Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,965 stories synthesized.
Rapid7 MDR observed exploitation of CVE-2026-0257, an authentication bypass in Palo Alto Networks PAN-OS and Prisma Access GlobalProtect, with attackers using cookie-based authentication to access internal networks.
Six vulnerabilities, including a CVSS 8.8 scope bypass in the Gateway chat.send route, have been disclosed in the open-source OpenClaw chat-ops platform, with patches available across four release versions.
DockSec, an open-source AI-powered Docker security analyzer adopted as an OWASP Incubator Project, correlates findings from Trivy, Hadolint, and Docker Scout to rank CVEs by real-world impact and generate plain-English fixes.
A new Flare report reveals the DDoS-as-a-service market has evolved from simple $5 attacks to sophisticated subscription-based platforms with customer support and reseller programs.
Nine security vulnerabilities were disclosed in the open-source AVideo platform on May 29, 2026, including a pre-auth shell injection (CVSS 8.8) and a wallet fraud bug that hardcodes payment success.
Researchers have demonstrated an exploit chain that chains over-permissioned roles, secrets discovery, and non-human identities to compromise a popular automation service, highlighting how minor cloud misconfigurations can cascade into full compromise.
Dutch police have dismantled a massive botnet comprising at least 17 million infected devices after seizing 200 servers from a hosting provider, following a tip from the National Cyber Security Centre (NCSC-NL).
A critical zero-day vulnerability in the self-hosted Git service Gogs allows authenticated attackers to achieve remote code execution via argument injection through pull requests with malicious branch names.
Nozomi Networks Labs disclosed 12 vulnerabilities in Waterfall WF-500 TX/RX Hosts, including four critical unauthenticated OS command injection flaws in the Console WebUI.
Google is making Device Bound Session Credentials (DBSC) generally available in Chrome to cryptographically bind authentication sessions to devices, thwarting cookie theft by infostealer malware and phishing kits.
A targeted phishing campaign is tricking Signal users into handing over their 64-character backup recovery keys, allowing attackers to decrypt entire message histories.
Researcher Andi Ahmeti disclosed a prompt injection vulnerability in ChatGPT, dubbed ChatGPhish, that allows attacker-controlled Markdown in web pages to inject phishing URLs, fake security alerts, or QR codes into the chatbot's responses.
Fortra's FIRE team uncovered a phishing campaign dubbed RatPressto that targets financial organizations with fake Adobe Document Cloud pages hosted on compromised WordPress sites to silently install ScreenConnect remote access malware.
A polished npm package named codexui-android with 27,000 weekly downloads secretly exfiltrated OpenAI Codex authentication tokens, and the same attacker published Android apps on Google Play that pulled the malicious package.
California Attorney General Rob Bonta has sued 23andMe, now Chrome Holding Co., alleging the company failed to implement basic security measures like multi-factor authentication, leading to a 2023 credential-stuffing attack that compromised 6.9 million user accounts.
Troy Murray was sentenced to 121 months in prison for selling lead lists of over 7 million elderly Americans to Jamaican fraudsters, fueling a lottery scam that caused $9.5 million in victim losses.
Researchers have demonstrated a novel browser-based side-channel attack called FROST that infers user activity by measuring SSD I/O timing through the Origin Private File System API, requiring no malware or extensions.
Google released Chrome 148, fixing 151 vulnerabilities, including critical-severity bugs that could enable remote code execution.
A malicious NuGet package impersonating a C# SDK for Brazil's Sicoob financial system steals client IDs and PFX certificates, while a parallel npm campaign deploys 14 typosquatted packages to harvest cloud secrets.
ESET's 2026 APT Activity Report reveals China-backed threat actors are exploiting regional instability to target maritime and energy companies globally.
A cross-platform RAT distributed via poisoned npm packages exfiltrates credentials, crypto wallets, and SSH keys to private HuggingFace datasets, blending malicious traffic with legitimate API calls.
ESET's Tony Anscombe covers attacks on Polish water treatment facilities, AI-directed attacks that failed in Mexico, and what Google believes is the first AI-generated zero-day exploit.
Kaspersky Container Security now includes the KIRA AI assistant to analyze Docker images for vulnerabilities and misconfigurations, revealing that 90% of popular Docker Hub images contain outdated packages with critical flaws.
Attackers distributed a fake RVTools installer signed with a valid Sectigo certificate to bypass Windows SmartScreen and deploy a Python-based RAT targeting VMware administrators.