Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
The JDownloader website was compromised for two days in May 2026, resulting in the distribution of malicious installers that deployed a remote access Trojan to Windows and Linux users.
Google has updated its Context-Aware Access feature to allow Workspace administrators to apply a single, default security policy across all SAML-based applications.
Microsoft has issued a warning regarding a high-severity zero-day vulnerability in on-premises Exchange Servers that allows for remote spoofing and potential arbitrary code execution.
Meta has simultaneously introduced enhanced privacy protections for AI chats on WhatsApp while completely removing end-to-end encryption for direct messages on Instagram.
Microsoft is introducing a new automated recovery feature that allows the company to remotely roll back faulty Windows drivers distributed through Windows Update, eliminating the need for manual user intervention.
Akamai Technologies has announced a $205 million agreement to acquire browser security firm LayerX to bolster its zero trust portfolio with AI usage control capabilities.
California-based lender American Lending Center has confirmed that a ransomware attack detected in July 2025 resulted in the theft of sensitive personal data belonging to 123,000 individuals.
Security experts are warning that on-camera age-verification systems are fundamentally flawed and easily bypassed, raising questions about both their technical reliability and their broader implications for user privacy.
New research reveals that 84% of high-severity security incidents now involve the abuse of legitimate administrative tools rather than traditional malware, prompting a shift toward proactive attack surface reduction.
A thriving underground marketplace on Telegram is providing thieves with sophisticated phishing tools and services to bypass Apple’s Activation Lock, turning stolen iPhones into profitable resale commodities.
The Gremlin stealer has evolved into a sophisticated, modular threat that uses advanced obfuscation and new financial-theft modules to evade detection and hijack user sessions.
OpenAI has been forced to rotate code-signing certificates and update several desktop applications after a supply chain attack on the TanStack library led to the compromise of two employee devices and the exfiltration of internal credentials.
Rocky Linux has introduced an opt-in Security Repository that allows the distribution to deliver urgent security patches ahead of upstream releases when public exploits are available.
Microsoft has confirmed that a zero-day cross-site scripting vulnerability in on-premises Exchange Server is being actively exploited in the wild, prompting an immediate addition to CISA's Known Exploited Vulnerabilities catalog.
Opportunistic scammers are increasingly leveraging global geopolitical tensions to fuel a surge in social engineering attacks, ranging from fake charities to sophisticated infostealer campaigns.
The UK's Science, Innovation and Technology Committee is calling for stricter online safety laws, arguing that social media platforms should be regulated with the same scrutiny as hazardous consumer products to better protect young users.
Security researchers have identified a new, China-linked malware implant called TencShell that uses customized open-source tooling and mimics legitimate web traffic to compromise global manufacturing targets.
Google has released Chrome 148 to address 79 vulnerabilities, including 14 critical-severity bugs that could potentially lead to remote code execution.
Financial services organizations are facing a sharp increase in cyberattacks, with hands-on-keyboard intrusions rising by 43% globally as eCrime and nation-state actors intensify their campaigns.
Security researchers have warned that the adoption of new, modular malware libraries is forcing a shift in how defenders must approach threat detection to counter increasingly evasive payloads.
Cisco has patched a critical authentication bypass zero-day in its Catalyst SD-WAN software that is currently being exploited by a sophisticated threat actor to gain administrative control.
Microsoft is urging administrators to secure on-premises Exchange Servers against a critical spoofing vulnerability that is currently being exploited in the wild.
New research from the Vector Institute warns that traditional deepfake detection tools are failing in real-world environments because they rely on outdated forensic assumptions that modern generative models have already surpassed.
A new study reveals that "zombie linkages"—trust records tied to expired or transferred domains—persist across Web PKI, software repositories, and blockchain naming systems, creating long-term security risks.