Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Threat actors compromised the popular GitHub Action actions-cool/issues-helper, redirecting all tags to a malicious commit that harvests CI/CD credentials and exfiltrates them to an attacker-controlled server.
Ten vulnerabilities hit OpenHarmony v6.0 and earlier on May 19, including two high-severity remote code execution bugs in pre-installed apps and a permanent denial-of-service flaw.
A joint report warns that Anthropic's Claude Mythos AI tool, if leaked, could dramatically accelerate vulnerability exploitation in healthcare, echoing past abuse of Cobalt Strike and Brute Ratel.
Trend Micro researchers have reconstructed the complete operational model of Banana RAT, a banking trojan attributed to the SHADOW-WATER-063 cluster that targets Brazilian financial institutions.
Microsoft warns that threat actor Storm-2949 is abusing Self-Service Password Reset and legitimate admin tools to steal sensitive data from Azure and Microsoft 365 environments.
INTERPOL's Operation Ramz has led to the arrest of over 200 individuals and the seizure of 53 servers used for phishing, malware, and online fraud across 13 countries in the Middle East and North Africa.
A CISA contractor left highly sensitive AWS GovCloud administrative keys, plaintext passwords, and internal system details exposed in a public GitHub repository for months, in what researchers call one of the worst government data leaks in recent history.
A batch of 12 vulnerabilities spanning heap overflows, use-after-free, and policy bypasses was disclosed for ImageMagick on May 18, 2026, affecting multiple coders and operations.
Ten vulnerabilities were disclosed in OpenTelemetry's eBPF Instrumentation agent on May 18, 2026, including high-severity remote crash bugs in Memcached, MongoDB, and Postgres protocol parsers.
Microsoft patched three vulnerabilities in Edge on May 18, 2026, including a high-severity RCE (CVE-2026-45495) and two medium-severity spoofing and bypass flaws, with no active exploitation reported.
Three high-severity vulnerabilities were disclosed in the CI4MS content management system on May 18, 2026, including two stored XSS bugs from a broken HTML-purify rule and a file-editor flaw that allows attackers to delete or rename critical application files.
A newly disclosed Linux kernel vulnerability, CVE-2026-46333, allows unprivileged local users to read files normally restricted to root, including SSH keys and password files, affecting multiple LTS kernel versions.
Iran-linked threat actors linked to Iran have exploited unsecured automatic tank gauge systems to tamper with fuel level readings at US gas stations, expanding the scope of Iran's cyber offensive amid ongoing military conflict.
Check Point's weekly threat intelligence report covers multiple incidents including a Lapsus$ source code leak at Vodafone, a $10.7 million THORChain vault breach, ransomware attacks on West Pharmaceutical and Foxconn, and critical patches for NGINX, Cisco, and Apple zero-days.
SentinelOne has uncovered a new variant of the SHub Stealer, dubbed 'Reaper,' targeting macOS with a multi-stage infection chain that spoofs Microsoft, Apple, and Google at different stages.
The convergence of rapid AI-driven software development and autonomous vulnerability-discovery agents is fundamentally altering the threat landscape, rendering traditional security-through-obscurity strategies obsolete.
SentinelOne Labs reveals how black-box red-teaming of a government education AI assistant found robust semantic defenses but uncovered critical vulnerabilities to structural attacks like JSON encapsulation and Base64 obfuscation.
Kaspersky's Q1 2026 mobile threat report reveals over 2.67 million attacks blocked, a surge in banking Trojans, and the discovery of the SparkCat crypto stealer on both Google Play and the App Store.
Kaspersky's Q1 2026 threat report reveals over 343 million web attacks blocked, 2,938 new ransomware variants, and Clop accounting for 14% of data leak site victims.
Attackers launched three separate supply-chain campaigns against npm, PyPI, and Docker Hub within 48 hours, shifting focus from code tampering to harvesting API keys, cloud credentials, and tokens from developer environments and CI/CD pipelines.
A researcher has published a zero-day exploit named YellowKey that bypasses default Windows 11 BitLocker encryption by defeating TPM-stored decryption keys, posing a critical risk to government and enterprise deployments.
Ivanti, Fortinet, SAP, VMware, and n8n have released security updates addressing multiple critical vulnerabilities, including remote code execution, SQL injection, and privilege escalation flaws.
Microsoft is changing Edge's password handling so that saved credentials are no longer decrypted and held in plaintext in process memory at startup, closing a long-standing weakness unique among Chromium browsers.
Microsoft has confirmed that the May 2026 Windows 11 security update KB5089549 fails to install on devices with insufficient EFI System Partition space, triggering 0x800f0922 errors.