Stories cluster related articles into a single narrative, linked to the underlying CVEs and affected products. 7,960 stories synthesized.
Toni de la Fuente, founder of Prowler, argues that artificial intelligence is acting as a force multiplier for cloud security tools rather than a replacement for them.
Organizations are pivoting from rapid AI adoption to a focus on measurable ROI and increased human oversight as 2026 data reveals widespread executive skepticism regarding AI's current business value.
Security researchers have identified a series of critical vulnerabilities, including a new flaw in NGINX and a zero-day exploit affecting Cisco systems, alongside a concerning bug in Outlook's link preview feature.
Several cybersecurity vendors have announced new product updates this week, focusing on AI governance, cloud security posture management, and physical data protection.
CISA has mandated that all federal agencies patch a critical, actively exploited authentication bypass vulnerability in Cisco Catalyst SD-WAN systems by May 17, 2026.
A 23-year-old train enthusiast disrupted Taiwan's high-speed rail network by spoofing emergency radio signals, highlighting persistent security vulnerabilities in critical infrastructure communication protocols.
Mandiant has tracked a threat actor dubbed UNC6671 operating BlackFile, a vishing extortion campaign that uses phone calls to lure victims into brand-specific credential harvesting portals, compromising SSO accounts and MFA tokens.
The hacker group TeamPCP is attempting to sell 5 gigabytes of stolen Mistral AI source code following a widespread supply-chain attack that also impacted OpenAI and numerous other software projects.
Security experts are questioning the validity of claims by the ShinyHunters extortion group that they have destroyed data stolen from 275 million Canvas users following an agreement with the platform's parent company, Instructure.
Tenable has launched an agentic AI tool, Tenable Hexa AI, to help organizations identify and decommission "zombie" cloud assets that contribute to both security vulnerabilities and unnecessary infrastructure costs.
A critical authentication bypass vulnerability in the Burst Statistics WordPress plugin is being actively exploited to grant attackers full administrative access to approximately 115,000 websites.
SecurityScorecard has acquired the Internet scanning startup Driftnet to enhance its third-party risk management platform with real-time threat intelligence capabilities.
Instructure Holdings has paid a ransom to the ShinyHunters cybercriminal group following multiple breaches of its Canvas learning platform, despite expert warnings that such payments offer no guarantee of data security.
A critical authentication bypass vulnerability in Palo Alto Networks PAN-OS (CVE-2026-0265) allows remote unauthenticated attackers to bypass authentication when Cloud Authentication Service is enabled on a login interface.
OpenAI disclosed that two employees' devices were compromised in the TanStack supply chain attack linked to the TeamPCP extortion gang, prompting the company to rotate code-signing certificates and requiring macOS users to update by June 12.
Security researchers earned over $385,000 in prizes on the second day of Pwn2Own Berlin 2026 by demonstrating 15 zero-day exploits against Microsoft Exchange, Windows 11, and various AI platforms.
CISA added Microsoft vulnerability CVE-2026-42897 to its Known Exploited Vulnerabilities catalog on May 15, 2026, confirming active exploitation in the wild.
Malicious versions of the widely used node-ipc npm package have been discovered containing obfuscated code designed to steal cloud credentials, SSH keys, and CI/CD secrets from developer machines.
CISA added Cisco vulnerability CVE-2026-20182 to its Known Exploited Vulnerabilities catalog on May 14, 2026, confirming active exploitation in the wild.
The Belarus-aligned threat group FrostyNeighbor (Ghostwriter) has been conducting a highly targeted spear-phishing campaign since March 2026 against government and military organizations in Poland and Ukraine.
CISA has published a series of advisories covering vulnerabilities in Siemens industrial products, including session hijacking in SIPROTEC 5, OS command injection in Ruggedcom ROX, and multiple flaws in SIMATIC S7 PLCs and other ICS devices.
This week's security landscape was marked by the disclosure of a Cisco SD-WAN zero-day and the continued exploitation of unpatched Microsoft Exchange Server vulnerabilities.
Cisco has confirmed active exploitation of CVE-2026-20182, a CVSS 10.0 authentication bypass in Catalyst SD-WAN Controller and Manager that allows unauthenticated attackers to gain full administrative privileges.
Rapid7 has published an analysis arguing that SD-WAN controllers represent a concentrated risk point, where a single vulnerability can give attackers 'god mode' access to an entire enterprise network.