Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,965 stories synthesized.
Google Cloud unveiled AI Threat Defense, an automated platform combining Gemini models, Wiz, and CodeMender to find, prioritize, and patch vulnerabilities at machine speed.
Cisco Talos disclosed four heap-based buffer overflow vulnerabilities in MediaArea MediaInfoLib that could allow arbitrary code execution via a malicious media file.
India's CERT-In recommends patching exploited n-day vulnerabilities within 12 hours for internet-facing systems, warning that AI tools like agentic agents and frontier models are compressing the attack timeline.
An industry collaboration between CrowdStrike, Google and the Shadowserver Foundation has disrupted the Glassworm botnet, a stealthy network that targeted software developers by poisoning open-source packages and stealing credentials.
Researchers have discovered a multi-turn manipulation vulnerability affecting all major large language models, including GPT-4, Claude, and Gemini, that bypasses safety guardrails by breaking down malicious requests across several conversation turns.
Jenkins released a security advisory addressing 11 vulnerabilities across plugins including LDAP, Active Directory, Email Extension, and Pipeline: Groovy Libraries, with some flaws enabling remote code execution.
A stored XSS vulnerability in pretalx, an open-source conference management platform, allowed attackers to hijack organizer sessions and auto-accept speaker submissions.
Cybersecurity startup RevEng.AI has raised $15 million in Series A funding to scale its AI-powered binary analysis platform, BinNet, which detects vulnerabilities and backdoors in compiled software without requiring source code.
Romanian national Catalin Dragomir was sentenced to 4 years and 8 months in US prison for hacking into an Oregon state government network and selling access to it and other compromised systems.
Attackers are chaining Google Meet, Search Redirect, and Ad Service domains in a 'Nested Delivery Matrix' to bypass email security and steal Microsoft 365 credentials.
Researchers disclosed 'SymJack', an attack technique that exploits AI coding agents by using malicious repositories and disguised symlinks to silently install attacker-controlled MCP servers.
A critical vulnerability in Gitea, CVE-2026-27771, allows unauthenticated attackers to pull private container images from over 30,000 self-hosted deployments, potentially exposing sensitive data from healthcare, aerospace, and other sectors.
Cisco Talos has open-sourced EvidenceForge, a synthetic log generator that produces causally consistent, multi-format security datasets for training threat hunters and validating detection logic.
Cybercriminals are abusing Adobe Target's A/B testing infrastructure in a LinkedIn credential phishing campaign that uses double-extension attachments and obfuscated JavaScript.
Apple is developing a new iPhone security feature that automatically locks the device upon detecting a theft in progress, using accelerometer data, Apple Watch proximity, and location signals.
Synology released a coordinated batch of 10 security advisories on May 27, 2026, covering a critical buffer overflow in BeeStation OS and multiple high-severity flaws in DSM, Active Backup, and desktop apps.
Dutch police arrested a 35-year-old man for hacking AFC Ajax multiple times in early 2026, exploiting vulnerabilities that exposed hundreds of thousands of fan accounts and allowed manipulation of stadium bans and tickets.
The FBI has issued an alert detailing how Silent Ransom Group (SRG) now sends operatives in person to law firms to physically insert USB drives and exfiltrate data for extortion.
Huntress documents multiple real-world incidents where attackers exploited exposed RDP ports to breach business networks, often without needing any exploit.
A zero-click WhatsApp account takeover attack targeting iOS 16 users has been uncovered, chaining an Apple ImageIO flaw with a WhatsApp linked-device sync vulnerability to silently hijack sessions.
Vigolium, a new open-source vulnerability scanner that merges deterministic scanning with AI-driven auditing, has been released with over 235 scanner modules and an autonomous agent runtime.
GitLab suspended the account of Windows exploit researcher Nightmare-Eclipse on May 26, 2026, days after GitHub banned the researcher for publishing three Windows Defender zero-day tools.
Hitachi published six coordinated advisories covering XXE injection, credential exposure, and buffer overflow flaws across four product lines.
A wave of vulnerabilities in ISC BIND 9, including a critical use-after-free in DNS-over-HTTPS and an unbounded resend loop, puts millions of resolvers and authoritative servers at risk of remote exploitation.