Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Threat actors are actively exploiting a critical heap buffer overflow in NGINX (CVE-2026-42945) just days after F5 released patches and a public proof-of-concept emerged, with over 5.7 million internet-exposed servers potentially vulnerable.
A proof-of-concept exploit has been released for CVE-2026-1234, a local privilege escalation vulnerability in the Linux kernel's rxgk module that allows unprivileged attackers to gain root access.
Microsoft and the Institute of Science Tokyo have disclosed MetaBackdoor, a novel backdoor attack that embeds malicious behavior in LLM weights triggered by input length, evading all standard content filters.
Cloudflare reveals findings from Project Glasswing, where Anthropic's Mythos Preview LLM demonstrated advanced exploit chain construction and automated proof generation, outperforming general-purpose frontier models.
Security researchers collected $1,298,250 for exploiting 47 zero-day vulnerabilities across enterprise and AI products at Pwn2Own Berlin 2026, with DEVCORE winning the contest.
OTT Cybersecurity has released version 3.1.0 of Lyrie, an open-source autonomous pentesting agent that adds XChaCha20-Poly1305 memory encryption, seven new PoC generators, and a cryptographic Agent Trust Protocol for AI agent identity verification.
Regulatory attorney Elizabeth Hodge warns that AI stealthily embedded into existing healthcare software and tools — often without vendor disclosure — creates privacy risks on par with shadow AI.
Linux creator Linus Torvalds has declared the kernel's security mailing list 'almost entirely unmanageable' due to a flood of duplicate vulnerability reports generated by AI-powered bug-hunting tools.
Three vulnerabilities were disclosed in Vercel's AI SDK on May 17, 2026, including a high-severity SSRF in the provider-utils package and a CI pipeline command injection flaw.
A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed "MiniPlasma" that lets attackers gain SYSTEM privileges on fully patched Windows systems.
Debian 13.5 has been released as a point update for the 'trixie' stable distribution, bundling over 100 security advisories and fixes for more than 130 packages.
Grafana Labs disclosed that an unauthorized party accessed its GitHub environment using a stolen token, enabling the download of the company's source code.
Federal agencies, including NIST and the DoD, have issued a series of updated security and privacy guidelines aimed at strengthening incident response, identity verification, and risk management across the government.
The American Hospital Association and Rubrik are calling for a shift in healthcare cybersecurity strategy, emphasizing that hospitals must prioritize immutable backups and rapid recovery over the unattainable goal of total attack prevention.
SecurityScorecard has acquired internet scanning startup Driftnet to bolster its real-time visibility into exposed infrastructure, AI-related risks, and malicious attack patterns.
Decentralized cryptocurrency platform THORChain has confirmed a $10.7 million theft following the compromise of one of its six operational vaults.
A critical, unauthenticated vulnerability in the Funnel Builder WordPress plugin is being actively exploited to inject payment skimmers into WooCommerce checkout pages, affecting over 40,000 websites.
The Metasploit Framework has added four new modules, including exploits for critical vulnerabilities in Marvell QConvergeConsole, GestioIP, and Dolibarr ERP/CRM, alongside a new Vim-based persistence mechanism.
Russian state-sponsored threat actor Secret Blizzard has evolved its long-standing Kazuar backdoor into a modular P2P botnet, enhancing its ability to conduct stealthy, long-term espionage against government and defense targets.
Microsoft has declined to issue a CVE for a critical privilege escalation vulnerability in Azure Backup for AKS, despite independent validation by CERT/CC and evidence suggesting the company silently patched the flaw.
A critical, actively exploited zero-day vulnerability in Cisco Catalyst SD-WAN Controller allows unauthenticated attackers to gain full administrative access, triggering an emergency CISA mandate.
A new infostealer dubbed REMUS has rapidly matured into a professionalized Malware-as-a-Service operation, shifting its focus from basic credential theft to sophisticated session hijacking and campaign management.
A set of four vulnerabilities in the OpenClaw platform, dubbed "Claw Chain," allows attackers to bypass sandbox protections, escalate privileges, and establish persistent access to compromised systems.
Adversaries are increasingly bypassing traditional security perimeters by compromising CI/CD infrastructure, turning trusted automation tools into vehicles for persistent, stealthy, and scalable attacks.