E devices allows network-adjacent attackers to execute arbitrary code without authentication.
A heap-based buffer overflow vulnerability in X.Org Server's XInput component allows local privilege escalation, tracked as CVE-2026-93523.
A critical vulnerability in Docker Buildx's filesystem entitlements protection mechanism could allow remote code execution.
A critical heap-based buffer overflow in GStreamer's rtpL16depay component, assigned CVE-2026-111183, allows for remote code execution with a CVSS score of 9.8.
A critical integer overflow vulnerability in Adobe Photoshop's DCM pixel data parsing allows for remote code execution.
A critical directory traversal vulnerability in SonicWall Secure Mobile Access (SMA) allows authenticated attackers to achieve remote code execution, rated CVSS 7.2.
Key findings • Drupal core patched five vulnerabilities on October 15, 2026, including critical RCE and XSS flaws. • CVE-2026-108097 allows unauthenticated RCE via contributed modules affecti…