Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 8,179 stories synthesized.
Microsoft has revealed three Active Directory vulnerabilities (CVE-2026-69982, CVE-2026-96252, CVE-2026-108131) that allow remote attackers to bypass security features, potentially weakening access controls and hindering detection of malicious activity.
A critical zero-day vulnerability in Palo Alto Networks' PAN-OS, CVE-2026-0322, is being exploited by attackers to gain root code execution on firewalls.
The Panchan worm, a peer-to-peer crypto mining malware first identified in 2022, remains an active threat, propagating by stealing SSH keys and employing rootkits for persistent access.
Mandiant reports that the suspected PRC-nexus threat actor ARMORY CASTLE exploited a zero-day vulnerability in BeyondTrust Remote Support appliances in late August 2026, establishing stealthy persistence.
Key findings • Atlassian vulnerability CVE-2026-21589 added to CISA KEV on October 15, 2026. • The flaw is confirmed to be under active exploitation in the wild. • Immediate patching and …
Mandiant uncovered a sophisticated supply chain attack targeting AOMEI Technology's update infrastructure, employing brief, repeated configuration tampering to deploy the SHINYROAD backdoor.
Key findings • 14 vulnerabilities disclosed for N8n on October 14, 2026, affecting multiple versions. • High-severity flaws include authorization bypass, code execution, and SQL injection. …
Ukraine's military has regained mobile connectivity for SpaceX's Starshield satellite service, following a brief but disruptive outage that impacted drone operations.
Unit 42 researchers have identified PEERSTITCH, a new memory-resident malware exploiting CVE-2024-47575 to compromise over 500 FortiGate firewall devices.
Ampath Laboratories confirmed a cyber incident but disputes threat actors' claims of exfiltrating 80 million patient records, stating no medical data has been compromised.
Authorities in North Macedonia have charged a 20-year-old suspect with operating the OLVX cybercrime marketplace, which sold stolen data and malicious tools, with the FBI providing crucial intelligence.
Law enforcement in Brooklyn has dismantled a sophisticated cryptocurrency fraud scheme that defrauded Russian-speaking residents out of millions of dollars.
Cloudflare's analysis of the Yandex network outage indicates that while legitimate search crawlers were affected, malicious bots from Yandex.Cloud simply migrated to other providers rather than being neutralized.
Key findings • Six vulnerabilities disclosed in Plane, affecting versions prior to 1.4.0, with two rated High severity. • High severity CVE-2026-102982 allows XSS via crafted comments, and CV…
A silent zero-click vulnerability in Anthropic's Claude Code Desktop allows attackers to steal sensitive developer credentials, including SSH private keys and AWS credentials.
Cisco is warning of active exploitation of a critical vulnerability in its Secure Email Gateway, allowing unauthenticated attackers to write arbitrary files and execute commands as root.
F5 has disclosed three critical vulnerabilities in NGINX Plus and Open Source that could allow remote attackers to crash servers or execute malicious code.
Key findings • Juniper Networks disclosed 25 vulnerabilities in Junos OS and Junos OS Evolved on October 14, 2026. • Multiple critical vulnerabilities (CVSSv3 9.8) allow for remote code execu…
Key findings • 25 vulnerabilities disclosed in Juniper Networks Junos OS and Junos OS Evolved on October 14, 2026. • Multiple critical vulnerabilities (CVSSv3 9.8) allow for remote code execu…
Attackers have compromised Nextcloud servers by exploiting a critical vulnerability in the optional Collabora Online CODE app, planting web shells to gain arbitrary command execution.
Drupal core has released security advisory SA-CORE-2026-016, addressing a moderately critical cross-site scripting (XSS) vulnerability in the Navigation module.
Drupal core's Link module contains a moderately critical cross-site scripting (XSS) vulnerability, CVE-2026-108515, due to insufficient sanitization of specific markup.
Key findings • Three medium-severity vulnerabilities in RabbitMQ Server disclosed on October 14, 2026. • Vulnerabilities stem from improper handling of MQTT 5 and AMQP 1.0 protocol data parsi…
The curl project has released version 8.23.0, addressing 24 security vulnerabilities in libcurl, ranging from critical credential leaks to command injection flaws.