Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 3,727 stories synthesized.
Exploitation attempts for a critical Gitea Docker image vulnerability (CVE-2026-20896) have been observed just 13 days after its public disclosure, highlighting the rapid pace of threat actor activity.
Cybercriminals are increasingly leveraging sophisticated AI-generated images to lend credibility to financial scams, fake dating profiles, and fraudulent fundraising appeals, making visual verification unreliable.
Frost & Sullivan's 2025 Frost Radar™ for Cloud Security Posture Management highlights a market shift from compliance tools to integrated risk-based governance within CNAPPs, projecting significant growth.
A new Go-based ransomware strain, 'The Gentlemen,' is rapidly spreading across networks using a sophisticated worm engine and 21 remote execution techniques, targeting organizations globally.
A new indirect prompt injection technique embeds hidden text on malicious websites to manipulate AI agents into unauthorized actions, including cryptocurrency payments.
Insignary Clarity's new platform analyzes compiled software to ensure accurate Software Bills of Materials (SBOMs), addressing regulatory gaps and prioritizing vulnerabilities based on exploitability.
A critical Use-After-Free vulnerability (CVE-2026-57992) in Microsoft Edge allows remote attackers to execute arbitrary code by tricking users into visiting a malicious webpage.
Rich Communication Services (RCS), the successor to SMS, utilizes DNS NAPTR records to dynamically locate its servers, enabling modern IP-based communication.
Three vulnerabilities in IBM WebSphere Application Server's administrative console could allow for cross-site scripting and path traversal attacks, potentially exposing sensitive data.
Ukraine's security agency reports a significant increase in Russian state-sponsored cyberattacks targeting media organizations, aiming to disrupt broadcasts and spread disinformation.
OpenSSH 10.4 has been released, patching eight security vulnerabilities, including critical flaws in SFTP and SCP, and introducing experimental support for post-quantum cryptography.
This week's security landscape was marked by the disruption of the NetNut residential proxy network, novel AI-driven ransomware, and the exploitation of trust mechanisms in various software and AI systems.
Cloudflare introduces Workers Cache, a new feature that places a tiered cache directly in front of its Workers platform, enabling automatic response caching and reducing latency and CPU usage for developers.
Check Point Research has uncovered 'Cavern Manticore,' an Iran-nexus APT group employing a sophisticated, modular .NET command-and-control framework to target Israeli organizations, particularly in the government and IT sectors.
Two critical vulnerabilities in PHP, CVE-2026-12184 and CVE-2026-14355, have been disclosed, posing risks of denial-of-service and memory corruption for web applications.
Check Point Research's latest threat intelligence report details active exploitation of critical vulnerabilities in Oracle E-Business Suite, Linux kernel, Citrix NetScaler, and Progress Kemp LoadMaster, alongside emerging AI-driven cyber threats.
OWASP ModSecurity versions up to 3.0.15 contain vulnerabilities that allow attackers to bypass firewall rules, impacting security for web applications.
A leaked RedLine Stealer C2 server led researchers to a sophisticated phishing campaign targeting a South Korean maritime manufacturer with fraudulent domains and spoofed business emails.
The ShinyHunters extortion group has leaked data belonging to over 2.3 million individuals associated with the Moody Bible Institute (MBI), including names, contact details, and personal identifiers.
France's national cybersecurity agency, ANSSI, will cease certifying non-quantum-safe encryption products starting in 2027, pushing a nationwide transition to quantum-resistant cryptography.
A 15-year-old in Japan was arrested for using a ChatGPT-assisted tool to systematically cancel nearly 47,000 user registrations on the Bandai Channel streaming service, forcing a temporary service outage.
Malware disguised as 'agent skills' for AI coding assistants like Claude Code and OpenAI Codex can bypass security scanners using novel evasion techniques.
The source code for KSOS, a secure Unix-like operating system developed in the late 1970s and 1980s with US Department of Defense backing, has been released by The Unix Heritage Society.
Researchers have demonstrated TrojPix, a novel attack that exfiltrates data from air-gapped systems by manipulating on-screen pixels to emit faint radio signals via video cables.