Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,961 stories synthesized.
PuTTY 0.84 fixes multiple low-severity vulnerabilities, including ECDSA and RSA key exchange crashes and a Telnet trust-sigil reset flaw that could trick users into revealing proxy passwords.
Microsoft has confirmed that the May 2026 security update KB5087537 causes domain controller locator failures on Windows Server 2016 systems with 15-character hostnames, disrupting authentication and administrative tools.
Nine medium-severity OS command injection vulnerabilities were disclosed for the Totolink CA750-PoE router, all in the same CGI handler with public exploits, but no firmware patch has been released.
Iran's Nimbus Manticore group is targeting US aviation organizations in a campaign combining phishing and SEO poisoning to deploy the AI-assisted MiniFast backdoor.
A critical heap buffer overflow vulnerability (CVE-2026-48095, CVSS 8.8) in 7-Zip version 26.00 allows attackers to execute arbitrary code by exploiting a defect in the NTFS archive handler.
Trend Micro researchers uncover ClearFake threat actors using immutable smart contracts on the BNB Smart Chain testnet to command and control malware, evading takedown.
Cloud Atlas APT group modifies termsrv.dll on Windows 10 to enable multiple concurrent RDP sessions, allowing attackers to operate undetected alongside legitimate users.
A batch of 24 vulnerabilities, including 16 stack-based buffer overflows and 6 OS command injection flaws, has been disclosed for the Edimax EW-7438RPn Wi-Fi range extender, with public exploit code available and no official patch from the vendor.
KELA researchers have uncovered a booming Mule-as-a-Service ecosystem on Telegram where criminals sell verified bank accounts, fintech wallets, and crypto exchange accounts, using AI-generated deepfakes and LLMs to bypass KYC checks.
Twenty-four critical-severity OS command injection vulnerabilities were disclosed in the Totolink A8000RU router's web management interface, all unauthenticated and with public exploit code, but no firmware patch has been released.
Attackers are abusing shared CDN infrastructure in a technique called 'Underminr' to bypass domain-reputation security controls, potentially affecting over 88 million domains.
A batch of ten vulnerabilities was disclosed on May 25, 2026, in the widely used Erlang HTTP client library Hackney, including CRLF injection, resource exhaustion, and SSRF flaws.
Check Point's latest threat intelligence bulletin covers a confirmed 7-Eleven breach, a GitHub source code theft via a weaponized VS Code extension, and the FBI warning about the Kali365 phishing-as-a-service kit.
SANS handler Didier Stevens updated his search-for-compression.py tool to detect and extract ZLIB-compressed VBA code from Microsoft Access database files, aiding forensic analysis of the undocumented binary format.
Dutch authorities arrested two co-owners of hosting firms MIRhosting and WorkTitans, seizing over 800 servers for allegedly providing infrastructure to EU-sanctioned Stark Industries Solutions, used by Russian intelligence for cyberattacks and disinformation.
Threat actors stole files containing names and protected health information from Radiology Associates of Richmond, affecting approximately 266,000 individuals.
Nine SQL injection and cross-site scripting vulnerabilities have been disclosed for Code Projects Employee Profile Management System 1.0, all with public exploits available and no patch from the vendor.
GreyNoise detected 597,000 scanning sessions targeting SonicWall SonicOS management APIs on May 12, 2026—a 46-fold increase—mirroring patterns seen before the disclosure of CVE-2026-0400.
Iran-linked threat actor Screening Serpens is using two new RAT families—MiniUpdate and MiniJunk V2—in spear-phishing campaigns targeting tech professionals in the US, Israel, and UAE.
Legal case management platform DocketWise is notifying over 143,000 people that their personal, financial, and medical information was compromised in a breach involving cloned third-party repositories.
New research from Fox-IT reveals RemotePE, a cross-platform memory-only RAT used by North Korea's Lazarus Group to stealthily target financial and cryptocurrency organizations.
Mysk researchers discovered WhatsApp stores chat histories unencrypted in a shared app group container on iOS and macOS, exposing plaintext messages to other Meta apps like Facebook and Instagram.
A batch of 12 vulnerabilities, including 7 buffer overflows and 5 command injection flaws, has been disclosed for the Edimax BR-6675nD router, with public exploit code available and no official patch.
Five high-severity stack-based buffer overflow vulnerabilities were disclosed across two Tenda router models in a 16-hour window, with public exploits already available for all five CVEs.